$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa File: cf427ffd-de9a-357e-9695-68b9971007a0.roa (raw, json) Hash identifier: qapnyyLMja4CNoQ6NOISJ1Ra//4zks5chYBSJGxNCls= Subject key identifier: 05:00:07:D7:38:BC:D8:95:4E:90:08:CF:0A:57:E4:E7:EC:D4:BF:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D46B09C6AFBD4CF2A080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 396561 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d4:6b:09:c6:af:bd:4c:f2:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=4af667e8-ed97-4c59-89aa-b9597f6a06d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:34:8b:53:2a:50:59:bc:7f:bd:80:81:b1: 12:30:ce:d7:6b:ca:dc:37:43:5e:6c:8e:e7:cf:20: 0b:a7:f3:17:88:dd:91:dd:33:18:88:04:23:13:fe: 70:ee:f5:bd:57:8a:20:20:9e:5e:1e:5a:74:f3:41: ec:d7:03:c2:3b:c6:41:2b:c4:6d:71:71:47:0d:97: 70:b1:0c:69:b6:12:56:b4:6e:05:42:db:22:90:3b: 54:f2:4b:39:c7:b6:bc:6a:40:ff:94:c4:ab:4f:2c: c8:8b:fc:b5:c5:4f:31:44:1e:5e:22:fb:62:ca:31: 4f:21:93:2a:8a:b8:4e:c9:97:c1:a1:ed:1c:3a:03: 09:14:88:c9:ee:3b:75:fb:c0:a4:d3:91:44:c8:96: af:af:71:02:9e:40:2c:15:57:12:33:dd:a4:75:5d: f1:5d:e3:22:89:a5:2e:51:ae:66:ee:d3:55:9e:78: 33:9a:df:08:18:af:b7:ac:90:5d:1e:92:a2:35:8c: 9b:8d:98:7c:fc:b1:50:63:db:23:3e:1f:8c:4f:7f: ec:50:47:44:aa:22:43:9b:4d:4d:03:a3:05:ce:b5: fc:c9:ab:b6:31:82:fd:a3:18:77:dc:3e:4f:c3:cf: 2e:52:34:c9:ab:c2:bf:3a:42:4f:13:a5:fc:6c:96: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:00:07:D7:38:BC:D8:95:4E:90:08:CF:0A:57:E4:E7:EC:D4:BF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6c:0b:8c:e2:b1:65:73:5f:30:4b:e9:77:65:31:03:0c:15: de:76:9d:4d:06:c4:47:e3:fa:e7:95:2b:6b:c3:80:61:38:8d: 5d:20:58:dd:be:ee:db:3c:7e:bf:27:db:47:bd:74:b1:62:6e: 30:e5:78:92:25:fd:c7:c9:d9:92:9d:b3:e0:0a:b2:13:b6:1c: a4:4b:07:8b:d2:1b:2c:1c:c7:65:a6:e2:55:98:94:4d:53:45: c6:3d:89:40:fb:10:eb:69:46:d1:9d:e1:79:62:f0:20:ce:96: fb:09:1e:69:3c:c5:87:4a:a8:16:c6:a9:cf:3e:ac:3b:bf:d0: 05:47:b6:12:c4:33:fb:eb:49:6b:fa:d2:3e:e7:95:29:8b:51: aa:d9:07:7f:77:ba:62:83:b8:10:a4:b2:c4:a5:05:7e:ca:07: e5:82:28:cf:74:da:b2:e2:cc:3d:aa:1f:e6:31:0b:74:32:fc: df:bf:50:b6:27:3f:ed:b7:aa:a9:02:4b:d0:9c:10:9c:4c:67: 54:dd:35:14:e3:5d:52:e1:87:8c:ed:a9:23:04:46:70:f9:40: f7:ba:37:e6:13:f3:8b:4d:ce:ac:d2:96:60:96:f5:d8:f8:42: 78:1c:b7:db:fe:34:11:3f:c4:8d:f9:f8:12:20:17:a9:40:5c: a5:38:fb:fd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtAgdRrCcavvUzyoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NGFmNjY3ZTgtZWQ5Ny00YzU5LTg5YWEtYjk1OTdmNmEwNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotQ0i1MqUFm8f72AgbESMM7Xa8rcN0NebI7n zyALp/MXiN2R3TMYiAQjE/5w7vW9V4ogIJ5eHlp080Hs1wPCO8ZBK8RtcXFHDZdw sQxpthJWtG4FQtsikDtU8ks5x7a8akD/lMSrTyzIi/y1xU8xRB5eIvtiyjFPIZMq irhOyZfBoe0cOgMJFIjJ7jt1+8Ck05FEyJavr3ECnkAsFVcSM92kdV3xXeMiiaUu Ua5m7tNVnngzmt8IGK+3rJBdHpKiNYybjZh8/LFQY9sjPh+MT3/sUEdEqiJDm01N A6MFzrX8yau2MYL9oxh33D5Pw88uUjTJq8K/OkJPE6X8bJakmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAUAB9c4vNiVTpAIzwpX5Ofs1L+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y0MjdmZmQtZGU5YS0z NTdlLTk2OTUtNjhiOTk3MTAwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqbAuM4rFlc18wS+l3ZTEDDBXedp1NBsRH4/rn lStrw4BhOI1dIFjdvu7bPH6/J9tHvXSxYm4w5XiSJf3HydmSnbPgCrITthykSweL 0hssHMdlpuJVmJRNU0XGPYlA+xDraUbRneF5YvAgzpb7CR5pPMWHSqgWxqnPPqw7 v9AFR7YSxDP760lr+tI+55Upi1Gq2Qd/d7pig7gQpLLEpQV+ygflgijPdNqy4sw9 qh/mMQt0Mvzfv1C2Jz/tt6qpAkvQnBCcTGdU3TUU411S4YeM7akjBEZw+UD3ujfm E/OLTc6s0pZglvXY+EJ4HLfb/jQRP8SN+fgSIBepQFylOPv9 -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:40 2025 by rpki-client