$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfd9e8b5-618c-3b90-9901-1509d5a0e2e7.roa File: bfd9e8b5-618c-3b90-9901-1509d5a0e2e7.roa (raw, json) Hash identifier: hJ0OpPXNuMZTC/qno8iGcQLNP9zssDfTY8GUmtz/fHE= Subject key identifier: 62:E5:3E:7F:69:2D:80:7D:47:A7:6F:D9:2B:51:97:72:46:90:F3:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD17B825EF53FA987F300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfd9e8b5-618c-3b90-9901-1509d5a0e2e7.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396587 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d1:7b:82:5e:f5:3f:a9:87:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=bdba13c4-3ffa-448f-ab3c-6739310ce2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:9a:34:0f:42:af:ad:1f:07:93:46:14:f7: 72:3c:37:fb:a5:47:c0:f5:d2:19:3d:80:64:c5:6f: 69:40:a0:54:87:6c:74:42:78:3f:1b:92:74:65:e1: d4:4b:7e:6b:8b:a4:b9:d6:d7:17:6d:6a:13:c9:90: 61:88:3d:9d:e7:12:2d:2c:e5:96:86:c0:b8:85:4e: 4e:fe:ca:08:ec:a4:ea:a0:4f:21:59:3d:76:58:2f: 46:cf:47:6b:68:ac:f1:53:7b:df:d7:6e:7b:ef:3e: 49:0a:16:e0:93:76:1d:74:f3:20:2b:69:cf:7d:32: 0f:3e:f8:db:58:64:db:95:e7:5d:a1:e2:90:b0:8a: 57:bd:5f:50:50:0d:29:70:1c:66:fe:56:46:c5:a3: f8:74:aa:56:b9:f8:47:3e:0d:c6:1f:0d:b1:2b:1d: 4b:bf:8d:27:8e:54:d6:be:dc:ef:da:0f:90:8a:90: 0a:8c:a1:3f:2f:e7:3b:fa:ae:de:fa:fe:01:bc:6b: 33:1b:18:7a:b4:9d:ab:fc:79:9f:e7:0b:11:9a:1c: 82:df:df:f7:99:6d:f8:50:11:9a:28:21:49:30:e0: 81:9d:b9:09:32:40:7e:5c:0b:1c:0b:ef:45:11:fd: 54:11:42:fc:5a:8a:2d:84:e2:39:46:a8:5a:d3:79: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E5:3E:7F:69:2D:80:7D:47:A7:6F:D9:2B:51:97:72:46:90:F3:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfd9e8b5-618c-3b90-9901-1509d5a0e2e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f8:a2:d4:5a:a7:aa:98:e9:b4:81:83:ac:1b:5d:66:07:eb: 4d:c9:1e:88:dc:ec:af:8d:59:14:5f:23:eb:c8:2b:a5:a0:b2: 06:39:01:19:3f:dd:40:b3:2b:c8:4b:b0:8b:ea:e8:78:7b:d0: 4b:bf:c7:2f:6f:fa:57:8e:66:51:86:22:d2:2c:3d:3a:c8:01: e8:a2:49:1e:21:cb:bd:19:9f:04:55:37:7b:93:03:dc:9d:f9: d6:e0:94:c1:90:27:ac:df:a3:04:9e:0c:19:be:e6:56:e9:af: 2f:eb:88:42:48:65:8c:b8:93:f0:09:68:0d:83:68:3f:1b:6e: 87:9b:9c:52:1d:4c:f1:2c:23:fc:a5:06:22:33:5b:80:e2:d2: d0:c3:60:32:df:7a:14:1f:35:03:21:fb:74:fc:11:fe:e4:c5: a7:74:a2:a7:1a:43:45:35:87:39:c1:b0:59:71:e6:dc:f4:0c: e2:c5:67:3f:ff:fc:0c:c9:9f:f4:c8:1e:8c:c4:23:6b:d7:c3: 8d:7e:9f:53:be:c0:44:79:49:90:c3:dd:de:89:cf:c3:44:3c: 2f:be:f8:b0:aa:cc:a6:22:65:62:bc:a0:9c:26:bc:4e:b0:72: 3a:ba:1a:7a:9c:ce:68:d9:ab:00:fc:78:a3:02:02:a1:55:35: 5b:b6:33:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNF7gl71P6mH8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YmRiYTEzYzQtM2ZmYS00NDhmLWFiM2MtNjczOTMxMGNlMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcmaNA9Cr60fB5NGFPdyPDf7pUfA9dIZPYBk xW9pQKBUh2x0Qng/G5J0ZeHUS35ri6S51tcXbWoTyZBhiD2d5xItLOWWhsC4hU5O /soI7KTqoE8hWT12WC9Gz0draKzxU3vf12577z5JChbgk3YddPMgK2nPfTIPPvjb WGTbleddoeKQsIpXvV9QUA0pcBxm/lZGxaP4dKpWufhHPg3GHw2xKx1Lv40njlTW vtzv2g+QipAKjKE/L+c7+q7e+v4BvGszGxh6tJ2r/Hmf5wsRmhyC39/3mW34UBGa KCFJMOCBnbkJMkB+XAscC+9FEf1UEUL8WoothOI5Rqha03kMPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGLlPn9pLYB9R6dv2StRl3JGkPNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZkOWU4YjUtNjE4Yy0z YjkwLTk5MDEtMTUwOWQ1YTBlMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEP4otRap6qY6bSBg6wbXWYH603JHojc7K+NWRRfI+vIK6WgsgY5 ARk/3UCzK8hLsIvq6Hh70Eu/xy9v+leOZlGGItIsPTrIAeiiSR4hy70ZnwRVN3uT A9yd+dbglMGQJ6zfowSeDBm+5lbpry/riEJIZYy4k/AJaA2DaD8bboebnFIdTPEs I/ylBiIzW4Di0tDDYDLfehQfNQMh+3T8Ef7kxad0oqcaQ0U1hznBsFlx5tz0DOLF Zz///AzJn/TIHozEI2vXw41+n1O+wER5SZDD3d6Jz8NEPC+++LCqzKYiZWK8oJwm vE6wcjq6GnqczmjZqwD8eKMCAqFVNVu2M+8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:39 2025 by rpki-client