$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d27e7eb2-6f72-3121-aec0-7374f3708f10.roa File: d27e7eb2-6f72-3121-aec0-7374f3708f10.roa (raw, json) Hash identifier: a2hAFXQ9utHEY/D+MuNlK7jxl2wBqQuHv2K9AoWmLJA= Subject key identifier: CB:36:E3:4A:E4:4E:6A:6E:62:90:35:54:44:F1:5D:11:E5:A6:B9:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A786AD8612AF87290140C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d27e7eb2-6f72-3121-aec0-7374f3708f10.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 211369 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:86:ad:86:12:af:87:29:01:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c2688d84-4b7d-45a1-a371-faab4df0cbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:da:e5:0e:99:e2:07:ab:19:3f:b9:e8:95: f8:29:59:73:8c:fa:3b:2e:04:f3:5c:15:5b:d1:83: 2a:d8:4a:ee:af:bf:af:3b:37:6a:49:9c:a2:97:94: 22:8b:17:2c:bf:74:bf:2b:bc:9b:39:73:57:39:ba: d8:89:92:0d:7d:81:ed:8b:b2:b5:79:60:ee:58:93: b7:04:16:14:bc:5b:50:21:df:70:7b:44:da:1a:d0: 35:56:b4:df:29:b7:27:e9:4d:85:30:8e:61:18:89: 4b:21:a2:1e:02:af:31:47:54:e0:f0:cb:91:cb:d8: 4e:9c:90:0e:e8:5a:b6:3c:f0:40:c8:77:4d:fd:3d: d4:d8:a7:31:f3:b6:70:36:7d:51:2f:af:86:0e:bd: b8:7e:27:21:a9:14:ac:4e:39:69:0d:da:0b:20:f2: a7:a2:00:51:28:c8:45:0e:7d:0c:3d:d1:e0:08:c0: 3b:97:f1:5a:4f:3a:ae:ab:63:c6:53:d8:95:d2:48: 60:c5:90:04:44:0c:8e:35:0d:99:f9:da:de:e2:8c: 7e:87:e5:32:ec:a5:90:ca:8f:61:5d:67:f3:64:68: d5:f7:b7:bf:fb:50:d5:70:b3:2b:00:ca:30:b1:83: 20:fb:50:94:45:58:fd:61:43:c7:f8:fc:fe:9c:08: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:36:E3:4A:E4:4E:6A:6E:62:90:35:54:44:F1:5D:11:E5:A6:B9:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d27e7eb2-6f72-3121-aec0-7374f3708f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:dd:3f:84:8e:8b:40:c9:b9:7a:cb:a2:3d:e2:99:ca:91:0e: ec:0c:4b:88:4b:0c:89:b3:12:10:97:b3:36:9c:cc:48:91:bb: d0:f4:fb:74:b2:2d:40:82:54:14:d7:28:06:3a:6e:94:89:91: 41:a4:05:2f:83:fc:ee:d1:6d:a1:b7:8a:4b:44:43:46:31:a9: 8b:50:e8:f8:d0:ab:11:0d:54:ff:08:19:06:46:8c:69:43:0b: f3:38:f2:df:ff:a9:46:ca:24:0f:e1:10:f2:2f:d5:f5:c9:8c: 6d:f6:63:b2:f3:7e:96:29:85:d7:a7:cf:d0:b8:bd:af:75:16: 7e:1a:24:4b:c9:28:59:2a:71:5a:56:2c:1f:be:bf:1f:3d:26: 2e:d1:e9:82:ab:fb:5b:72:87:2d:58:90:90:ff:22:0a:5a:7c: 1a:57:0e:93:2c:3c:86:f4:7e:c0:c9:c1:e7:c1:6b:e1:96:11: ae:9a:f6:60:ed:35:d0:85:63:ef:07:1e:17:dc:61:8a:4a:eb: 27:f3:e8:d2:88:be:a3:b9:7c:0e:2f:66:99:f7:f0:73:c9:4d: cc:2e:65:19:4a:71:a8:ac:c2:c6:30:30:b8:67:1c:5e:ef:29: cd:b2:a7:97:17:91:9e:1e:eb:9c:6e:82:ef:70:cd:ca:f2:e5: cb:ce:fe:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4athhKvhykBQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzI2ODhkODQtNGI3ZC00NWExLWEzNzEtZmFhYjRkZjBjYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xva5Q6Z4gerGT+56JX4KVlzjPo7LgTzXBVb 0YMq2Erur7+vOzdqSZyil5Qiixcsv3S/K7ybOXNXObrYiZINfYHti7K1eWDuWJO3 BBYUvFtQId9we0TaGtA1VrTfKbcn6U2FMI5hGIlLIaIeAq8xR1Tg8MuRy9hOnJAO 6Fq2PPBAyHdN/T3U2Kcx87ZwNn1RL6+GDr24fichqRSsTjlpDdoLIPKnogBRKMhF Dn0MPdHgCMA7l/FaTzquq2PGU9iV0khgxZAERAyONQ2Z+dre4ox+h+Uy7KWQyo9h XWfzZGjV97e/+1DVcLMrAMowsYMg+1CURVj9YUPH+Pz+nAgvewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMs240rkTmpuYpA1VETxXRHlprlXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDI3ZTdlYjItNmY3Mi0z MTIxLWFlYzAtNzM3NGYzNzA4ZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALzdP4SOi0DJuXrLoj3imcqRDuwMS4hLDImzEhCXszaczEiRu9D0 +3SyLUCCVBTXKAY6bpSJkUGkBS+D/O7RbaG3iktEQ0YxqYtQ6PjQqxENVP8IGQZG jGlDC/M48t//qUbKJA/hEPIv1fXJjG32Y7LzfpYphdenz9C4va91Fn4aJEvJKFkq cVpWLB++vx89Ji7R6YKr+1tyhy1YkJD/IgpafBpXDpMsPIb0fsDJwefBa+GWEa6a 9mDtNdCFY+8HHhfcYYpK6yfz6NKIvqO5fA4vZpn38HPJTcwuZRlKcaiswsYwMLhn HF7vKc2yp5cXkZ4e65xugu9wzcry5cvO/po= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:59 2025 by rpki-client