$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/add854de-7af1-3eea-853b-00bb93ec9864.roa File: add854de-7af1-3eea-853b-00bb93ec9864.roa (raw, json) Hash identifier: KXyGvZyZQ/5bzSk8E39lRPioBCIn1glE8gugsF4xlVM= Subject key identifier: E3:8E:2B:D0:EF:20:E2:2C:4D:FE:B3:06:C9:E0:05:6C:75:1C:C1:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A7807FAB32DFD6194F1740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/add854de-7af1-3eea-853b-00bb93ec9864.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 396606 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:80:7f:ab:32:df:d6:19:4f:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=ed2915e0-a0f5-4eb5-addb-4812fd0ea980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a2:d4:a0:2a:59:87:b7:91:9f:a5:b6:1b:5c: 7e:d2:c0:86:68:1e:cd:58:74:63:de:a6:22:b9:44: fe:b4:2a:d8:bf:34:67:d4:1a:f7:d2:9a:93:8c:5c: bd:48:58:26:f7:47:de:66:19:2e:bb:ef:ca:ed:d3: 0f:fc:0e:15:f0:17:fd:d9:fa:4d:61:e3:43:d1:69: 10:30:b4:ea:58:d9:a0:fb:54:e7:56:81:32:6d:e9: c1:c5:be:59:48:5e:56:a7:23:21:3a:c4:21:40:e8: 7a:f9:9f:a3:dc:9c:05:60:65:5f:05:16:91:2d:fc: fb:30:fc:5c:b4:3c:6c:95:fc:1c:2b:7f:41:96:8d: bc:e2:e8:24:eb:f3:80:01:88:85:63:77:11:90:79: b7:64:8e:f3:98:6b:b5:7a:27:33:d7:20:a1:a9:ae: 3b:78:15:10:6d:8f:b1:65:90:73:eb:16:e1:03:f3: a2:04:b0:de:26:fa:8e:30:93:35:8d:ed:08:d3:bd: 34:1a:95:60:b2:60:8f:9b:9f:97:76:0f:27:6d:d6: 2c:9b:49:56:d0:59:dd:5c:30:45:b5:51:c5:0a:d4: cd:bf:f4:4f:c4:be:c0:6f:64:d5:d2:7f:21:30:89: 6e:fb:f5:ac:54:c6:60:20:fc:43:f8:14:52:8b:15: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8E:2B:D0:EF:20:E2:2C:4D:FE:B3:06:C9:E0:05:6C:75:1C:C1:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/add854de-7af1-3eea-853b-00bb93ec9864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:d5:ad:ee:80:db:b0:0c:ba:af:44:3a:4c:a4:90:41:bf:5b: 76:39:92:9b:18:62:ee:75:22:4d:7e:bc:af:6e:5b:29:a2:30: 7b:2a:60:9b:6a:71:30:ea:7e:28:0f:2f:cb:17:88:ee:82:20: 9c:6e:07:24:3d:85:90:37:34:0f:0a:da:8d:71:62:82:89:ce: 33:c0:7a:58:83:88:0c:b3:24:93:c0:56:57:05:92:4e:3e:00: 77:e6:57:81:5f:86:d8:5d:7c:d3:4d:3a:32:9e:07:83:18:14: 51:5d:37:4b:ad:32:8b:07:cf:2c:9b:d9:05:75:4e:2c:ce:ec: 66:78:b3:51:be:b2:90:74:ec:8d:d1:74:63:9c:c0:26:a4:42: b2:b7:2b:af:cc:f0:92:ac:61:35:66:a5:c9:18:9c:46:6f:fa: db:56:6a:b6:95:d8:c2:60:7a:0d:da:7f:c8:a0:5f:1d:40:28: 14:b7:3c:39:07:a2:b7:1b:69:21:e0:cf:fc:21:31:f2:a6:a4: cc:bc:ac:4b:46:40:99:62:46:46:ad:67:28:dc:ec:e5:c6:c0: 36:b9:54:b1:59:66:5f:79:fd:e9:76:06:2a:70:ae:8e:82:b0: 24:d5:58:97:ab:3e:5f:8f:9e:d5:57:25:89:6f:73:5b:d9:6f: 16:6b:f0:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4B/qzLf1hlPF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZWQyOTE1ZTAtYTBmNS00ZWI1LWFkZGItNDgxMmZkMGVhOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaLUoCpZh7eRn6W2G1x+0sCGaB7NWHRj3qYi uUT+tCrYvzRn1Br30pqTjFy9SFgm90feZhkuu+/K7dMP/A4V8Bf92fpNYeND0WkQ MLTqWNmg+1TnVoEybenBxb5ZSF5WpyMhOsQhQOh6+Z+j3JwFYGVfBRaRLfz7MPxc tDxslfwcK39Blo284ugk6/OAAYiFY3cRkHm3ZI7zmGu1eicz1yChqa47eBUQbY+x ZZBz6xbhA/OiBLDeJvqOMJM1je0I0700GpVgsmCPm5+Xdg8nbdYsm0lW0FndXDBF tVHFCtTNv/RPxL7Ab2TV0n8hMIlu+/WsVMZgIPxD+BRSixVVRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOOOK9DvIOIsTf6zBsngBWx1HMFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWRkODU0ZGUtN2FmMS0z ZWVhLTg1M2ItMDBiYjkzZWM5ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALDVre6A27AMuq9EOkykkEG/W3Y5kpsYYu51Ik1+vK9uWymiMHsq YJtqcTDqfigPL8sXiO6CIJxuByQ9hZA3NA8K2o1xYoKJzjPAeliDiAyzJJPAVlcF kk4+AHfmV4FfhthdfNNNOjKeB4MYFFFdN0utMosHzyyb2QV1TizO7GZ4s1G+spB0 7I3RdGOcwCakQrK3K6/M8JKsYTVmpckYnEZv+ttWaraV2MJgeg3af8igXx1AKBS3 PDkHorcbaSHgz/whMfKmpMy8rEtGQJliRkatZyjc7OXGwDa5VLFZZl95/el2Bipw ro6CsCTVWJerPl+PntVXJYlvc1vZbxZr8Os= -----END CERTIFICATE-----Generated at Mon Oct 20 03:26:55 2025 by rpki-client