$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8429dfa-715e-34cc-a886-b6eeb9401398.roa File: c8429dfa-715e-34cc-a886-b6eeb9401398.roa (raw, json) Hash identifier: bQVDzn6bNEK/Y/qByZO+RO4XOjyewm6Sf75L8e3PfDU= Subject key identifier: 94:B1:BF:0C:BF:78:0B:AF:FD:B8:B1:F8:98:74:B5:B2:8C:2A:63:E4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A7868A43516E8B19CB3338 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8429dfa-715e-34cc-a886-b6eeb9401398.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 397212 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:86:8a:43:51:6e:8b:19:cb:33:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=ea614bf1-f129-49f9-a3f9-6a2a71c6d2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:0a:ca:e2:56:82:c8:7e:13:f5:9b:fd:b4: c6:4d:87:b8:30:43:4e:a0:29:71:87:ff:fb:b1:b7: d1:04:2f:52:8e:85:e1:8c:17:44:8f:7b:e3:b6:e0: 7c:e0:32:fe:d3:c0:46:44:9e:3d:71:a1:a5:f7:8d: 3f:ec:98:1a:7a:da:58:08:2f:9e:43:db:a1:d1:c0: 35:82:12:f6:c3:e5:8a:41:f4:71:8f:43:26:e6:bb: 55:80:d1:ae:6a:64:9c:5b:9b:de:3d:85:c6:ed:a3: f3:b2:b0:7f:dd:5c:e4:88:1e:47:8f:37:8a:93:c0: 4c:4d:10:a5:cd:43:4a:fd:37:04:2b:83:ca:16:64: 86:a7:99:c7:0b:4e:d4:db:c1:20:10:61:03:7d:41: c5:87:03:53:38:e5:69:f2:1e:9e:ef:f7:b1:7b:26: 33:b2:7f:d7:cc:94:7f:4f:4d:7c:3a:95:63:76:60: 4c:49:3b:16:16:a3:64:60:81:b2:4a:5d:72:b3:78: 9e:4c:04:7d:47:9e:3e:29:5e:de:87:a8:71:46:44: 7a:2f:0e:b3:c4:12:87:10:ad:f8:bb:0c:c7:c0:44: 46:6e:3a:57:06:13:32:04:fc:f3:6d:f3:95:89:07: 3a:46:b8:76:a1:49:00:14:eb:88:c3:1e:84:ee:42: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:BF:0C:BF:78:0B:AF:FD:B8:B1:F8:98:74:B5:B2:8C:2A:63:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8429dfa-715e-34cc-a886-b6eeb9401398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bd:9e:c6:79:02:bb:8b:2c:cb:d2:8e:a2:7e:1c:de:3e:bd: 5b:0e:a6:f3:21:bc:45:8d:ff:d5:b4:d7:82:7a:57:8e:99:2b: 9d:ad:83:c4:36:3b:d6:ad:cd:95:3c:7e:4a:b2:e3:69:9c:8d: 73:1d:38:bf:21:ad:48:00:dd:af:e7:a4:a3:2a:35:c7:65:da: ad:94:2e:95:9c:e5:9b:20:03:24:c5:88:0a:fb:f0:a9:9b:d0: 28:bd:5e:5b:18:c6:43:37:e6:f7:38:e3:60:ce:3e:e1:3b:2a: 39:67:c6:d4:23:cc:ff:e5:06:c2:3d:fe:e7:f6:45:14:01:bc: 35:f0:d8:fb:c5:f0:17:f7:17:2d:83:11:21:d5:56:fd:ae:e8: c8:23:2a:8e:99:5a:fd:dd:69:33:6f:fc:cb:78:3d:49:25:4e: d1:46:e4:3c:ca:c3:01:74:35:cc:2b:40:1a:41:96:6d:62:e2: e3:32:9d:42:f4:0f:7b:20:e9:73:31:03:f3:1f:35:ed:c2:97: a7:d4:9f:01:ea:83:e1:8c:c5:a0:71:0e:39:cd:98:28:67:82: 04:a3:ed:ce:57:ff:79:34:52:6a:af:49:b2:1b:9d:33:d7:b7: 11:12:32:17:09:10:60:65:1c:66:de:f4:bd:e7:50:d2:53:13: 5f:91:50:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4aKQ1FuixnLMzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZWE2MTRiZjEtZjEyOS00OWY5LWEzZjktNmEyYTcxYzZkMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhawKyuJWgsh+E/Wb/bTGTYe4MENOoClxh//7 sbfRBC9SjoXhjBdEj3vjtuB84DL+08BGRJ49caGl940/7JgaetpYCC+eQ9uh0cA1 ghL2w+WKQfRxj0Mm5rtVgNGuamScW5vePYXG7aPzsrB/3VzkiB5HjzeKk8BMTRCl zUNK/TcEK4PKFmSGp5nHC07U28EgEGEDfUHFhwNTOOVp8h6e7/exeyYzsn/XzJR/ T018OpVjdmBMSTsWFqNkYIGySl1ys3ieTAR9R54+KV7eh6hxRkR6Lw6zxBKHEK34 uwzHwERGbjpXBhMyBPzzbfOViQc6Rrh2oUkAFOuIwx6E7kLzvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJSxvwy/eAuv/bix+Jh0tbKMKmPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg0MjlkZmEtNzE1ZS0z NGNjLWE4ODYtYjZlZWI5NDAxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABe9nsZ5AruLLMvSjqJ+HN4+vVsOpvMhvEWN/9W014J6V46ZK52t g8Q2O9atzZU8fkqy42mcjXMdOL8hrUgA3a/npKMqNcdl2q2ULpWc5ZsgAyTFiAr7 8Kmb0Ci9XlsYxkM35vc442DOPuE7KjlnxtQjzP/lBsI9/uf2RRQBvDXw2PvF8Bf3 Fy2DESHVVv2u6MgjKo6ZWv3daTNv/Mt4PUklTtFG5DzKwwF0NcwrQBpBlm1i4uMy nUL0D3sg6XMxA/MfNe3Cl6fUnwHqg+GMxaBxDjnNmChnggSj7c5X/3k0UmqvSbIb nTPXtxESMhcJEGBlHGbe9L3nUNJTE1+RUBk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:21 2025 by rpki-client