$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cad323df-5da8-32a5-8dc3-caa4e45c1bb1.roa File: cad323df-5da8-32a5-8dc3-caa4e45c1bb1.roa (raw, json) Hash identifier: VDwImJOnuHJRVCTcnaJjZ87NkGnSB4+d3DoWQ2eA8xY= Subject key identifier: 2C:42:CE:33:E8:C6:A0:4F:D8:C1:6D:A6:59:D7:53:BA:EF:95:49:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD0DFED50BB0921673000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cad323df-5da8-32a5-8dc3-caa4e45c1bb1.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396662 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d0:df:ed:50:bb:09:21:67:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=e1596168-b0d6-424e-90d2-2d323aca3087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:34:e7:00:4a:fd:ab:ce:b5:3e:4f:a0:27: 35:35:8e:81:34:48:0a:3f:39:e5:af:e9:65:ad:f1: 3a:42:fa:06:d6:14:e2:59:4f:64:b8:ed:3c:30:0e: e6:f9:81:21:93:dd:11:cc:d9:6a:39:ae:5f:e2:2d: 06:06:0f:3f:25:79:a7:b3:4f:91:1c:1c:75:6d:dd: 3d:c7:07:62:84:45:0c:af:f5:eb:10:d9:96:df:a8: b8:b3:7a:85:d1:f5:fd:49:b1:4b:d0:9c:7a:00:49: c9:5e:5a:22:68:cb:e4:68:f6:cb:d1:54:0d:1b:a1: ef:17:d0:4f:a4:8e:20:6d:fb:3d:67:f2:6d:b2:4b: 95:d4:5f:58:f7:2a:74:7d:96:c8:93:55:f7:5c:46: 27:8f:90:53:92:68:7e:b1:ff:75:47:f9:9e:96:99: 8c:53:b5:49:ba:b5:b9:b8:39:b9:64:4e:40:59:d6: 49:46:6e:07:06:91:05:d2:12:37:40:02:d9:6b:9c: c9:48:8f:24:ec:9d:a4:75:6f:b0:e3:e5:55:2a:b0: f6:62:85:94:02:17:3b:78:08:93:49:c1:2a:97:ac: 64:bc:c1:6d:a7:1a:a9:30:3e:76:68:0f:82:d0:f5: e9:fd:c4:ab:0f:5f:1d:c2:64:26:f5:61:4c:17:c3: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:42:CE:33:E8:C6:A0:4F:D8:C1:6D:A6:59:D7:53:BA:EF:95:49:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cad323df-5da8-32a5-8dc3-caa4e45c1bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:99:3e:af:82:6b:4c:fd:a7:c5:0e:ec:87:ee:73:c3:55:d2: 38:9c:36:59:fd:4f:ff:01:c9:4c:d0:d2:1a:e4:68:a5:9f:78: 14:c7:3e:03:b6:0d:87:91:2b:35:3f:f1:55:eb:04:3d:90:e3: 4d:40:40:74:88:c1:e9:d3:47:0e:bd:91:65:e5:6e:6e:80:e2: 8e:55:b0:e7:a8:f1:8f:73:14:c2:8d:4d:ce:e6:d9:4a:ec:3c: 48:c8:2d:2a:fd:33:7c:3a:45:a0:6b:82:39:02:1b:10:84:c8: 24:ff:34:04:4e:37:60:6f:f6:5c:76:5b:92:f4:b4:5b:80:d7: e8:ee:8e:3f:4d:62:ce:71:c2:1d:6b:fc:70:89:be:6d:4c:ff: 6c:0f:b3:b9:5e:7f:c2:bc:6d:ff:3c:4d:3c:2c:9c:a8:30:a7: 12:ab:95:93:94:b9:e0:9f:98:95:e0:78:67:89:6e:3d:83:3b: 3d:d3:58:24:f2:8b:22:10:c7:d7:df:ee:c2:6f:fa:1e:78:90: dd:fb:81:af:ec:a4:f6:7a:98:62:98:9e:d6:04:11:ad:20:26: ae:4d:50:6b:d1:7a:26:00:72:89:b2:65:1e:a3:b0:85:4b:b9: 87:6a:e7:45:91:f5:59:1e:d3:a5:21:6c:c8:8e:6a:3e:65:dc: b0:44:02:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNDf7VC7CSFnMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZTE1OTYxNjgtYjBkNi00MjRlLTkwZDItMmQzMjNhY2EzMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8U05wBK/avOtT5PoCc1NY6BNEgKPznlr+ll rfE6QvoG1hTiWU9kuO08MA7m+YEhk90RzNlqOa5f4i0GBg8/JXmns0+RHBx1bd09 xwdihEUMr/XrENmW36i4s3qF0fX9SbFL0Jx6AEnJXloiaMvkaPbL0VQNG6HvF9BP pI4gbfs9Z/JtskuV1F9Y9yp0fZbIk1X3XEYnj5BTkmh+sf91R/melpmMU7VJurW5 uDm5ZE5AWdZJRm4HBpEF0hI3QALZa5zJSI8k7J2kdW+w4+VVKrD2YoWUAhc7eAiT ScEql6xkvMFtpxqpMD52aA+C0PXp/cSrD18dwmQm9WFMF8MCXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCxCzjPoxqBP2MFtplnXU7rvlUkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FkMzIzZGYtNWRhOC0z MmE1LThkYzMtY2FhNGU0NWMxYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuZPq+Ca0z9p8UO7Ifuc8NV0jicNln9T/8ByUzQ0hrkaKWfeBTH PgO2DYeRKzU/8VXrBD2Q401AQHSIwenTRw69kWXlbm6A4o5VsOeo8Y9zFMKNTc7m 2UrsPEjILSr9M3w6RaBrgjkCGxCEyCT/NARON2Bv9lx2W5L0tFuA1+jujj9NYs5x wh1r/HCJvm1M/2wPs7lef8K8bf88TTwsnKgwpxKrlZOUueCfmJXgeGeJbj2DOz3T WCTyiyIQx9ff7sJv+h54kN37ga/spPZ6mGKYntYEEa0gJq5NUGvReiYAcomyZR6j sIVLuYdq50WR9Vke06UhbMiOaj5l3LBEAnA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:34 2025 by rpki-client