$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa File: ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa (raw, json) Hash identifier: b0g85yPmltE66jPfOwhKv+jAOpgXurgbiDeg2O0XSRY= Subject key identifier: A0:F8:E2:23:8F:2D:FA:B2:D3:39:16:34:0E:7B:00:E2:7B:4E:04:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD78F52D206F1317C7040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396606 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d7:8f:52:d2:06:f1:31:7c:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=b11ee227-67f4-4c07-a5e9-4c49b79947b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9c:00:bf:6a:90:34:39:be:fd:6f:6f:2a:17: 2c:41:a6:4b:d5:cb:bd:7d:a4:0d:b5:df:34:c0:d3: ae:44:8f:5d:88:13:a3:d5:1b:1c:be:80:a8:dc:14: aa:7d:79:d4:79:7d:4f:9c:89:7d:5a:45:68:fc:ca: 27:5d:ca:44:f0:74:34:c5:23:3e:43:0e:d1:11:f2: 39:a3:b8:6f:c6:00:5e:8a:81:58:05:3b:5a:38:3e: de:80:00:cc:f0:38:07:e2:fa:4f:07:55:49:02:ac: 41:12:07:80:96:e8:3b:a9:22:19:e8:25:11:5e:47: 67:ea:19:a0:0e:5a:18:25:d6:05:d0:a9:8b:8f:03: cf:f2:99:bc:a3:ba:b4:5d:5b:3c:15:cb:80:d3:99: 81:f5:bb:a1:a4:47:41:66:7b:23:95:b6:8a:0e:1e: 63:ff:29:53:0b:b6:c8:99:3f:39:e8:ba:45:c7:7b: 03:55:96:75:be:85:d0:bb:3c:e0:49:59:01:2a:80: 51:94:35:6c:c3:74:89:e9:63:a5:3b:71:f7:ad:45: a9:1c:75:d6:50:bb:a8:27:26:27:7b:85:98:b9:a5: 68:43:02:3a:32:a0:9b:88:0a:a7:db:20:e5:d2:9a: 08:7a:9a:03:33:ce:bb:f6:97:a7:7e:1b:7a:28:12: ca:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F8:E2:23:8F:2D:FA:B2:D3:39:16:34:0E:7B:00:E2:7B:4E:04:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5e:7f:4a:b3:37:a6:cf:19:d1:10:33:08:aa:fa:3c:63:f5: d8:5e:e4:26:7d:00:90:59:19:4b:00:4b:7f:c1:9f:80:4f:d4: 1f:66:19:1a:cd:4d:b6:85:d2:2a:b9:f9:41:e5:ce:12:39:28: 2e:06:d1:3c:08:25:64:3d:f9:b5:b6:51:c4:85:09:d8:30:05: cc:e3:63:7d:97:d7:a3:65:6e:ba:2c:42:d0:6f:d1:c9:81:ee: 58:06:4b:d9:f0:34:43:25:53:99:4f:95:53:e6:d2:c5:e7:6d: de:09:0e:cc:30:37:35:56:ac:99:8e:9e:74:11:46:32:a2:f8: 1f:f2:a1:11:ef:b0:51:a7:a2:f6:1f:fb:14:af:c9:5b:47:86: 47:ef:d8:d3:5a:e2:c9:e0:f1:8f:37:98:9d:f4:01:69:b0:8f: 7b:76:6c:8e:9b:31:4c:08:af:77:a7:c1:11:c9:df:ac:00:f0: cd:3d:a3:c8:07:81:35:69:71:15:f7:08:d2:d8:5c:60:63:85: a4:bd:67:3e:ee:13:24:0e:cc:dc:68:b5:ae:5f:5d:4c:97:c7: ce:b8:f0:22:34:2a:10:55:86:d1:a7:7b:ff:8f:4e:bd:f4:40: ad:9c:9c:b6:69:46:9d:ec:f4:d9:ae:5f:8c:d7:99:26:05:aa: d4:99:51:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNePUtIG8TF8cEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YjExZWUyMjctNjdmNC00YzA3LWE1ZTktNGM0OWI3OTk0N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJwAv2qQNDm+/W9vKhcsQaZL1cu9faQNtd80 wNOuRI9diBOj1RscvoCo3BSqfXnUeX1PnIl9WkVo/MonXcpE8HQ0xSM+Qw7REfI5 o7hvxgBeioFYBTtaOD7egADM8DgH4vpPB1VJAqxBEgeAlug7qSIZ6CURXkdn6hmg DloYJdYF0KmLjwPP8pm8o7q0XVs8FcuA05mB9buhpEdBZnsjlbaKDh5j/ylTC7bI mT856LpFx3sDVZZ1voXQuzzgSVkBKoBRlDVsw3SJ6WOlO3H3rUWpHHXWULuoJyYn e4WYuaVoQwI6MqCbiAqn2yDl0poIepoDM8679penfht6KBLKCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKD44iOPLfqy0zkWNA57AOJ7TgSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWE3ZGI4N2QtYjFkMi0z YmU4LWI1ZWQtMjRjZTBlYWM3YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNef0qzN6bPGdEQMwiq+jxj9dhe5CZ9AJBZGUsAS3/Bn4BP1B9m GRrNTbaF0iq5+UHlzhI5KC4G0TwIJWQ9+bW2UcSFCdgwBczjY32X16NlbrosQtBv 0cmB7lgGS9nwNEMlU5lPlVPm0sXnbd4JDswwNzVWrJmOnnQRRjKi+B/yoRHvsFGn ovYf+xSvyVtHhkfv2NNa4sng8Y83mJ30AWmwj3t2bI6bMUwIr3enwRHJ36wA8M09 o8gHgTVpcRX3CNLYXGBjhaS9Zz7uEyQOzNxota5fXUyXx8648CI0KhBVhtGne/+P Tr30QK2cnLZpRp3s9NmuX4zXmSYFqtSZUWs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:02 2025 by rpki-client