$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a02ab11-1799-3398-9928-693774fb02fd.roa File: 6a02ab11-1799-3398-9928-693774fb02fd.roa (raw, json) Hash identifier: G+8WLlZs/fEfkZ2gMo9F3WIzj26TlkLcTGKFUAyMVNY= Subject key identifier: 3C:CF:06:CB:74:34:73:8D:5B:DA:4A:E0:F7:EB:18:A1:63:40:B8:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD123AEA0A9898D775E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a02ab11-1799-3398-9928-693774fb02fd.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396630 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d1:23:ae:a0:a9:89:8d:77:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=a8209c38-67d2-4f62-96b9-1c30340a0b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e3:d4:a3:21:12:cf:34:72:57:18:68:e1:db: 4d:05:bf:f5:25:fd:66:fe:2a:49:4e:26:07:07:a9: b9:9c:e9:1d:d6:f3:28:2a:39:06:fe:3f:1b:0e:2e: 13:c2:2a:f9:bc:c9:cf:46:87:fa:c7:52:fb:90:f5: 25:01:bf:68:e9:95:88:2c:c5:54:cc:e5:f4:fb:25: 70:88:98:f6:be:f3:1f:26:17:26:e3:c0:a4:de:95: 27:de:0c:9f:e8:d1:9e:87:28:7e:90:51:58:ce:a6: 08:61:fd:75:eb:4a:34:2d:b0:85:06:21:ea:c1:bf: 78:1e:2a:7a:24:91:d1:0e:17:bb:d2:a6:aa:7a:ab: db:8b:12:26:07:b1:b6:5c:3c:48:04:a8:1a:3e:15: 43:22:a5:a9:59:f9:67:08:a8:5c:ce:fe:29:51:3b: b8:4f:d0:fc:6a:27:aa:0c:1c:c8:da:54:82:74:2c: 47:f0:9f:91:a4:2c:75:bf:9b:fc:8c:70:bb:9e:e1: 0a:c8:dd:77:29:35:4c:f7:28:ae:03:bc:e3:e5:06: 32:21:1e:32:55:eb:fb:be:95:a1:cc:fd:a1:0f:0b: b6:66:69:61:52:2b:25:74:9f:c0:9f:88:48:79:6a: aa:6b:11:a5:7a:06:5a:26:3b:7e:96:fe:04:18:34: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:06:CB:74:34:73:8D:5B:DA:4A:E0:F7:EB:18:A1:63:40:B8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a02ab11-1799-3398-9928-693774fb02fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b6:36:79:95:6f:f6:00:2a:c4:31:0e:e7:31:c9:f7:91:76: aa:bf:85:fc:63:df:91:7a:68:c8:93:d6:94:cf:ad:e9:ba:af: 9f:58:db:ea:da:f7:11:c8:d5:57:a4:c5:94:7d:29:21:9a:84: 82:99:47:77:06:6d:bc:dc:65:c1:5d:39:d8:30:49:09:cb:d3: c9:15:c5:bd:1c:a6:53:d9:2d:c1:0f:2a:ee:5b:9a:65:f6:b5: 93:26:a5:24:81:58:ac:24:78:17:93:84:47:54:79:73:39:60: d1:9a:6d:24:bf:54:b7:93:76:b8:e4:d4:4a:67:ff:7f:fc:31: 07:1b:d2:72:39:6d:77:40:c2:99:5a:96:e0:fa:dd:4a:2d:64: 09:0d:20:23:3a:82:e0:4c:91:65:d3:ec:13:56:bd:76:87:0e: 32:46:d9:13:a1:b8:1d:29:ba:14:dd:08:d1:99:c5:52:ac:bd: 1a:2a:64:a2:64:6a:28:0f:70:74:11:9d:43:07:74:4c:b5:b6: 7b:93:28:81:e7:78:b0:ba:9c:be:b5:bc:28:f6:35:fb:03:bf: ed:a1:6e:4e:d5:d3:63:f3:0d:8f:76:66:64:ff:1b:e3:e6:9a: b9:74:b2:76:fb:a1:8c:c7:22:cd:2f:6d:02:44:6f:aa:1a:25: 2e:eb:6f:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNEjrqCpiY13XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YTgyMDljMzgtNjdkMi00ZjYyLTk2YjktMWMzMDM0MGEwYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuPUoyESzzRyVxho4dtNBb/1Jf1m/ipJTiYH B6m5nOkd1vMoKjkG/j8bDi4Twir5vMnPRof6x1L7kPUlAb9o6ZWILMVUzOX0+yVw iJj2vvMfJhcm48Ck3pUn3gyf6NGehyh+kFFYzqYIYf1160o0LbCFBiHqwb94Hip6 JJHRDhe70qaqeqvbixImB7G2XDxIBKgaPhVDIqWpWflnCKhczv4pUTu4T9D8aieq DBzI2lSCdCxH8J+RpCx1v5v8jHC7nuEKyN13KTVM9yiuA7zj5QYyIR4yVev7vpWh zP2hDwu2ZmlhUisldJ/An4hIeWqqaxGlegZaJjt+lv4EGDT8XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzPBst0NHONW9pK4PfrGKFjQLgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmEwMmFiMTEtMTc5OS0z Mzk4LTk5MjgtNjkzNzc0ZmIwMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABu2NnmVb/YAKsQxDucxyfeRdqq/hfxj35F6aMiT1pTPrem6r59Y 2+ra9xHI1VekxZR9KSGahIKZR3cGbbzcZcFdOdgwSQnL08kVxb0cplPZLcEPKu5b mmX2tZMmpSSBWKwkeBeThEdUeXM5YNGabSS/VLeTdrjk1Epn/3/8MQcb0nI5bXdA wplaluD63UotZAkNICM6guBMkWXT7BNWvXaHDjJG2ROhuB0puhTdCNGZxVKsvRoq ZKJkaigPcHQRnUMHdEy1tnuTKIHneLC6nL61vCj2NfsDv+2hbk7V02PzDY92ZmT/ G+Pmmrl0snb7oYzHIs0vbQJEb6oaJS7rb+Q= -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:41 2025 by rpki-client