$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/564fb67d-a704-3d60-820c-0421a48cbeb3.roa File: 564fb67d-a704-3d60-820c-0421a48cbeb3.roa (raw, json) Hash identifier: iLznVlV0S5vKLbccjK9Kf20mKEAaIkYmYR3DRa8zS7c= Subject key identifier: 41:7E:72:37:6E:6D:A7:0D:13:81:25:4B:37:2B:A9:13:1E:6E:59:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCF8DA54D72D8CA8D1F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/564fb67d-a704-3d60-820c-0421a48cbeb3.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396550 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:cf:8d:a5:4d:72:d8:ca:8d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=5298e4cd-56c0-4653-b739-e06da6f14870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:99:93:30:0b:eb:06:d5:12:49:aa:8e:18: 45:67:4d:87:11:a1:75:7b:51:90:4b:0e:a0:90:47: 91:65:6a:aa:bb:ee:50:78:11:34:1a:55:f2:8d:94: 80:22:d9:44:4f:a5:c5:a5:8b:a8:ee:7e:ce:8c:04: 62:ca:92:bd:b1:d3:54:56:d9:1f:72:c8:b2:40:32: 6c:d4:2b:c7:c2:39:11:f3:aa:22:18:51:68:5a:17: 73:8c:6e:f3:1c:cf:21:90:5e:ea:e6:87:da:61:e7: c3:e0:65:4d:2f:7e:b1:01:58:fe:db:81:76:76:bd: 0e:2f:d1:86:36:3d:b6:48:3b:b8:b6:9b:62:e5:8e: f2:75:60:52:4a:ad:08:80:b4:4e:1b:1c:4e:65:48: 23:a1:82:1a:4c:37:d7:e1:c4:22:35:fd:96:f7:11: 21:3f:e0:94:2b:b8:f2:0d:77:ac:27:28:0e:11:2f: 79:12:6c:e7:89:ab:aa:e1:44:7b:7a:b9:25:58:6f: 4d:c0:d8:a0:de:58:07:77:6d:1b:95:64:a2:5e:bc: 1f:94:39:33:c1:f5:a4:d7:3d:0e:c8:ac:db:51:f4: bb:45:e6:db:60:c5:f5:49:3e:12:68:91:c2:a6:0b: b1:ca:45:d3:16:90:24:06:71:92:25:80:9c:72:1a: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7E:72:37:6E:6D:A7:0D:13:81:25:4B:37:2B:A9:13:1E:6E:59:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/564fb67d-a704-3d60-820c-0421a48cbeb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:64:07:b9:bc:f5:d3:da:42:ff:ad:67:2e:4c:68:35:6b:c6: 53:fc:96:50:b3:48:a9:b6:4a:b7:3f:1f:cd:86:56:76:62:f3: 12:a9:04:e2:5b:09:fc:fc:f5:4f:ea:da:e2:14:50:fe:84:a2: 7f:45:59:07:32:1d:2e:c9:6e:bb:15:5f:3d:5d:df:4d:2c:cc: 29:70:bd:ee:29:0d:6a:c0:40:52:09:df:1c:55:cf:d3:b9:24: 8d:ea:99:ca:a5:13:25:04:15:b7:9c:09:c7:32:fc:34:b3:8c: 6a:f5:7f:6f:8e:7f:62:3b:2b:1c:d6:23:85:2a:5e:58:a6:af: 0d:30:9e:87:12:94:15:bd:ab:7c:4d:50:b9:e7:ca:7e:99:9f: f3:d3:c7:95:87:f9:5c:eb:19:74:f6:ab:ac:3c:70:3e:be:79: 57:6e:65:22:8d:19:6d:62:d0:d6:df:8e:8a:00:77:c7:9a:e6: de:88:19:30:bf:31:83:39:93:a9:fa:9e:3f:f2:e1:57:2d:05: 0d:9f:ab:cf:3f:df:ec:86:2d:e3:f0:0b:37:2b:3e:74:a6:18: 00:e5:cc:36:06:c1:a1:f6:a1:7b:ea:b5:fd:64:4e:dd:dd:16: 16:3b:47:21:09:35:9a:66:07:04:69:63:98:91:51:e3:26:0d: e4:c2:2c:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vM+NpU1y2MqNHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NTI5OGU0Y2QtNTZjMC00NjUzLWI3MzktZTA2ZGE2ZjE0ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVSZkzAL6wbVEkmqjhhFZ02HEaF1e1GQSw6g kEeRZWqqu+5QeBE0GlXyjZSAItlET6XFpYuo7n7OjARiypK9sdNUVtkfcsiyQDJs 1CvHwjkR86oiGFFoWhdzjG7zHM8hkF7q5ofaYefD4GVNL36xAVj+24F2dr0OL9GG Nj22SDu4tpti5Y7ydWBSSq0IgLROGxxOZUgjoYIaTDfX4cQiNf2W9xEhP+CUK7jy DXesJygOES95Emzniauq4UR7erklWG9NwNig3lgHd20blWSiXrwflDkzwfWk1z0O yKzbUfS7RebbYMX1ST4SaJHCpguxykXTFpAkBnGSJYCcchqskwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEF+cjdubacNE4ElSzcrqRMebln8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTY0ZmI2N2QtYTcwNC0z ZDYwLTgyMGMtMDQyMWE0OGNiZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZkB7m89dPaQv+tZy5MaDVrxlP8llCzSKm2Src/H82GVnZi8xKp BOJbCfz89U/q2uIUUP6Eon9FWQcyHS7JbrsVXz1d300szClwve4pDWrAQFIJ3xxV z9O5JI3qmcqlEyUEFbecCccy/DSzjGr1f2+Of2I7KxzWI4UqXlimrw0wnocSlBW9 q3xNULnnyn6Zn/PTx5WH+VzrGXT2q6w8cD6+eVduZSKNGW1i0NbfjooAd8ea5t6I GTC/MYM5k6n6nj/y4VctBQ2fq88/3+yGLePwCzcrPnSmGADlzDYGwaH2oXvqtf1k Tt3dFhY7RyEJNZpmBwRpY5iRUeMmDeTCLCc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:58 2025 by rpki-client