$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70d5f302-bf90-3cd7-b0bb-4d49abe51564.roa File: 70d5f302-bf90-3cd7-b0bb-4d49abe51564.roa (raw, json) Hash identifier: dH6EMZKXt99aiE9Dax/RPOuL143fC9Pogm3P7sZtt/g= Subject key identifier: AF:52:99:22:CF:CB:71:4A:DD:24:99:D9:C1:5F:39:A9:42:68:35:30 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A7879475957F89DFDE2D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70d5f302-bf90-3cd7-b0bb-4d49abe51564.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 397202 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:87:94:75:95:7f:89:df:de:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=59128554-042c-444e-bb85-5a817d61ad88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2d:bf:a4:2c:28:df:8e:ed:03:fd:80:70:60: b5:17:3e:55:1a:ad:12:97:4d:09:94:5b:5f:30:f7: 76:aa:ca:06:3c:a4:6b:27:c7:82:c7:40:be:de:09: 04:e9:e8:70:9a:4e:57:95:34:b3:12:b0:1e:c6:6d: e0:35:46:6c:f9:d3:d3:b7:df:98:d0:08:c5:27:9d: b7:50:dd:c2:e8:71:c6:d2:99:57:f1:a1:07:91:a9: bd:1a:f3:ca:d8:7d:ce:a1:92:15:e4:f4:21:98:c5: 09:e6:dc:fb:83:ab:1b:0b:08:f5:ff:91:c9:8e:22: 6b:61:c7:02:7b:c2:f1:99:07:b3:24:b4:2e:7a:3e: aa:6c:51:8f:1f:f7:e3:98:18:76:30:e3:ea:f3:5a: 33:39:51:37:7c:05:10:c6:1d:d9:ce:8c:ed:d5:68: 62:cd:bc:a0:32:69:68:25:55:4a:f2:29:b1:82:b2: b6:af:5f:57:1f:b0:0c:ed:d2:be:46:44:02:52:6a: c6:85:aa:ef:1f:57:78:fc:4e:fb:69:72:6b:91:07: 84:d2:c8:0f:03:22:49:eb:ba:cc:f9:d6:d4:43:82: 9e:af:a0:c2:ba:75:1f:a2:92:10:2b:fc:62:97:c7: 22:9d:5c:ad:17:9f:af:32:37:93:9d:16:9c:93:37: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:99:22:CF:CB:71:4A:DD:24:99:D9:C1:5F:39:A9:42:68:35:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70d5f302-bf90-3cd7-b0bb-4d49abe51564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fe:e0:03:b7:6f:04:eb:de:7b:fe:52:85:8e:d0:64:49:04: 37:72:db:cc:3d:af:39:f2:98:7e:36:3d:38:00:ba:5b:b1:b6: 54:cd:07:c7:63:0e:32:e2:9b:d6:ee:0f:ac:6d:aa:66:64:9e: 7b:85:1e:75:eb:0d:1a:07:c6:5d:4e:49:b3:03:02:fa:40:08: 9a:32:04:77:80:5d:4b:f5:7a:37:7d:1f:49:b8:3b:c7:32:f2: ef:4a:70:1f:8d:99:34:dd:21:4a:2b:1f:84:8f:bd:df:58:bf: 33:86:38:45:d4:c3:39:6f:ea:e4:4c:e5:cd:81:bc:62:49:5c: 12:c3:2c:21:00:e2:a4:77:f3:0a:c4:88:85:82:57:e9:d7:c9: 10:09:65:75:54:66:41:a1:ab:f4:d3:8a:3f:ed:f8:22:dc:83: 41:3b:75:7b:9d:8c:7e:84:b5:d1:de:9c:74:a1:9c:97:5a:28: 11:b8:fd:90:e1:23:19:17:e4:57:fd:85:8a:92:5e:90:ac:ea: ac:fd:98:42:8d:c0:f0:81:ac:30:3d:70:c6:d4:62:02:54:9f: cc:e6:fa:64:72:01:57:75:c8:15:9f:61:71:a7:42:a1:9e:2c: 28:df:bf:ca:8c:f1:b9:0b:3d:16:ef:87:04:dc:f1:cd:cd:68: 1f:69:0e:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4eUdZV/id/eLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NTkxMjg1NTQtMDQyYy00NDRlLWJiODUtNWE4MTdkNjFhZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS2/pCwo347tA/2AcGC1Fz5VGq0Sl00JlFtf MPd2qsoGPKRrJ8eCx0C+3gkE6ehwmk5XlTSzErAexm3gNUZs+dPTt9+Y0AjFJ523 UN3C6HHG0plX8aEHkam9GvPK2H3OoZIV5PQhmMUJ5tz7g6sbCwj1/5HJjiJrYccC e8LxmQezJLQuej6qbFGPH/fjmBh2MOPq81ozOVE3fAUQxh3Zzozt1WhizbygMmlo JVVK8imxgrK2r19XH7AM7dK+RkQCUmrGharvH1d4/E77aXJrkQeE0sgPAyJJ67rM +dbUQ4Ker6DCunUfopIQK/xil8cinVytF5+vMjeTnRackzfRXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK9SmSLPy3FK3SSZ2cFfOalCaDUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBkNWYzMDItYmY5MC0z Y2Q3LWIwYmItNGQ0OWFiZTUxNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7+4AO3bwTr3nv+UoWO0GRJBDdy28w9rznymH42PTgAuluxtlTN B8djDjLim9buD6xtqmZknnuFHnXrDRoHxl1OSbMDAvpACJoyBHeAXUv1ejd9H0m4 O8cy8u9KcB+NmTTdIUorH4SPvd9YvzOGOEXUwzlv6uRM5c2BvGJJXBLDLCEA4qR3 8wrEiIWCV+nXyRAJZXVUZkGhq/TTij/t+CLcg0E7dXudjH6EtdHenHShnJdaKBG4 /ZDhIxkX5Ff9hYqSXpCs6qz9mEKNwPCBrDA9cMbUYgJUn8zm+mRyAVd1yBWfYXGn QqGeLCjfv8qM8bkLPRbvhwTc8c3NaB9pDg0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:52:43 2025 by rpki-client