$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa File: b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa (raw, json) Hash identifier: ZS327KK8M/OTUd09U5vNtxG4E5yIIc+u7pXX8Jwmoa8= Subject key identifier: 15:A0:97:03:E0:6A:FB:78:CF:65:42:D5:16:AC:3D:13:C5:F6:B7:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDF134061855C4E8848C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396661 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:df:13:40:61:85:5c:4e:88:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=cb8c8d95-a8c3-43b4-a2a5-dc4c4dd994aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:e9:05:72:28:5e:6c:6f:88:cc:7a:bd:54: 1f:bc:ec:29:1e:6b:43:3c:92:68:81:36:8f:90:26: 77:ce:2a:d5:8e:08:38:a1:f3:24:77:24:4a:64:57: 61:24:7b:e9:94:1c:0a:83:85:7a:10:92:b9:f1:3e: 7b:d5:92:6f:61:a4:c1:fb:85:07:a5:f1:8b:22:19: bc:b3:ec:2e:13:00:5e:d5:5e:71:1e:f7:3a:25:6f: 3d:20:83:bc:76:f1:26:49:06:cc:a0:e2:67:f7:01: d5:7c:9a:5f:11:ba:d9:28:71:1f:be:b9:31:00:f3: d1:a9:ef:3d:42:51:c6:a2:2d:84:5f:49:c4:4f:0a: 37:e1:42:71:30:e5:65:82:cf:99:fa:5e:d6:c5:72: 34:16:0a:16:99:28:69:bc:6a:2c:91:01:e7:b9:27: fd:90:7d:c2:1d:59:70:f4:42:cc:83:f1:12:0c:6f: 52:49:29:50:8f:40:13:5d:b5:df:8e:8b:ef:a8:a6: d8:12:70:5b:dd:2b:34:78:ac:4b:8c:50:22:be:63: a2:bf:3c:50:f8:56:85:af:d3:1e:c5:ba:2e:be:a1: 7f:2b:36:6d:12:92:b5:34:36:06:55:5d:93:61:b9: 56:3e:da:90:13:46:82:ba:90:46:c7:a6:cb:aa:80: ff:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A0:97:03:E0:6A:FB:78:CF:65:42:D5:16:AC:3D:13:C5:F6:B7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:60:d6:46:12:c4:94:b4:97:09:5e:84:44:3a:aa:7f:37:c0: 95:0e:82:0a:67:3f:c8:c3:31:4b:28:94:98:c7:ba:e2:e0:1d: 1d:18:93:73:25:ff:ff:6d:55:43:dd:12:75:16:5b:91:ef:02: 4d:2e:d3:e8:a0:82:30:6e:ca:0f:8d:54:6b:fb:78:1c:90:9a: ba:9a:02:84:ca:bd:61:4f:e5:d8:c4:74:59:78:fe:05:8e:ad: e0:32:26:b8:bc:e0:5b:1a:6e:49:c7:bc:7a:1f:c2:02:5e:73: 59:34:88:06:07:2b:33:ec:41:a9:69:c1:f3:35:63:d3:05:32: 85:1d:5d:19:e2:be:d7:9e:91:2f:5c:6c:80:28:ee:59:79:1f: e2:6f:bb:bb:c6:ef:9d:9a:8a:81:d3:37:41:50:f5:8e:92:ee: 85:53:60:2d:e5:d3:51:3f:f2:6e:2c:68:05:f8:cf:53:bd:dd: 32:ba:86:02:93:59:53:9a:02:38:08:b7:80:a3:40:e8:b2:d6: 8e:d8:cd:df:1b:fd:80:ed:e0:17:26:f0:d1:30:3a:4f:52:8d: 5d:1e:bc:7f:6a:ff:4c:b7:8c:78:6f:aa:80:8a:23:6e:b2:c2: d4:e4:3f:17:72:f5:01:3d:78:72:ba:ba:07:a5:2b:28:ea:44: d1:41:c8:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vN8TQGGFXE6ISMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk Y2I4YzhkOTUtYThjMy00M2I0LWEyYTUtZGM0YzRkZDk5NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3pBXIoXmxviMx6vVQfvOwpHmtDPJJogTaP kCZ3zirVjgg4ofMkdyRKZFdhJHvplBwKg4V6EJK58T571ZJvYaTB+4UHpfGLIhm8 s+wuEwBe1V5xHvc6JW89IIO8dvEmSQbMoOJn9wHVfJpfEbrZKHEfvrkxAPPRqe89 QlHGoi2EX0nETwo34UJxMOVlgs+Z+l7WxXI0FgoWmShpvGoskQHnuSf9kH3CHVlw 9ELMg/ESDG9SSSlQj0ATXbXfjovvqKbYEnBb3Ss0eKxLjFAivmOivzxQ+FaFr9Me xbouvqF/KzZtEpK1NDYGVV2TYblWPtqQE0aCupBGx6bLqoD/QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBWglwPgavt4z2VC1RasPRPF9rdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIxZTcwZGMtNThhMC0z ZWVhLWI5ZjMtYmU2ZDhhNGUxZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVg1kYSxJS0lwlehEQ6qn83wJUOggpnP8jDMUsolJjHuuLgHR0Y k3Ml//9tVUPdEnUWW5HvAk0u0+iggjBuyg+NVGv7eByQmrqaAoTKvWFP5djEdFl4 /gWOreAyJri84FsabknHvHofwgJec1k0iAYHKzPsQalpwfM1Y9MFMoUdXRnivtee kS9cbIAo7ll5H+Jvu7vG752aioHTN0FQ9Y6S7oVTYC3l01E/8m4saAX4z1O93TK6 hgKTWVOaAjgIt4CjQOiy1o7Yzd8b/YDt4Bcm8NEwOk9SjV0evH9q/0y3jHhvqoCK I26ywtTkPxdy9QE9eHK6ugelKyjqRNFByB0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:35 2025 by rpki-client