$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8a3a87f-081d-3595-899d-a06e96659714.roa File: a8a3a87f-081d-3595-899d-a06e96659714.roa (raw, json) Hash identifier: aywWB9uMVKAb5GKEmj/i6ySI4alIQ+wmh+AnXSGxD6M= Subject key identifier: B1:8D:28:1C:C9:41:03:68:D6:3B:3F:31:B8:42:31:87:C7:2D:32:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD72B11E9BF72B47D3280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8a3a87f-081d-3595-899d-a06e96659714.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396692 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d7:2b:11:e9:bf:72:b4:7d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=9e83d917-51b4-457e-9473-00537c247a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:9c:1a:dd:58:e1:4e:94:dd:f5:70:dd:80: f4:d7:03:a0:bc:c5:17:d3:f5:8a:00:20:34:95:97: 49:01:70:f5:17:ce:0c:48:3e:c0:ea:d1:0c:f9:8c: 10:6f:ab:4a:ab:9a:b3:60:65:44:e7:49:43:65:0d: e5:af:ea:3d:89:61:0f:8d:fc:24:e4:62:ec:c9:38: b2:bc:46:33:10:94:7f:10:9b:d1:b4:51:db:a5:b1: 7e:2a:de:2a:fa:52:48:2b:87:bc:90:94:58:77:3e: 35:e3:b1:82:a2:e0:24:42:fc:89:b8:74:8c:d6:ed: 41:da:c7:c3:bd:35:bd:ea:53:76:43:d7:a7:f9:e3: 97:0a:b3:e3:a4:17:9b:3e:4b:9c:35:de:f6:ef:5a: 26:c4:a3:95:4c:e0:1f:fa:cf:eb:99:8e:02:fd:87: 84:b6:b8:95:42:98:d2:e4:42:4e:ca:fd:b5:8c:8d: d4:fe:8b:12:6e:3b:0b:60:97:39:bd:95:30:c4:c7: 68:15:2a:ca:c3:ec:1f:45:aa:a1:a9:2e:16:76:c8: fd:fe:2d:37:70:b4:3e:48:c0:1f:e9:ea:ea:98:f5: 96:eb:07:a0:62:82:36:65:cc:c2:51:d1:4d:a5:13: 61:e3:80:97:50:93:f8:fa:79:28:fb:8b:6a:ba:bd: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8D:28:1C:C9:41:03:68:D6:3B:3F:31:B8:42:31:87:C7:2D:32:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8a3a87f-081d-3595-899d-a06e96659714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3a:08:f0:ae:5c:7e:fb:83:dc:1c:f9:02:9e:9d:b5:d6:19: fa:16:8b:55:70:43:c1:35:cc:c4:88:d3:5f:5d:ff:87:1c:af: 23:00:75:8c:6f:a0:2a:5c:a6:65:ec:51:6d:12:79:cb:10:86: 77:b7:49:48:0e:ba:32:89:6c:45:71:be:44:63:aa:bf:90:b1: 35:48:10:3a:84:5d:74:22:1c:36:68:9f:ae:83:92:17:26:2b: dc:4a:1f:09:61:b2:f7:40:81:9f:ec:a6:c9:b1:49:24:9d:02: ac:5c:fd:66:0a:7d:68:bb:98:bc:2e:31:dc:b5:ca:17:97:67: f6:df:d9:4a:78:c2:dd:89:70:b3:94:3e:49:8e:a8:ba:13:3a: 5b:06:21:56:00:7e:44:bb:fe:9c:ff:f2:ed:55:15:58:48:8c: 9b:df:32:54:d7:68:a4:b9:fe:9a:90:89:cb:fd:69:95:f6:4b: 2c:b9:e8:4c:d3:50:d3:42:6b:4a:cd:5e:94:49:fc:a8:a1:4c: b2:48:1c:ad:3d:f2:8f:e2:12:15:a2:3c:82:5e:ff:03:e0:6e: d9:63:d5:38:be:65:17:a8:cc:d0:ec:06:95:80:7b:cd:7e:ec: 62:1f:79:6a:e4:96:15:24:a0:db:56:a2:68:aa:5c:25:f4:a4: 56:a2:4e:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNcrEem/crR9MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OWU4M2Q5MTctNTFiNC00NTdlLTk0NzMtMDA1MzdjMjQ3YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDycGt1Y4U6U3fVw3YD01wOgvMUX0/WKACA0 lZdJAXD1F84MSD7A6tEM+YwQb6tKq5qzYGVE50lDZQ3lr+o9iWEPjfwk5GLsyTiy vEYzEJR/EJvRtFHbpbF+Kt4q+lJIK4e8kJRYdz4147GCouAkQvyJuHSM1u1B2sfD vTW96lN2Q9en+eOXCrPjpBebPkucNd7271omxKOVTOAf+s/rmY4C/YeEtriVQpjS 5EJOyv21jI3U/osSbjsLYJc5vZUwxMdoFSrKw+wfRaqhqS4Wdsj9/i03cLQ+SMAf 6erqmPWW6wegYoI2ZczCUdFNpRNh44CXUJP4+nko+4tqur2CdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLGNKBzJQQNo1js/MbhCMYfHLTL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThhM2E4N2YtMDgxZC0z NTk1LTg5OWQtYTA2ZTk2NjU5NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFo6CPCuXH77g9wc+QKenbXWGfoWi1VwQ8E1zMSI019d/4ccryMA dYxvoCpcpmXsUW0SecsQhne3SUgOujKJbEVxvkRjqr+QsTVIEDqEXXQiHDZon66D khcmK9xKHwlhsvdAgZ/spsmxSSSdAqxc/WYKfWi7mLwuMdy1yheXZ/bf2Up4wt2J cLOUPkmOqLoTOlsGIVYAfkS7/pz/8u1VFVhIjJvfMlTXaKS5/pqQicv9aZX2Syy5 6EzTUNNCa0rNXpRJ/KihTLJIHK098o/iEhWiPIJe/wPgbtlj1Ti+ZReozNDsBpWA e81+7GIfeWrklhUkoNtWomiqXCX0pFaiTvo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:08 2025 by rpki-client