$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70eb926e-dace-36b6-852a-882178e280ea.roa File: 70eb926e-dace-36b6-852a-882178e280ea.roa (raw, json) Hash identifier: CXsqHoWKSuqPOQQGZxWbuWgHK/OU4jWcFyGqfhq+CyU= Subject key identifier: AB:F2:B0:AF:80:DF:B7:BD:52:F1:86:CD:FE:DA:11:E4:72:3F:F8:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCA07551BDBB4C3997D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70eb926e-dace-36b6-852a-882178e280ea.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396634 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ca:07:55:1b:db:b4:c3:99:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=ffbba4e8-8f8f-4a58-ab9d-c06162559e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:50:d7:ee:84:04:0e:1b:cc:ad:04:dc:71: 10:fe:3e:a7:67:74:be:86:f2:3b:44:fe:d6:e0:07: f0:1f:27:ba:be:7d:ab:7d:80:2c:94:79:a0:d2:ae: 7e:9d:a6:35:1a:ce:d4:af:ad:39:91:d3:8e:11:60: 10:28:7a:2c:38:cc:be:81:90:ee:92:4f:f1:45:29: 3b:3d:7a:e3:e3:a2:1d:86:af:bd:fc:42:a3:3d:10: 21:7d:87:9b:9b:fb:7b:16:99:88:34:0c:58:1a:33: 84:6d:fb:bd:0f:13:bc:09:27:d4:1a:db:05:39:4f: 82:a7:c3:61:64:08:f8:9e:6f:31:9f:4f:eb:27:66: bb:34:c2:1c:b7:8e:7a:47:9d:1d:15:21:f4:b7:a7: ad:9d:b2:6a:01:1f:51:03:82:a0:9d:30:2a:b9:29: 34:e9:b7:b9:56:99:6f:fa:3f:32:9c:f0:c8:8b:69: 0f:45:94:c5:ef:9f:05:08:2b:03:17:fd:00:21:06: e0:f1:0d:3d:9c:be:76:a3:64:73:3e:b1:8e:47:6e: d1:d1:4e:e8:d3:74:2d:b6:76:cb:5a:f0:df:19:de: 32:54:f6:96:77:c0:71:7c:a6:82:de:a2:56:0f:9f: 13:58:32:e6:44:dc:1c:f1:96:86:eb:c1:c9:31:68: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F2:B0:AF:80:DF:B7:BD:52:F1:86:CD:FE:DA:11:E4:72:3F:F8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70eb926e-dace-36b6-852a-882178e280ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b6:87:c8:12:f1:cb:a7:bb:20:de:4a:c9:6f:69:b6:74:ec: 96:0c:55:b3:54:19:5b:64:48:31:5a:1f:dc:e8:58:ed:f3:fe: 64:40:12:7b:12:68:2a:0a:fb:3a:b6:ee:82:ae:11:9b:48:48: f7:e2:38:87:ea:cc:0e:e0:29:17:92:ca:77:67:99:48:29:bb: 57:16:bf:96:de:18:52:ad:39:c7:fd:2c:a2:94:83:61:c1:5d: bb:6d:a7:a3:9f:51:34:41:5b:ec:a9:62:09:6d:36:09:7f:28: 69:7c:25:eb:01:38:03:d6:9d:62:79:6a:cc:ec:cb:e1:23:2b: 51:df:09:93:2a:62:75:26:ff:7e:0c:09:ce:ce:e7:14:3b:a5: 16:97:3b:dc:b0:3c:01:d8:01:98:3f:91:b4:69:0b:b4:7e:f5: 23:5a:4a:b5:6d:ef:09:21:41:df:1c:e8:ff:25:6f:3f:40:3f: 4a:75:b5:c7:bd:a2:af:a8:1b:30:fc:69:6f:46:72:98:0f:0b: d4:9a:24:11:91:14:65:d4:3e:b9:26:4e:d3:c7:f4:d1:b3:24: 01:82:1b:f6:27:3b:94:17:e6:b5:c2:91:de:00:24:41:4b:76: 62:b7:2b:03:e8:1d:ff:b5:1e:a8:cc:86:4f:22:3a:f3:ba:12: 04:fa:20:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMoHVRvbtMOZfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZmZiYmE0ZTgtOGY4Zi00YTU4LWFiOWQtYzA2MTYyNTU5ZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoZQ1+6EBA4bzK0E3HEQ/j6nZ3S+hvI7RP7W 4AfwHye6vn2rfYAslHmg0q5+naY1Gs7Ur605kdOOEWAQKHosOMy+gZDukk/xRSk7 PXrj46Idhq+9/EKjPRAhfYebm/t7FpmINAxYGjOEbfu9DxO8CSfUGtsFOU+Cp8Nh ZAj4nm8xn0/rJ2a7NMIct456R50dFSH0t6etnbJqAR9RA4KgnTAquSk06be5Vplv +j8ynPDIi2kPRZTF758FCCsDF/0AIQbg8Q09nL52o2RzPrGOR27R0U7o03QttnbL WvDfGd4yVPaWd8BxfKaC3qJWD58TWDLmRNwc8ZaG68HJMWhjUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKvysK+A37e9UvGGzf7aEeRyP/gtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBlYjkyNmUtZGFjZS0z NmI2LTg1MmEtODgyMTc4ZTI4MGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABK2h8gS8cunuyDeSslvabZ07JYMVbNUGVtkSDFaH9zoWO3z/mRA EnsSaCoK+zq27oKuEZtISPfiOIfqzA7gKReSyndnmUgpu1cWv5beGFKtOcf9LKKU g2HBXbttp6OfUTRBW+ypYgltNgl/KGl8JesBOAPWnWJ5aszsy+EjK1HfCZMqYnUm /34MCc7O5xQ7pRaXO9ywPAHYAZg/kbRpC7R+9SNaSrVt7wkhQd8c6P8lbz9AP0p1 tce9oq+oGzD8aW9GcpgPC9SaJBGRFGXUPrkmTtPH9NGzJAGCG/YnO5QX5rXCkd4A JEFLdmK3KwPoHf+1HqjMhk8iOvO6EgT6INY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:45:01 2025 by rpki-client