$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6f1d95-52cf-3c88-a005-ca5cc928f193.roa File: ae6f1d95-52cf-3c88-a005-ca5cc928f193.roa (raw, json) Hash identifier: U1ACGh6bYnc1kOeAwIbckDdI2EkW4ASkQVkB2jIMsbM= Subject key identifier: B0:7E:05:63:10:EE:E0:42:E7:30:C2:BF:D6:25:D6:A7:A7:1D:AF:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD74A793F6AC87C523500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6f1d95-52cf-3c88-a005-ca5cc928f193.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396554 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d7:4a:79:3f:6a:c8:7c:52:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=9a5a5b5c-b890-40f0-baa0-c5460e9a03ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:bd:42:b1:ff:de:e7:a3:ae:06:6d:5c:97: 3f:a0:1b:e5:bc:16:a4:43:95:c3:ed:90:41:4f:d3: 8d:c0:44:2d:d2:e2:f0:a7:11:3e:28:d5:44:6b:66: a8:2b:92:f8:c8:8a:70:06:1a:f6:79:1a:58:dd:55: ac:b3:81:28:61:c8:65:0e:b9:f6:1b:ae:1f:6c:e6: 7f:02:59:d6:6a:57:5d:1d:91:81:3e:cf:ba:62:29: 2a:58:c3:a1:b3:b3:03:c6:cc:49:5f:b7:5a:9e:d1: 4a:ee:d3:22:ea:2d:cd:3e:7a:9f:89:0c:13:2c:9b: a4:f5:05:64:50:20:17:78:1f:7d:70:1c:29:98:c6: 07:0b:04:f1:40:34:f3:8e:ff:28:4c:cb:6b:91:ea: b7:a7:10:d2:56:6f:73:5f:61:dd:23:9c:95:89:7d: d7:aa:61:f7:37:a8:17:cd:cc:c2:ab:44:d0:28:71: 6e:cf:68:a0:59:3f:3b:43:c6:73:c5:97:ee:13:11: e2:b1:e1:68:35:8d:b6:e3:4c:77:28:ae:2e:33:6a: 59:ba:a4:11:e7:5a:ef:b3:22:ca:1a:a4:7b:4c:6d: 88:a3:07:8c:a6:9b:79:9a:11:27:87:b2:f8:e1:fa: 63:92:20:79:f8:61:45:78:35:f2:cf:89:86:1f:5f: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:05:63:10:EE:E0:42:E7:30:C2:BF:D6:25:D6:A7:A7:1D:AF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6f1d95-52cf-3c88-a005-ca5cc928f193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:0a:d2:3d:4e:58:45:6e:23:ab:27:84:45:c1:40:1d:1d:e9: d9:68:82:92:d9:08:dc:b4:82:f1:d7:31:9f:97:1b:6d:85:08: c2:cb:29:ec:4b:47:ac:d6:2e:05:05:8a:8d:f2:55:cd:dd:d6: ee:91:b4:12:b7:0f:1b:24:e6:a9:dc:6b:9d:d1:d1:b5:8e:d7: 24:e9:af:74:7f:b6:a0:48:b7:b8:0e:b1:21:ec:f8:90:42:d9: c6:b0:d3:02:d6:91:00:9d:70:35:02:da:ab:a1:99:aa:11:90: 64:a9:f8:f9:27:c2:e3:47:54:79:1c:af:98:f8:83:e9:63:ae: 20:60:ec:0a:bd:00:ab:4c:e4:70:e5:e5:f7:52:27:d4:75:09: a0:be:cb:8d:d7:8f:21:0f:7b:e2:01:4f:d0:14:ba:4d:ff:60: ce:39:62:f9:9e:57:e0:17:d0:a5:8e:3f:52:71:7b:40:62:99: 30:d6:82:99:51:44:35:17:57:8a:9a:73:ab:ca:55:ba:99:63: 82:20:0f:c7:d0:23:95:44:42:88:87:4d:1d:07:e1:92:72:b9: 66:4c:eb:c8:23:95:12:0e:a9:07:29:b2:01:35:41:9e:e9:7d: 80:53:b0:e0:02:dd:fe:6f:d6:e2:20:22:36:04:f1:21:ee:10: 35:c8:3a:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNdKeT9qyHxSNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OWE1YTViNWMtYjg5MC00MGYwLWJhYTAtYzU0NjBlOWEwM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw229QrH/3uejrgZtXJc/oBvlvBakQ5XD7ZBB T9ONwEQt0uLwpxE+KNVEa2aoK5L4yIpwBhr2eRpY3VWss4EoYchlDrn2G64fbOZ/ AlnWalddHZGBPs+6YikqWMOhs7MDxsxJX7dantFK7tMi6i3NPnqfiQwTLJuk9QVk UCAXeB99cBwpmMYHCwTxQDTzjv8oTMtrkeq3pxDSVm9zX2HdI5yViX3XqmH3N6gX zczCq0TQKHFuz2igWT87Q8ZzxZfuExHiseFoNY2240x3KK4uM2pZuqQR51rvsyLK GqR7TG2IoweMppt5mhEnh7L44fpjkiB5+GFFeDXyz4mGH18t6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLB+BWMQ7uBC5zDCv9Yl1qenHa93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWU2ZjFkOTUtNTJjZi0z Yzg4LWEwMDUtY2E1Y2M5MjhmMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKkK0j1OWEVuI6snhEXBQB0d6dlogpLZCNy0gvHXMZ+XG22FCMLL KexLR6zWLgUFio3yVc3d1u6RtBK3Dxsk5qnca53R0bWO1yTpr3R/tqBIt7gOsSHs +JBC2caw0wLWkQCdcDUC2quhmaoRkGSp+PknwuNHVHkcr5j4g+ljriBg7Aq9AKtM 5HDl5fdSJ9R1CaC+y43XjyEPe+IBT9AUuk3/YM45YvmeV+AX0KWOP1Jxe0BimTDW gplRRDUXV4qac6vKVbqZY4IgD8fQI5VEQoiHTR0H4ZJyuWZM68gjlRIOqQcpsgE1 QZ7pfYBTsOAC3f5v1uIgIjYE8SHuEDXIOqE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:52 2025 by rpki-client