$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84658c61-bc5b-37ef-ace1-f5387e3a3e91.roa File: 84658c61-bc5b-37ef-ace1-f5387e3a3e91.roa (raw, json) Hash identifier: i2W6um5Rfnt6QmKoStt7K/hggbiW9kXb0p9gJX4lYdw= Subject key identifier: E0:55:82:99:E5:A7:FE:E6:20:72:F5:0D:70:F6:B9:0D:35:59:7F:6D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B3DB6EF2835E29AD16D7F8080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84658c61-bc5b-37ef-ace1-f5387e3a3e91.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 36620 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:ef:28:35:e2:9a:d1:6d:7f:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=90ef0e0e-8bdc-4333-a158-5575e4163ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:9e:ea:ca:9a:e8:48:40:08:74:26:75:b8: 99:55:52:45:a4:b4:e2:a0:94:98:e7:f9:b0:96:67: 5f:ea:80:8f:6e:ae:63:8a:60:2d:e8:5c:2f:2f:fd: d9:86:24:f9:f9:56:2a:68:3e:82:82:ff:8c:c2:d2: 68:cf:16:c7:06:5a:21:dd:b1:52:c2:98:b4:ca:16: 32:fa:37:a1:5e:57:a4:ed:93:ad:3d:a2:2e:8b:8a: 68:14:31:e8:e0:e2:b5:3a:c0:97:58:7c:25:e1:26: ae:91:36:ef:89:b4:45:df:0e:c4:64:24:e8:b1:68: 96:98:0d:c8:a0:b9:5b:7d:78:69:7a:e0:68:10:f6: 3b:f6:af:04:8e:d9:b5:a2:b0:4e:ea:d1:26:e6:45: 4d:2d:20:2e:4d:26:a8:46:48:5f:80:17:93:2d:01: 96:54:3d:32:19:26:c9:72:5b:18:59:59:de:67:be: a5:21:5e:f4:54:e8:47:f7:e6:a2:da:04:1b:84:ff: 6d:06:bb:61:3b:8c:81:cf:48:f7:45:db:95:23:bb: bf:99:dd:5d:04:a2:28:fb:68:ce:d2:bb:aa:65:69: 38:f4:b2:d6:d8:00:14:63:c3:3f:d3:84:e1:39:cd: 8a:3e:54:2e:9b:94:92:8d:b8:22:1e:9e:ce:d9:c7: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:55:82:99:E5:A7:FE:E6:20:72:F5:0D:70:F6:B9:0D:35:59:7F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84658c61-bc5b-37ef-ace1-f5387e3a3e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:14:af:8b:b7:13:01:79:22:e4:bd:84:6d:fa:23:f3:de:63: bc:4d:52:12:90:9b:ec:cc:4d:f3:1e:f9:a3:ca:01:ff:17:60: ca:6e:9b:61:8d:76:d9:f9:69:aa:91:d6:fb:09:90:9b:a1:cf: 42:7d:4b:28:f2:59:0a:8b:5b:6d:bf:e4:9f:98:d2:fc:4b:09: 57:2c:ab:29:b3:8d:79:69:fb:c1:84:27:d7:ec:80:c9:56:c7: 26:9e:3a:d6:ec:aa:d6:f3:85:23:30:2a:5d:44:dc:7e:44:10: a8:53:d7:74:eb:4d:48:6f:6a:ae:d1:b6:72:79:09:e1:4c:0d: dd:51:9c:90:1c:4b:07:06:df:30:bb:72:a6:8c:b8:03:66:3a: 8d:84:6e:a8:b9:f4:b4:e7:57:d4:ea:b3:34:ff:bf:ce:b3:eb: 02:15:9e:39:b9:31:98:4f:5a:96:b7:59:7f:99:62:cf:67:bf: 77:89:78:07:0e:a2:06:cc:39:9b:f1:bd:dd:7a:4e:93:6a:09: ad:7b:c5:1b:be:91:75:4c:5b:a4:94:86:18:51:c8:10:f9:69: 26:b0:74:7d:b4:b4:4d:1b:20:49:03:c8:28:db:d8:35:31:69: 54:76:41:47:c6:48:2f:22:f4:d5:b3:3f:95:19:aa:bc:8e:78: 69:f8:66:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs9tu8oNeKa0W1/gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTBlZjBlMGUtOGJkYy00MzMzLWExNTgtNTU3NWU0MTYzY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKqe6sqa6EhACHQmdbiZVVJFpLTioJSY5/mw lmdf6oCPbq5jimAt6FwvL/3ZhiT5+VYqaD6Cgv+MwtJozxbHBloh3bFSwpi0yhYy +jehXlek7ZOtPaIui4poFDHo4OK1OsCXWHwl4SaukTbvibRF3w7EZCTosWiWmA3I oLlbfXhpeuBoEPY79q8Ejtm1orBO6tEm5kVNLSAuTSaoRkhfgBeTLQGWVD0yGSbJ clsYWVneZ76lIV70VOhH9+ai2gQbhP9tBrthO4yBz0j3RduVI7u/md1dBKIo+2jO 0ruqZWk49LLW2AAUY8M/04ThOc2KPlQum5SSjbgiHp7O2cfqkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOBVgpnlp/7mIHL1DXD2uQ01WX9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQ2NThjNjEtYmM1Yi0z N2VmLWFjZTEtZjUzODdlM2EzZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8FK+LtxMBeSLkvYRt+iPz3mO8TVISkJvszE3z HvmjygH/F2DKbpthjXbZ+Wmqkdb7CZCboc9CfUso8lkKi1ttv+SfmNL8SwlXLKsp s415afvBhCfX7IDJVscmnjrW7KrW84UjMCpdRNx+RBCoU9d0601Ib2qu0bZyeQnh TA3dUZyQHEsHBt8wu3KmjLgDZjqNhG6oufS051fU6rM0/7/Os+sCFZ45uTGYT1qW t1l/mWLPZ793iXgHDqIGzDmb8b3dek6Tagmte8UbvpF1TFuklIYYUcgQ+WkmsHR9 tLRNGyBJA8go29g1MWlUdkFHxkgvIvTVsz+VGaq8jnhp+GaO -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:17 2025 by rpki-client