$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa File: c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa (raw, json) Hash identifier: bNlG6mZYj+8T1MOwJVaPxGrW3eDCrD1KbbJestLdkac= Subject key identifier: 37:7D:DF:73:13:4F:FF:20:BB:11:74:80:36:B2:F0:D6:71:7B:00:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD687525BDCECBA46F940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396571 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d6:87:52:5b:dc:ec:ba:46:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=6432b796-ffcd-4c91-baf1-c2569913bfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:e7:10:ae:e6:2f:e7:f2:e3:ff:44:5c:ab: 02:49:9d:d5:fd:41:e1:79:1b:12:2f:e1:10:ba:a8: c6:3a:f6:4e:b7:d0:8f:34:08:12:50:45:52:81:62: d1:2c:70:35:ff:ed:e5:44:be:02:5a:21:c4:14:fe: de:32:50:be:94:ea:34:8e:3b:5c:ed:28:68:44:14: 30:15:56:97:6a:10:77:11:f2:dc:f8:fa:22:ed:9c: 33:9a:ad:ec:24:58:80:97:42:d8:59:9c:74:49:c3: 25:aa:60:a6:17:26:31:e1:78:82:2c:c2:1d:c2:0d: 43:55:45:37:14:e7:3c:74:25:43:fa:89:f5:d0:39: 2e:08:67:7c:40:f4:06:7b:51:e8:ee:37:74:0a:30: 50:db:61:85:a6:54:da:50:32:cc:9b:ce:88:fa:7b: e1:cb:9e:90:79:ae:20:86:3a:0e:ce:36:6b:4f:83: 7f:da:da:a0:95:03:1c:87:96:1b:01:93:1d:7b:ba: a7:b4:3d:0c:25:ec:84:f5:91:82:37:84:b4:3c:e6: 65:4e:68:dd:c0:77:e1:0b:3c:1a:d4:3a:88:c8:bf: 7a:7c:5b:00:86:3b:ee:7e:06:b9:99:bf:e0:70:98: 52:93:9b:d2:29:d0:e3:77:fd:8d:af:3e:1b:36:3a: cb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7D:DF:73:13:4F:FF:20:BB:11:74:80:36:B2:F0:D6:71:7B:00:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c08c7e0e-a03e-392a-9b21-78f9dc4cb7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:76:08:f4:1b:cd:77:05:a4:58:50:b5:9f:55:04:4f:54:72: d8:51:c7:d5:e3:89:8f:3f:f2:bc:14:03:99:30:14:f3:27:96: 04:8f:a1:25:2a:2c:15:8c:8b:11:21:1f:a4:1f:97:05:08:60: 59:28:79:2d:dc:d0:67:05:1b:cb:4d:2d:46:5e:25:2a:d8:91: 59:1d:da:99:ce:ba:20:25:f7:c9:60:4f:07:b1:49:de:55:0d: b9:fa:87:4d:1a:91:46:07:88:a2:f2:2e:de:f3:09:aa:59:db: 2b:80:26:1c:3e:0b:7e:77:05:86:9b:a2:84:8d:68:1f:a0:8e: 10:dd:e6:5e:41:18:21:e3:17:6f:36:bb:4d:c8:ce:fb:76:00: b3:82:05:63:4e:12:65:2b:be:16:40:d3:84:1d:46:17:bb:c2: a4:04:6f:08:21:6d:ee:71:d0:e6:fe:79:b6:b4:00:34:3c:22: f0:87:10:8a:04:f8:d1:6a:6a:ce:f6:72:c7:24:e1:c6:02:62: c6:04:ce:59:a8:e2:53:8b:74:23:28:3d:49:e4:e1:19:67:a0: ac:df:9a:0c:00:b7:04:80:8e:28:25:64:5a:57:06:a9:76:72: f4:c2:5d:b2:48:3b:e1:e6:11:07:f4:27:4e:6b:08:1b:42:5b: 32:6a:37:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNaHUlvc7LpG+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NjQzMmI3OTYtZmZjZC00YzkxLWJhZjEtYzI1Njk5MTNiZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKjnEK7mL+fy4/9EXKsCSZ3V/UHheRsSL+EQ uqjGOvZOt9CPNAgSUEVSgWLRLHA1/+3lRL4CWiHEFP7eMlC+lOo0jjtc7ShoRBQw FVaXahB3EfLc+Poi7Zwzmq3sJFiAl0LYWZx0ScMlqmCmFyYx4XiCLMIdwg1DVUU3 FOc8dCVD+on10DkuCGd8QPQGe1Ho7jd0CjBQ22GFplTaUDLMm86I+nvhy56Qea4g hjoOzjZrT4N/2tqglQMch5YbAZMde7qntD0MJeyE9ZGCN4S0POZlTmjdwHfhCzwa 1DqIyL96fFsAhjvufga5mb/gcJhSk5vSKdDjd/2Nrz4bNjrL1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDd933MTT/8guxF0gDay8NZxewCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzA4YzdlMGUtYTAzZS0z OTJhLTliMjEtNzhmOWRjNGNiN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAh2CPQbzXcFpFhQtZ9VBE9UcthRx9XjiY8/8rwUA5kwFPMnlgSP oSUqLBWMixEhH6QflwUIYFkoeS3c0GcFG8tNLUZeJSrYkVkd2pnOuiAl98lgTwex Sd5VDbn6h00akUYHiKLyLt7zCapZ2yuAJhw+C353BYabooSNaB+gjhDd5l5BGCHj F282u03Izvt2ALOCBWNOEmUrvhZA04QdRhe7wqQEbwghbe5x0Ob+eba0ADQ8IvCH EIoE+NFqas72csck4cYCYsYEzlmo4lOLdCMoPUnk4RlnoKzfmgwAtwSAjiglZFpX Bql2cvTCXbJIO+HmEQf0J05rCBtCWzJqN6E= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:10 2025 by rpki-client