$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8cad12d-fc63-311a-840b-f76cb3b26807.roa File: b8cad12d-fc63-311a-840b-f76cb3b26807.roa (raw, json) Hash identifier: djaNUG9vUC//DJaq+pmVBopFCHtytAl5cH+I3sldfzg= Subject key identifier: 5F:08:98:65:10:61:4F:95:86:F0:F7:F2:2F:03:28:C2:99:5E:3D:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD9EE7F61C0462EECD680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8cad12d-fc63-311a-840b-f76cb3b26807.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 32651 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d9:ee:7f:61:c0:46:2e:ec:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=40ea84ae-7fd0-4c61-8ed5-c370c29fa72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:96:8f:bc:78:bb:b1:65:49:e3:62:a0:3f: e6:a2:da:b8:d6:db:37:91:75:df:c6:37:85:da:6f: 2f:d8:98:55:77:54:5a:37:02:7e:a7:ed:76:5f:c8: c7:b5:7b:1c:ae:0a:cc:c8:f9:d4:4f:4c:f0:df:74: a3:55:00:19:cf:e0:02:84:9d:ba:fc:5c:10:4c:5f: d3:b1:04:9e:76:b4:32:85:84:55:39:c1:22:a2:74: 5a:70:23:c1:0c:cd:9b:93:dc:66:e8:e9:af:60:a9: 75:22:cb:8d:1b:07:b6:ab:a5:50:2d:92:3f:7d:7b: 57:95:7d:8c:c8:71:fe:e6:87:7f:fe:8e:77:37:c0: 51:d3:9f:9b:2a:7d:6e:a2:51:2b:63:1a:e0:6d:7a: c9:e3:2e:1c:97:66:84:d2:65:4e:08:c3:1e:67:df: 2d:35:cb:b0:97:a9:58:b5:14:04:49:db:8c:b2:0b: bc:ac:8b:00:10:32:70:69:8c:50:b6:8d:b5:05:2f: 2d:6b:1c:56:15:ba:56:c4:89:61:4c:20:d3:4a:84: 71:d3:98:e7:f2:78:f9:1b:90:08:19:ce:d1:f1:b8: e1:22:f4:66:d8:4d:2b:ca:9f:eb:78:52:0e:fd:cd: 37:bb:df:8d:7d:b1:55:3a:fe:d9:98:19:62:01:d7: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:08:98:65:10:61:4F:95:86:F0:F7:F2:2F:03:28:C2:99:5E:3D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8cad12d-fc63-311a-840b-f76cb3b26807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:79:b5:c4:ff:45:fa:bd:e8:d4:31:4b:1d:ec:ad:b5:ca:51: 82:c9:1b:bd:44:d8:c8:56:b8:53:09:e1:33:64:3f:46:72:b7: 40:c5:b3:8d:40:90:0e:03:7d:94:1e:ea:a3:7a:e6:32:59:dd: 4f:79:ac:cb:22:d4:01:87:63:02:c5:74:98:5d:ab:63:8c:9c: 40:ee:81:4d:e6:53:d0:59:46:b9:05:4a:f3:b2:8d:49:78:ab: f4:2b:e8:e1:d9:d1:b2:6a:52:74:99:83:89:3d:bf:59:a2:6b: f0:bd:9d:4d:cb:59:32:ff:0b:5c:ee:d3:db:ac:77:14:b3:12: 6f:60:e0:57:12:26:5b:ad:03:6a:3e:fb:6d:5f:60:fb:5b:41: 65:c8:1d:2d:2b:ce:63:47:4e:6e:97:c3:a4:45:72:98:c3:3b: 6b:45:70:e7:7b:6c:5d:62:8d:e1:9a:da:a5:17:7d:a9:74:42: d9:76:e9:22:86:dc:1b:36:24:04:91:fe:6c:0f:8a:41:70:bc: 1a:60:49:00:07:02:6f:3b:bc:f5:d7:b8:91:40:48:36:ec:47: b5:a2:db:fe:26:d9:66:4f:e6:47:4f:f6:de:43:b4:de:f7:40: bb:c4:1b:1d:1b:10:8d:5f:72:3e:ac:cd:bd:5f:e5:5c:00:2e: 49:ed:8c:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNnuf2HARi7s1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDBlYTg0YWUtN2ZkMC00YzYxLThlZDUtYzM3MGMyOWZhNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj2Wj7x4u7FlSeNioD/motq41ts3kXXfxjeF 2m8v2JhVd1RaNwJ+p+12X8jHtXscrgrMyPnUT0zw33SjVQAZz+AChJ26/FwQTF/T sQSedrQyhYRVOcEionRacCPBDM2bk9xm6OmvYKl1IsuNGwe2q6VQLZI/fXtXlX2M yHH+5od//o53N8BR05+bKn1uolErYxrgbXrJ4y4cl2aE0mVOCMMeZ98tNcuwl6lY tRQESduMsgu8rIsAEDJwaYxQto21BS8taxxWFbpWxIlhTCDTSoRx05jn8nj5G5AI Gc7R8bjhIvRm2E0ryp/reFIO/c03u9+NfbFVOv7ZmBliAdfdQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF8ImGUQYU+VhvD38i8DKMKZXj3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhjYWQxMmQtZmM2My0z MTFhLTg0MGItZjc2Y2IzYjI2ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACF5tcT/Rfq96NQxSx3srbXKUYLJG71E2MhWuFMJ4TNkP0Zyt0DF s41AkA4DfZQe6qN65jJZ3U95rMsi1AGHYwLFdJhdq2OMnEDugU3mU9BZRrkFSvOy jUl4q/Qr6OHZ0bJqUnSZg4k9v1mia/C9nU3LWTL/C1zu09usdxSzEm9g4FcSJlut A2o++21fYPtbQWXIHS0rzmNHTm6Xw6RFcpjDO2tFcOd7bF1ijeGa2qUXfal0Qtl2 6SKG3Bs2JASR/mwPikFwvBpgSQAHAm87vPXXuJFASDbsR7Wi2/4m2WZP5kdP9t5D tN73QLvEGx0bEI1fcj6szb1f5VwALkntjKw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:21 2025 by rpki-client