$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa File: aa852c86-45ac-3800-acf4-686ccad4d9f1.roa (raw, json) Hash identifier: Ijx9bHeEtZuFUs9ectvndSgwTcb3MSiVWGaZc/bAyy8= Subject key identifier: 96:31:8C:36:26:5E:BA:A6:A4:19:95:0F:F1:63:2C:2C:34:58:38:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A781F2760F749998E78CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 396572 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:81:f2:76:0f:74:99:98:e7:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=24691c49-0634-44dd-b6fc-1e54a2a6651a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:d7:bb:b0:4c:ed:50:c1:d2:26:f6:48:c9: f6:7d:6c:2e:c8:b0:6f:7b:1d:70:73:2c:8b:e8:c1: 28:7d:71:60:43:45:8c:a3:48:e0:14:47:24:ac:a5: 25:79:e9:47:38:77:a7:f1:4b:f6:e8:5b:85:76:49: 03:8d:ee:9e:52:ca:1f:c6:48:d6:98:9e:7a:79:df: 07:13:c1:fb:c8:c2:89:5c:bd:fc:a1:07:c1:d2:c6: 2c:fb:86:06:d7:22:2a:2c:40:ce:ea:82:03:b1:73: 96:81:2f:35:53:9b:bf:c6:01:b7:be:e2:76:91:fc: b0:18:c8:50:ba:05:53:4e:a4:ff:d5:dc:d4:d7:32: 4c:31:f5:73:91:b4:25:59:b2:68:0e:2f:ea:83:06: 8c:f9:49:cc:9a:15:0e:68:42:d6:bc:a0:2e:b4:58: 0f:5e:fa:d4:03:b3:86:3b:5a:91:cc:c4:86:ee:d4: d4:89:6c:fa:56:fa:74:5d:70:23:b1:ed:03:3c:1d: 4a:e5:e1:2b:4a:ee:20:98:db:5f:5c:c4:83:6e:ed: 21:9b:0d:87:46:54:b6:cd:29:7b:a0:64:9b:dc:e6: 2d:6f:a3:55:cd:87:1b:3d:13:a0:6a:ca:d9:ce:f4: 94:df:06:4b:70:14:57:03:12:68:c7:3d:1e:87:9a: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:31:8C:36:26:5E:BA:A6:A4:19:95:0F:F1:63:2C:2C:34:58:38:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4a:3a:52:a4:95:5d:4b:28:ec:89:54:df:d1:75:93:66:11: 82:a5:df:39:fa:ab:1b:89:c8:78:f4:ee:2b:a4:32:a1:0e:08: 89:9e:7d:0c:b8:84:ec:b5:0f:fc:b1:24:0a:67:30:2f:7f:e9: 14:89:11:2a:52:9f:a0:ae:86:5f:18:f2:0c:48:72:05:1c:b0: 9b:13:3c:eb:a6:d4:99:b4:02:ad:5b:8d:9a:f8:19:5b:1c:35: 05:40:0f:36:3d:c6:59:f2:d8:06:b3:e7:a9:00:37:26:2a:6a: a2:06:19:7a:50:2d:38:a9:3e:77:ef:e5:5d:9e:49:a7:0a:b6: bc:1c:93:5a:1e:20:cb:ad:49:d6:79:1c:3e:b7:e4:b6:53:2b: 44:01:4c:1c:b7:85:69:13:38:a3:91:c3:60:6f:7b:b6:b3:47: 5d:b2:5d:61:91:1b:c5:53:ae:21:40:90:fc:b6:30:d1:35:30: 4a:74:3c:d9:7c:db:ea:4c:3a:e0:d2:0e:62:c3:e9:2d:9e:6c: e2:ed:fc:3e:f3:e1:6f:53:fb:b4:4f:18:ad:83:d0:59:f7:49: 8f:84:6d:2b:30:9a:35:90:ed:19:7d:9e:b1:c7:a4:c1:b0:da: 80:6a:dd:06:9f:7d:63:91:5e:b6:68:01:8e:ab:3b:2f:72:5c: 27:98:56:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4Hydg90mZjnjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MjQ2OTFjNDktMDYzNC00NGRkLWI2ZmMtMWU1NGEyYTY2NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16rXu7BM7VDB0ib2SMn2fWwuyLBvex1wcyyL 6MEofXFgQ0WMo0jgFEckrKUleelHOHen8Uv26FuFdkkDje6eUsofxkjWmJ56ed8H E8H7yMKJXL38oQfB0sYs+4YG1yIqLEDO6oIDsXOWgS81U5u/xgG3vuJ2kfywGMhQ ugVTTqT/1dzU1zJMMfVzkbQlWbJoDi/qgwaM+UnMmhUOaELWvKAutFgPXvrUA7OG O1qRzMSG7tTUiWz6Vvp0XXAjse0DPB1K5eErSu4gmNtfXMSDbu0hmw2HRlS2zSl7 oGSb3OYtb6NVzYcbPROgasrZzvSU3wZLcBRXAxJoxz0eh5oSLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJYxjDYmXrqmpBmVD/FjLCw0WDinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE4NTJjODYtNDVhYy0z ODAwLWFjZjQtNjg2Y2NhZDRkOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJRKOlKklV1LKOyJVN/RdZNmEYKl3zn6qxuJyHj07iukMqEOCIme fQy4hOy1D/yxJApnMC9/6RSJESpSn6Cuhl8Y8gxIcgUcsJsTPOum1Jm0Aq1bjZr4 GVscNQVADzY9xlny2Aaz56kANyYqaqIGGXpQLTipPnfv5V2eSacKtrwck1oeIMut SdZ5HD635LZTK0QBTBy3hWkTOKORw2Bve7azR12yXWGRG8VTriFAkPy2MNE1MEp0 PNl82+pMOuDSDmLD6S2ebOLt/D7z4W9T+7RPGK2D0Fn3SY+EbSswmjWQ7Rl9nrHH pMGw2oBq3QaffWORXrZoAY6rOy9yXCeYVtc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:16:18 2025 by rpki-client