$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef1b8180-3dd1-3c04-bfe6-b7240c7e5ec1.roa File: ef1b8180-3dd1-3c04-bfe6-b7240c7e5ec1.roa (raw, json) Hash identifier: /u6UGNHtTzne+0C6jq0AKqO6WAs5j6Ft8jYbwQrWJCA= Subject key identifier: 9E:81:0C:AA:6F:B2:DE:C5:B2:7C:E5:E1:0B:21:A4:DF:A2:52:E7:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD7FF029FC474EA6A2C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef1b8180-3dd1-3c04-bfe6-b7240c7e5ec1.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396735 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d7:ff:02:9f:c4:74:ea:6a:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=3e36344f-5b19-42d3-9c45-9f9be7a01469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:94:e0:7a:03:00:e3:69:cf:a7:33:6e:c6: d8:bf:a1:5a:c1:49:50:c2:60:e1:a1:b8:a6:5d:ee: 8c:c5:f9:25:a3:6a:26:b2:93:16:f7:9f:b1:b0:fe: ae:63:db:72:9d:50:1a:81:ca:95:ef:01:a3:23:e7: f3:45:0f:00:1c:ec:4e:1c:5d:5d:05:ae:e2:a3:a7: e0:b7:bd:b3:ea:4a:27:a8:59:95:55:2f:b1:81:d7: 0e:30:20:dd:97:cd:4b:1e:77:06:f5:74:f3:47:7c: 46:a0:cc:e0:0b:95:58:81:d3:eb:73:42:95:57:96: f9:b3:b4:71:2c:c2:b7:b9:ae:51:b9:9c:75:6c:dc: 80:5e:6a:ad:38:36:a9:0a:61:4d:c3:43:ec:66:8e: 1e:17:bc:9e:6e:56:a0:13:f2:7b:9c:18:90:fa:6c: 7e:69:1f:82:d6:2f:24:da:a0:ce:21:7a:dc:4d:09: 6e:cc:ef:6d:f6:02:45:09:f0:98:2c:a3:e3:aa:67: 31:46:91:25:58:45:79:88:73:1a:f9:ee:9d:75:41: 37:f8:7f:c7:c3:81:4b:2d:c8:38:9c:5a:26:f4:9b: 11:f6:00:a7:62:06:b6:e9:6e:47:b4:11:d5:60:c0: 10:12:ae:64:fc:1e:78:85:5e:90:ec:08:eb:52:aa: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:81:0C:AA:6F:B2:DE:C5:B2:7C:E5:E1:0B:21:A4:DF:A2:52:E7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef1b8180-3dd1-3c04-bfe6-b7240c7e5ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1a:a2:9e:69:71:41:1b:7e:0b:1f:e9:40:7c:d6:0c:be:bf: c9:db:02:0c:db:c9:88:29:cf:50:7d:92:23:f4:c6:91:79:43: 1b:87:c7:cb:be:c7:7f:65:f4:15:80:a3:16:12:6e:99:e1:34: 49:01:1c:54:8e:0f:00:a2:bb:f2:d2:b7:62:27:89:be:c3:e7: e9:55:c4:fc:af:58:03:b8:20:16:cf:1e:43:5e:c8:87:9b:c9: 8b:d1:59:c5:23:7d:af:51:92:fa:9f:35:8d:d3:a4:0b:da:a4: be:33:f1:23:8a:9a:70:d5:67:f3:bf:18:96:21:e1:f1:07:c9: 2d:f7:6e:77:97:79:14:06:14:c0:f0:f8:83:d3:b7:5d:90:35: 13:07:84:d4:1d:aa:8a:64:81:b7:f0:65:00:5c:56:a8:2d:2b: 0d:6f:64:0d:48:c0:26:3c:f4:7a:b5:8c:8c:b6:14:36:2d:a8: 0c:15:3e:5f:14:33:b1:4d:cf:fc:02:47:96:f6:c7:64:60:7f: 9a:9c:ce:34:9f:6d:b4:dc:4e:62:7e:fb:e7:88:f3:df:ea:7d: 43:42:01:f6:27:ee:8f:68:0d:65:5a:bf:75:0a:b8:92:03:12: 8c:16:89:ef:b0:7d:a0:a1:5e:10:33:31:7d:3e:8d:70:a9:b3: d3:da:07:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNf/Ap/EdOpqLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk M2UzNjM0NGYtNWIxOS00MmQzLTljNDUtOWY5YmU3YTAxNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoduU4HoDAONpz6czbsbYv6FawUlQwmDhobim Xe6Mxfklo2omspMW95+xsP6uY9tynVAagcqV7wGjI+fzRQ8AHOxOHF1dBa7io6fg t72z6konqFmVVS+xgdcOMCDdl81LHncG9XTzR3xGoMzgC5VYgdPrc0KVV5b5s7Rx LMK3ua5RuZx1bNyAXmqtODapCmFNw0PsZo4eF7yeblagE/J7nBiQ+mx+aR+C1i8k 2qDOIXrcTQluzO9t9gJFCfCYLKPjqmcxRpElWEV5iHMa+e6ddUE3+H/Hw4FLLcg4 nFom9JsR9gCnYga26W5HtBHVYMAQEq5k/B54hV6Q7AjrUqoupwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ6BDKpvst7Fsnzl4QshpN+iUucYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWYxYjgxODAtM2RkMS0z YzA0LWJmZTYtYjcyNDBjN2U1ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsaop5pcUEbfgsf6UB81gy+v8nbAgzbyYgpz1B9kiP0xpF5QxuH x8u+x39l9BWAoxYSbpnhNEkBHFSODwCiu/LSt2Inib7D5+lVxPyvWAO4IBbPHkNe yIebyYvRWcUjfa9RkvqfNY3TpAvapL4z8SOKmnDVZ/O/GJYh4fEHyS33bneXeRQG FMDw+IPTt12QNRMHhNQdqopkgbfwZQBcVqgtKw1vZA1IwCY89Hq1jIy2FDYtqAwV Pl8UM7FNz/wCR5b2x2Rgf5qczjSfbbTcTmJ+++eI89/qfUNCAfYn7o9oDWVav3UK uJIDEowWie+wfaChXhAzMX0+jXCps9PaB9Q= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:58 2025 by rpki-client