$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7788ed8-2eef-306f-b2d7-7dfaafb86950.roa File: a7788ed8-2eef-306f-b2d7-7dfaafb86950.roa (raw, json) Hash identifier: QTMb+X0664RmUNJBwPetrcBuyT5UmK8kvHvknkBqXzo= Subject key identifier: CA:96:AB:80:31:40:BC:2C:EA:13:88:10:61:DC:A0:B0:32:AD:2D:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A780C4839BD09AD6915CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7788ed8-2eef-306f-b2d7-7dfaafb86950.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 396582 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:80:c4:83:9b:d0:9a:d6:91:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=fce2cf10-1894-4961-be15-13f34e633300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b2:25:b7:c9:a4:54:7c:94:cd:01:84:f1:82: 60:df:57:20:2e:2f:04:01:9c:08:b7:44:53:f0:16: 06:eb:f6:a6:d6:d8:68:0e:35:c0:50:66:05:af:f6: 52:d9:c0:76:ff:c2:51:8d:87:f1:79:ad:59:68:d4: 8a:e1:ba:53:f1:66:a3:f7:b2:7c:22:ef:e6:d8:5b: bc:95:5d:73:a2:8c:e2:1e:d5:f3:70:47:7a:c6:2c: 96:f9:a1:f8:92:ab:48:4d:03:3d:bc:cd:b2:2b:39: 0a:4b:6e:1f:90:f4:b9:47:6b:8c:c2:9a:1a:24:5c: 81:41:7a:77:92:1b:4e:5d:35:e9:b3:a9:94:b0:9c: 72:a3:c2:03:72:f1:1f:8c:c5:6f:55:1b:c5:85:6c: f9:f9:a0:1a:b1:2b:6c:7e:90:33:94:e5:6f:35:1f: 5e:4a:f2:aa:79:43:82:d4:76:cf:00:bf:91:13:4a: c8:c7:90:ec:24:c1:ba:c3:65:b1:ca:5e:80:ed:f8: 47:07:8c:68:8f:31:e4:4e:72:22:88:b1:93:58:d3: 67:49:46:e7:4c:dd:34:96:ee:48:ec:27:15:9c:97: fc:63:7f:fb:f7:a0:81:5c:1c:c4:18:99:d5:7a:0d: 25:60:a8:67:21:24:c0:ea:de:41:c2:35:e6:8f:36: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:96:AB:80:31:40:BC:2C:EA:13:88:10:61:DC:A0:B0:32:AD:2D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7788ed8-2eef-306f-b2d7-7dfaafb86950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8e:d0:78:c3:62:bb:67:96:be:95:38:c3:15:d9:cc:a3:ea: b2:53:a1:b9:fa:96:e6:dd:f1:97:7f:4b:3d:36:ce:8b:ed:dd: ce:93:8c:fe:13:57:06:28:45:5e:b7:89:42:fb:0e:c5:18:f5: 7f:a5:9c:8b:66:bc:da:2c:68:05:ed:98:d2:f1:17:f2:cc:ab: b3:c0:b7:8a:09:3b:2c:8b:45:b0:c3:d5:ec:26:f0:f7:98:3b: c1:26:b6:21:71:aa:63:bc:04:8a:9a:0d:f5:0a:51:3e:c3:37: a3:ee:08:c0:50:fe:6b:93:17:1e:15:84:3e:71:e9:3f:79:99: d3:67:4a:75:f2:a1:94:0d:e8:d8:93:52:3d:b1:1a:53:fd:84: 98:50:95:d7:b9:58:82:aa:2f:6e:44:76:c9:f5:9f:98:28:e8: 28:60:de:d8:7e:e0:39:cc:f7:87:bd:05:fb:7e:f7:81:33:8a: a7:fa:3d:c4:70:67:6d:27:7b:06:d0:19:40:ee:35:cd:37:0b: 3c:e8:c4:e7:fb:44:61:66:a5:8e:ac:1a:24:cf:e0:73:d9:5b: 22:50:14:68:5a:73:1a:b1:08:ef:da:f4:e0:d7:56:7b:e6:bd: 28:5f:20:33:a7:94:1f:eb:e1:da:61:47:8a:8c:7e:af:0a:f2: 3a:61:c5:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4DEg5vQmtaRXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZmNlMmNmMTAtMTg5NC00OTYxLWJlMTUtMTNmMzRlNjMzMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLIlt8mkVHyUzQGE8YJg31cgLi8EAZwIt0RT 8BYG6/am1thoDjXAUGYFr/ZS2cB2/8JRjYfxea1ZaNSK4bpT8Waj97J8Iu/m2Fu8 lV1zooziHtXzcEd6xiyW+aH4kqtITQM9vM2yKzkKS24fkPS5R2uMwpoaJFyBQXp3 khtOXTXps6mUsJxyo8IDcvEfjMVvVRvFhWz5+aAasStsfpAzlOVvNR9eSvKqeUOC 1HbPAL+RE0rIx5DsJMG6w2Wxyl6A7fhHB4xojzHkTnIiiLGTWNNnSUbnTN00lu5I 7CcVnJf8Y3/796CBXBzEGJnVeg0lYKhnISTA6t5BwjXmjzZrEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMqWq4AxQLws6hOIEGHcoLAyrS2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTc3ODhlZDgtMmVlZi0z MDZmLWIyZDctN2RmYWFmYjg2OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+O0HjDYrtnlr6VOMMV2cyj6rJTobn6lubd8Zd/Sz02zovt3c6T jP4TVwYoRV63iUL7DsUY9X+lnItmvNosaAXtmNLxF/LMq7PAt4oJOyyLRbDD1ewm 8PeYO8EmtiFxqmO8BIqaDfUKUT7DN6PuCMBQ/muTFx4VhD5x6T95mdNnSnXyoZQN 6NiTUj2xGlP9hJhQlde5WIKqL25Edsn1n5go6Chg3th+4DnM94e9Bft+94Eziqf6 PcRwZ20newbQGUDuNc03CzzoxOf7RGFmpY6sGiTP4HPZWyJQFGhacxqxCO/a9ODX VnvmvShfIDOnlB/r4dphR4qMfq8K8jphxRo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:05:16 2025 by rpki-client