$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70ef201-248a-3a2f-8170-3390d735a03b.roa File: a70ef201-248a-3a2f-8170-3390d735a03b.roa (raw, json) Hash identifier: FqWjRPyUmvuZj5BNDhZQ5EGbzGQIpkVpTMT3iZSuhYg= Subject key identifier: 0D:BE:A8:74:22:6F:05:52:42:E5:9C:0B:69:32:84:EB:F1:6E:AB:B9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDDCF0CAA3ECFFDD18AF0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70ef201-248a-3a2f-8170-3390d735a03b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396602 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:dd:cf:0c:aa:3e:cf:fd:d1:8a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=e1086a3c-fc7c-4a90-b836-24b5e35035ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:8c:b7:33:8d:28:dd:f1:de:7f:02:7c:82: 59:80:4a:5d:f9:68:b8:75:48:c6:8e:09:d4:f7:3d: 59:15:d5:32:5e:50:72:d9:44:a3:e6:42:05:47:b9: 4a:e9:1a:9e:a4:9d:e0:ba:c6:e4:f3:a3:39:c6:70: 15:e6:e7:c3:b5:a3:60:0c:76:de:fd:8b:80:6c:77: 1a:57:2d:ed:ac:64:a1:94:fb:f8:0d:58:74:d3:b1: 21:76:f7:b9:77:8e:2f:ba:df:b8:20:4c:fd:fb:96: b6:63:00:2f:25:0a:33:51:85:db:18:46:0f:86:f4: be:52:58:bf:44:00:9f:93:59:27:4e:d9:9b:c4:f5: 8d:96:d3:f2:2d:31:b1:e1:28:ed:90:ae:50:2b:b1: 15:44:7f:74:37:9d:54:e5:d1:79:99:7d:67:91:a0: 74:32:ad:df:3f:9b:20:d7:7f:91:29:1f:26:c1:3e: 31:72:35:cc:0f:7f:b6:bd:3f:4b:b3:e9:fc:d9:63: 5c:8a:b6:ab:8e:56:5a:0a:e4:39:ed:98:4e:c5:4c: 0d:99:2e:a7:47:ab:bf:ae:96:29:29:9c:2b:01:b9: 2b:cb:d9:a5:f8:90:ac:98:6a:f7:8a:d7:a9:7f:01: 98:fd:df:a8:19:e6:a4:a1:3a:71:38:06:35:01:63: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BE:A8:74:22:6F:05:52:42:E5:9C:0B:69:32:84:EB:F1:6E:AB:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a70ef201-248a-3a2f-8170-3390d735a03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:75:ad:48:8e:04:98:dc:28:d6:80:b2:10:ac:d6:28:8c:34: 1d:b4:27:32:51:85:d2:72:66:71:24:76:b6:f7:22:be:04:98: 50:9a:b1:40:bf:ee:97:db:4b:4e:a3:0d:9d:06:5a:5d:75:e1: 8f:ae:90:f9:99:24:a9:bd:01:5c:9b:e3:ae:96:ee:de:31:f0: 27:e3:59:32:7f:dc:a6:94:31:17:dc:5f:29:87:c7:df:a7:b3: 07:25:51:57:8a:80:d3:52:b6:f3:95:70:05:2c:77:77:e6:89: 44:74:ce:21:18:bc:b3:99:46:b4:9d:6c:66:0c:90:3d:47:71: 96:e0:8b:06:86:82:bf:79:5a:9f:e8:70:c7:c6:a8:6d:48:16: a3:b6:80:36:e0:f2:ed:8a:8b:52:c8:9f:a5:a4:d6:5c:f1:e5: 48:1a:00:e0:a3:ae:bd:25:cf:14:d4:2d:1f:98:32:11:16:4f: 62:4a:06:d5:f2:95:b2:2f:a9:7f:b7:af:e5:36:ab:f1:32:81: 6c:cd:b0:1d:5c:21:49:27:d0:5b:e8:e9:c4:f9:d9:89:91:d7: 44:dc:1f:08:d4:01:d4:35:df:91:07:37:7b:9f:69:78:f4:e3: 16:a7:97:af:f3:16:cf:f9:b1:2f:7c:b7:00:89:ac:76:9c:13: ff:cb:2c:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vN3PDKo+z/3RivAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZTEwODZhM2MtZmM3Yy00YTkwLWI4MzYtMjRiNWUzNTAzNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJWMtzONKN3x3n8CfIJZgEpd+Wi4dUjGjgnU 9z1ZFdUyXlBy2USj5kIFR7lK6RqepJ3gusbk86M5xnAV5ufDtaNgDHbe/YuAbHca Vy3trGShlPv4DVh007Ehdve5d44vut+4IEz9+5a2YwAvJQozUYXbGEYPhvS+Uli/ RACfk1knTtmbxPWNltPyLTGx4SjtkK5QK7EVRH90N51U5dF5mX1nkaB0Mq3fP5sg 13+RKR8mwT4xcjXMD3+2vT9Ls+n82WNcirarjlZaCuQ57ZhOxUwNmS6nR6u/rpYp KZwrAbkry9ml+JCsmGr3itepfwGY/d+oGeakoTpxOAY1AWNNYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA2+qHQibwVSQuWcC2kyhOvxbqu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTcwZWYyMDEtMjQ4YS0z YTJmLTgxNzAtMzM5MGQ3MzVhMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFR1rUiOBJjcKNaAshCs1iiMNB20JzJRhdJyZnEkdrb3Ir4EmFCa sUC/7pfbS06jDZ0GWl114Y+ukPmZJKm9AVyb466W7t4x8CfjWTJ/3KaUMRfcXymH x9+nswclUVeKgNNStvOVcAUsd3fmiUR0ziEYvLOZRrSdbGYMkD1HcZbgiwaGgr95 Wp/ocMfGqG1IFqO2gDbg8u2Ki1LIn6Wk1lzx5UgaAOCjrr0lzxTULR+YMhEWT2JK BtXylbIvqX+3r+U2q/EygWzNsB1cIUkn0Fvo6cT52YmR10TcHwjUAdQ135EHN3uf aXj04xanl6/zFs/5sS98twCJrHacE//LLDE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:11:38 2025 by rpki-client