$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa File: 4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa (raw, json) Hash identifier: W6oD5wvKVqrVMM+Szxf5kSOWDPpfKIbkdCRb7gIRNCc= Subject key identifier: 83:BD:07:D4:1E:15:90:7C:48:C5:D1:73:EF:5A:97:4B:00:BF:A8:CE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B838212303F0A116AD3080700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396605 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:12:30:3f:0a:11:6a:d3:08:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=0075621e-2495-4fd9-9421-3d6b4e03c143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:ca:f7:d0:df:34:b2:d8:c0:e9:d3:0b:e8: 9f:a9:cd:1e:6d:27:67:72:8b:3e:49:95:30:d5:28: c6:53:12:e2:b9:ad:03:eb:5f:e8:8a:93:d6:5a:b7: cf:d1:0e:98:41:3f:05:35:f7:29:09:5b:68:ce:9f: f2:31:71:81:f1:36:df:b9:3c:21:73:81:79:78:ed: bd:be:17:b7:9c:fc:8f:0a:c4:d6:20:56:69:97:38: 73:9e:bd:78:3c:d3:38:a7:21:72:61:e3:c1:50:8f: fe:e2:2c:74:6b:ce:c8:86:e0:39:af:83:be:57:63: 84:d2:2f:84:90:41:89:56:2e:8f:65:1d:5c:b5:43: 5e:98:4b:d8:fa:df:ae:bf:a7:b7:7d:5f:a2:d9:8d: 34:bb:a6:4b:6c:e7:59:cc:eb:8c:da:cf:84:ad:08: b4:41:33:04:42:69:f0:0a:a1:4c:b2:0d:9e:30:47: 93:de:fd:0f:d9:2e:8c:c8:13:01:10:68:0c:fa:2b: 83:3f:c6:74:a8:27:18:71:6d:19:a2:a7:67:22:88: c7:66:c2:3e:51:07:22:68:05:79:a7:e2:07:e8:cd: 0a:43:bf:ea:02:a3:77:4a:b2:7a:fe:86:03:f4:0b: 10:43:3f:1f:8c:9c:12:19:85:33:ad:52:77:24:65: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BD:07:D4:1E:15:90:7C:48:C5:D1:73:EF:5A:97:4B:00:BF:A8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2c:f6:36:9b:9b:f1:56:58:ef:f7:ce:6f:66:ac:13:86:dd: 22:3d:d7:a5:56:3e:65:5e:a4:9f:a2:7b:e2:52:f6:77:89:59: 04:1e:9b:e3:8b:cc:c9:18:32:f6:fc:e4:11:20:9a:70:20:04: 88:be:1c:9d:c1:44:a4:69:3f:ec:76:4a:f7:f8:ea:09:22:3f: d3:33:ab:ed:6c:1a:f1:2e:8f:8a:96:90:26:9b:9f:b8:02:f6: 2e:1e:31:18:52:4e:14:45:08:61:21:95:65:6f:ed:af:f6:b4: 44:d8:43:08:76:5d:5f:8d:10:61:61:91:73:65:54:41:ef:cc: 68:03:d1:da:83:9c:56:76:8f:1d:96:74:66:66:17:a8:8f:f0: 1f:76:e5:06:3f:99:3b:8d:cc:43:fa:36:bc:d9:1a:90:fd:e7: fe:43:0a:8a:ba:7f:9c:7f:ac:fc:8e:cd:f6:77:6b:d7:56:75: 3b:f7:b0:ad:13:fa:9d:dd:72:28:1e:fb:12:e9:cc:35:9a:46: d4:b5:a7:23:22:ef:32:c2:fb:8a:27:75:ab:0b:f0:6e:58:a0: c3:23:2c:23:47:0d:8b:9a:10:2c:f1:91:3a:b0:76:d6:83:c4: a4:2a:c3:9e:84:00:c4:eb:db:bc:39:36:cd:1a:0e:b8:71:f0: 68:4a:3c:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDghIwPwoRatMIBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk MDA3NTYyMWUtMjQ5NS00ZmQ5LTk0MjEtM2Q2YjRlMDNjMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWzK99DfNLLYwOnTC+ifqc0ebSdncos+SZUw 1SjGUxLiua0D61/oipPWWrfP0Q6YQT8FNfcpCVtozp/yMXGB8TbfuTwhc4F5eO29 vhe3nPyPCsTWIFZplzhznr14PNM4pyFyYePBUI/+4ix0a87IhuA5r4O+V2OE0i+E kEGJVi6PZR1ctUNemEvY+t+uv6e3fV+i2Y00u6ZLbOdZzOuM2s+ErQi0QTMEQmnw CqFMsg2eMEeT3v0P2S6MyBMBEGgM+iuDP8Z0qCcYcW0ZoqdnIojHZsI+UQciaAV5 p+IH6M0KQ7/qAqN3SrJ6/oYD9AsQQz8fjJwSGYUzrVJ3JGXKUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIO9B9QeFZB8SMXRc+9al0sAv6jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGVhMTRmZjAtZGZkZS0z YTU0LTkzMDYtYzM2ZDM1ZjE5MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKAs9jabm/FWWO/3zm9mrBOG3SI916VWPmVepJ+ie+JS9neJWQQe m+OLzMkYMvb85BEgmnAgBIi+HJ3BRKRpP+x2Svf46gkiP9Mzq+1sGvEuj4qWkCab n7gC9i4eMRhSThRFCGEhlWVv7a/2tETYQwh2XV+NEGFhkXNlVEHvzGgD0dqDnFZ2 jx2WdGZmF6iP8B925QY/mTuNzEP6NrzZGpD95/5DCoq6f5x/rPyOzfZ3a9dWdTv3 sK0T+p3dcige+xLpzDWaRtS1pyMi7zLC+4ondasL8G5YoMMjLCNHDYuaECzxkTqw dtaDxKQqw56EAMTr27w5Ns0aDrhx8GhKPMU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:17:10 2025 by rpki-client