$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa File: bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa (raw, json) Hash identifier: rQ3C2/sBorWPW50C40pmW3EtZvTBzQoWDYA1LuZoaUM= Subject key identifier: 49:2F:E1:A8:44:87:DE:9D:CC:B5:0B:D5:6E:19:26:6E:7D:BE:EE:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A7874C5D72E772BC06A900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 396617 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:87:4c:5d:72:e7:72:bc:06:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=6dd10a6c-ac0a-4f41-97bd-5c5ae8ff2090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:9f:73:69:26:63:fd:39:89:42:88:0a:01: 39:ff:02:e5:12:f2:96:16:c6:bd:4a:a3:8e:70:9d: 49:e7:77:96:72:3e:57:7f:75:7b:88:f9:17:f3:05: 67:12:01:71:da:cc:df:d4:67:41:d0:a4:fe:a3:ca: eb:09:71:64:fe:e6:e4:52:ac:14:3f:6f:44:fa:f9: 71:76:d2:d8:15:7e:83:4c:b5:4d:a5:60:5e:3f:61: 21:93:3e:a7:5a:36:a1:cf:81:34:19:25:0e:89:15: 62:e0:73:48:75:10:c8:ff:68:7d:a0:a7:78:d7:a0: ea:4f:10:8b:ef:90:46:09:47:b5:9e:87:05:cb:01: 83:f2:4c:4e:0f:b0:b4:df:9f:dd:46:05:55:1d:a3: 1c:a1:51:a8:e7:39:93:47:55:30:c4:2e:cc:a1:90: b0:4f:d3:b8:7f:cc:5d:9f:fd:aa:c3:f9:e1:f6:e7: e7:b0:9f:de:98:de:7c:c0:7b:ba:fe:10:cc:97:7e: f5:36:f8:08:9c:2c:ce:76:3b:4b:a7:98:7b:18:04: c1:62:39:00:f8:3c:0b:2b:08:45:56:65:55:16:f7: da:80:dc:9d:04:e7:bb:e4:14:09:e3:57:03:70:a2: c0:de:e6:60:32:37:d2:51:80:7f:b8:eb:88:ca:db: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2F:E1:A8:44:87:DE:9D:CC:B5:0B:D5:6E:19:26:6E:7D:BE:EE:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:18:95:2f:e3:84:21:74:e4:4e:e5:59:6a:c2:08:76:9b:b4: 3a:1b:c7:51:5e:9e:86:6c:08:6b:5a:f0:8d:20:75:38:44:18: c1:d5:f1:4e:34:c8:77:ea:e3:ad:2d:0f:e9:80:0d:dd:82:d2: 9c:af:9f:11:5b:32:47:c4:96:82:d9:2d:e6:ea:ca:99:a8:92: ca:61:3d:8e:ce:97:b3:83:16:3a:4f:48:02:f9:1f:21:5d:c9: d5:1c:e5:6b:8b:0f:2e:39:49:65:58:28:36:e6:91:da:8a:6f: 33:ee:4d:c5:a7:63:6a:e8:66:f5:0a:86:76:f6:ab:9f:d1:0b: 39:49:f1:fc:05:36:22:9c:d5:81:03:8f:1c:d6:a3:03:1c:b2: 4c:0d:f8:64:d0:32:39:45:54:0c:a0:da:b7:25:ec:69:68:9f: 13:2b:28:0f:f4:17:c8:a6:cf:33:bd:74:2a:22:95:0e:93:60: f9:01:93:7a:c0:89:d4:50:6d:a7:23:df:9f:c1:c9:50:67:5a: e2:3c:48:59:57:14:81:12:3d:f0:00:65:55:df:6d:ad:7c:ff: 51:2a:6e:26:15:1f:3d:39:ff:9a:a9:41:05:9d:71:91:6c:56: 13:0e:7b:4f:b8:f3:06:18:24:32:98:e0:35:fd:5c:e3:9a:2d: f3:cd:94:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4dMXXLncrwGqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NmRkMTBhNmMtYWMwYS00ZjQxLTk3YmQtNWM1YWU4ZmYyMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Ofc2kmY/05iUKICgE5/wLlEvKWFsa9SqOO cJ1J53eWcj5Xf3V7iPkX8wVnEgFx2szf1GdB0KT+o8rrCXFk/ubkUqwUP29E+vlx dtLYFX6DTLVNpWBeP2Ehkz6nWjahz4E0GSUOiRVi4HNIdRDI/2h9oKd416DqTxCL 75BGCUe1nocFywGD8kxOD7C035/dRgVVHaMcoVGo5zmTR1UwxC7MoZCwT9O4f8xd n/2qw/nh9ufnsJ/emN58wHu6/hDMl371NvgInCzOdjtLp5h7GATBYjkA+DwLKwhF VmVVFvfagNydBOe75BQJ41cDcKLA3uZgMjfSUYB/uOuIytvp8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEkv4ahEh96dzLUL1W4ZJm59vu6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY1YjJiYTEtN2EzZi0z MjkxLWIzZGUtMjBmMjQ2MmNiZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIcYlS/jhCF05E7lWWrCCHabtDobx1FenoZsCGta8I0gdThEGMHV 8U40yHfq460tD+mADd2C0pyvnxFbMkfEloLZLebqypmoksphPY7Ol7ODFjpPSAL5 HyFdydUc5WuLDy45SWVYKDbmkdqKbzPuTcWnY2roZvUKhnb2q5/RCzlJ8fwFNiKc 1YEDjxzWowMcskwN+GTQMjlFVAyg2rcl7GlonxMrKA/0F8imzzO9dCoilQ6TYPkB k3rAidRQbacj35/ByVBnWuI8SFlXFIESPfAAZVXfba18/1EqbiYVHz05/5qpQQWd cZFsVhMOe0+48wYYJDKY4DX9XOOaLfPNlE8= -----END CERTIFICATE-----Generated at Tue Oct 21 02:03:51 2025 by rpki-client