$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23d6d88-0870-331d-8845-94880dfd5bf2.roa File: d23d6d88-0870-331d-8845-94880dfd5bf2.roa (raw, json) Hash identifier: 0bOk1aLa68lJqSVcpf4IEvGbfilSOjAqA3B07FtwIKU= Subject key identifier: 36:B2:7B:24:44:30:C3:98:8E:E3:6A:42:8B:0A:6E:25:3E:D8:09:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD6FAC67BA661FE269FE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23d6d88-0870-331d-8845-94880dfd5bf2.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396678 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d6:fa:c6:7b:a6:61:fe:26:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=894465d4-15f9-4d83-a911-1b0e2e090ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:84:05:12:40:f6:cd:36:26:4b:05:41:04:34: 38:61:2e:df:8f:cd:a4:24:7c:0c:be:cd:50:da:1e: 1e:6b:7e:4f:87:61:45:3e:25:4c:47:18:c3:ba:56: 06:d8:0d:85:f3:da:26:b3:fb:96:6f:6a:7a:47:07: ec:25:55:40:01:58:d1:28:9f:d6:ad:57:13:a3:0a: ae:93:b2:37:9c:61:61:da:43:e5:d4:8d:65:50:c5: 3f:cd:e9:24:fb:a4:88:8c:23:73:f4:2b:26:d7:c2: ef:0a:2c:77:3c:f5:81:15:8f:9c:4f:ed:70:08:9e: b4:96:ba:e8:e6:df:c5:32:da:6d:cb:25:d2:bb:c9: a3:48:e8:19:01:3e:3c:af:88:55:66:fe:82:bc:24: 54:50:78:3c:9b:78:22:2a:e0:66:d5:71:1d:99:dd: ad:35:de:74:12:13:db:47:a9:59:d7:db:ac:22:d5: c9:06:5d:50:3a:43:a1:32:91:d2:2e:1d:6a:03:72: 5f:36:e4:36:5b:8c:b9:df:74:a7:c6:95:ab:08:21: 53:96:26:d7:ac:c8:30:c7:fa:e4:a3:8c:34:1f:ed: 4c:59:75:9e:47:06:a6:3a:7a:54:c1:07:c1:a4:84: 86:98:a5:f6:ed:d8:6b:11:21:d1:d2:1e:9f:23:4b: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:7B:24:44:30:C3:98:8E:E3:6A:42:8B:0A:6E:25:3E:D8:09:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23d6d88-0870-331d-8845-94880dfd5bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:61:41:48:d4:80:a3:76:07:66:ca:8f:e3:fd:0e:04:39:28: 3d:b5:29:11:b5:cb:80:e1:c8:98:7b:52:13:c6:3a:cb:d6:c6: fb:4c:d9:b1:45:aa:89:e6:2a:c9:7e:fe:36:9e:b2:0c:71:4a: 36:fb:ce:1b:16:fb:fb:ca:31:3f:c7:79:c7:29:a9:79:42:d3: 6d:b3:d9:45:7d:17:b0:ed:63:7b:20:91:ea:d4:9d:b0:d5:e0: aa:d3:94:6e:7c:b9:fa:80:3a:8c:44:5e:47:c7:08:17:eb:c1: 23:1b:43:5d:65:a0:fe:c8:31:1e:52:2c:dc:67:b5:68:d2:9c: e4:47:71:c5:aa:76:e4:da:9c:09:c7:61:aa:f0:43:cc:fe:c8: 5a:e1:f3:54:42:ff:59:fd:7f:b0:e0:d7:bb:ac:47:bb:69:d9: c5:89:f4:46:b7:4f:12:45:ab:80:1e:3c:e0:8a:4e:ea:ab:d4: 75:9e:1d:89:96:2e:d8:c4:dc:4a:20:74:56:a7:d9:e5:c1:79: 26:d5:3d:ed:d0:5b:68:47:ce:37:8d:11:4e:c8:e0:90:04:73: ab:41:1d:fd:9b:6d:2c:da:da:2c:f1:3e:d7:0d:a0:b9:2a:6e: 97:9a:50:18:4e:bb:ca:bb:ff:19:a2:26:50:67:5b:f5:88:a8: d0:f2:53:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNb6xnumYf4mn+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ODk0NDY1ZDQtMTVmOS00ZDgzLWE5MTEtMWIwZTJlMDkwYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oQFEkD2zTYmSwVBBDQ4YS7fj82kJHwMvs1Q 2h4ea35Ph2FFPiVMRxjDulYG2A2F89oms/uWb2p6RwfsJVVAAVjRKJ/WrVcTowqu k7I3nGFh2kPl1I1lUMU/zekk+6SIjCNz9Csm18LvCix3PPWBFY+cT+1wCJ60lrro 5t/FMtptyyXSu8mjSOgZAT48r4hVZv6CvCRUUHg8m3giKuBm1XEdmd2tNd50EhPb R6lZ19usItXJBl1QOkOhMpHSLh1qA3JfNuQ2W4y533SnxpWrCCFTlibXrMgwx/rk o4w0H+1MWXWeRwamOnpUwQfBpISGmKX27dhrESHR0h6fI0surwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDayeyREMMOYjuNqQosKbiU+2AklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDIzZDZkODgtMDg3MC0z MzFkLTg4NDUtOTQ4ODBkZmQ1YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNhQUjUgKN2B2bKj+P9DgQ5KD21KRG1y4DhyJh7UhPGOsvWxvtM 2bFFqonmKsl+/jaesgxxSjb7zhsW+/vKMT/HeccpqXlC022z2UV9F7DtY3sgkerU nbDV4KrTlG58ufqAOoxEXkfHCBfrwSMbQ11loP7IMR5SLNxntWjSnORHccWqduTa nAnHYarwQ8z+yFrh81RC/1n9f7Dg17usR7tp2cWJ9Ea3TxJFq4AePOCKTuqr1HWe HYmWLtjE3EogdFan2eXBeSbVPe3QW2hHzjeNEU7I4JAEc6tBHf2bbSza2izxPtcN oLkqbpeaUBhOu8q7/xmiJlBnW/WIqNDyU08= -----END CERTIFICATE-----Generated at Mon Oct 20 07:02:19 2025 by rpki-client