$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa File: f20f7c09-af10-3817-917d-de587331fc66.roa (raw, json) Hash identifier: m11qOKaH7dntinmf/IrG14RhlpdOAKJDtEhVZBFUpJM= Subject key identifier: 70:0F:80:9F:D4:9E:6C:0C:FE:FF:0A:D8:A0:D8:94:19:FC:15:F6:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A78579134124F334EC3900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 397205 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:85:79:13:41:24:f3:34:ec:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=1c8c3529-3605-4f4e-9ca8-ca73f77ae53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:10:df:4d:55:67:e3:df:31:14:ba:08:66: 09:55:e3:26:a2:8b:d1:eb:41:52:50:7b:aa:3a:d9: 6d:19:de:3d:59:f9:d8:95:a8:b1:05:b4:82:20:10: 0d:fc:c4:bc:3a:11:08:a1:1d:2b:ea:8b:ee:ef:98: 63:a0:bf:2b:e6:b1:6b:a2:eb:9c:e5:74:6f:36:de: d8:3f:2a:d8:86:1d:ab:2b:f8:fb:43:50:72:f3:a9: cc:a5:92:9d:ec:64:25:18:d6:1d:1f:c0:a2:93:92: 91:58:70:04:a2:c8:01:cb:dd:4e:cb:76:a4:0f:ad: b4:63:13:5e:72:ff:6d:5a:22:96:10:63:33:f3:47: dc:5e:97:69:5a:54:13:b3:29:00:f9:82:b7:7f:4a: fc:48:b7:07:d9:b7:45:02:cf:0a:97:e3:9f:a5:f2: 83:2a:fd:80:62:30:30:59:49:62:bf:53:aa:9e:ad: fd:83:0a:d7:67:59:c3:71:48:1e:65:7e:a3:b0:70: 85:27:86:01:7a:30:f2:5c:2c:6d:50:5e:10:06:95: 6f:ba:4a:ca:64:aa:6d:e3:3d:6e:f9:28:0d:f6:a2: c8:a7:98:aa:90:a6:cd:58:d6:32:af:f2:4f:49:e7: 6f:03:46:b1:5d:a1:5c:26:34:e0:dd:a2:dc:19:85: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0F:80:9F:D4:9E:6C:0C:FE:FF:0A:D8:A0:D8:94:19:FC:15:F6:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2c:cb:94:53:31:67:eb:57:47:cd:8e:e0:6c:10:89:c4:f6: 48:a9:95:00:57:2c:e0:00:fa:0e:cc:f6:0d:fa:17:7d:2d:4f: 3c:4d:1b:27:ee:7f:92:bd:54:48:1c:33:43:43:f7:8d:fb:e8: 5c:9d:89:37:42:af:8d:03:d9:a9:96:bb:81:38:4e:66:7d:d0: 89:30:2b:d6:96:3d:1b:fd:8c:92:8c:b8:8e:22:23:41:fe:08: db:b9:a5:56:e5:b7:7c:d9:a4:46:00:14:a3:07:13:c4:b9:c5: 87:bf:0d:ff:89:6f:e9:87:b1:af:36:fd:75:28:84:b1:39:b7: cd:30:b0:0b:5c:32:be:72:90:d4:9a:30:d6:92:0c:41:32:0e: db:b2:c3:10:5e:23:6f:78:a8:94:bc:cf:3a:f3:df:f3:4a:96: e1:ba:26:c9:75:46:4d:8e:1f:6f:36:56:fe:63:1c:93:7b:53: 3f:35:3a:2b:6e:bd:71:7b:dc:8e:ab:d2:51:b0:06:70:7d:65: c8:d5:8b:a6:e6:bb:3e:24:e5:ee:2b:6d:3e:61:a5:6e:7b:fa: 0a:e7:f6:cf:9e:54:2a:c3:c8:1e:01:1a:7e:b2:ad:70:7e:0f: cd:0b:8b:95:1f:fa:e9:26:ce:82:6f:51:77:9f:b6:81:30:41: bb:a5:23:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4V5E0Ek8zTsOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MWM4YzM1MjktMzYwNS00ZjRlLTljYTgtY2E3M2Y3N2FlNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUEQ301VZ+PfMRS6CGYJVeMmoovR60FSUHuq OtltGd49WfnYlaixBbSCIBAN/MS8OhEIoR0r6ovu75hjoL8r5rFrouuc5XRvNt7Y PyrYhh2rK/j7Q1By86nMpZKd7GQlGNYdH8Cik5KRWHAEosgBy91Oy3akD620YxNe cv9tWiKWEGMz80fcXpdpWlQTsykA+YK3f0r8SLcH2bdFAs8Kl+OfpfKDKv2AYjAw WUliv1Oqnq39gwrXZ1nDcUgeZX6jsHCFJ4YBejDyXCxtUF4QBpVvukrKZKpt4z1u +SgN9qLIp5iqkKbNWNYyr/JPSedvA0axXaFcJjTg3aLcGYUfowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAPgJ/UnmwM/v8K2KDYlBn8FfaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjIwZjdjMDktYWYxMC0z ODE3LTkxN2QtZGU1ODczMzFmYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGEsy5RTMWfrV0fNjuBsEInE9kiplQBXLOAA+g7M9g36F30tTzxN Gyfuf5K9VEgcM0ND94376FydiTdCr40D2amWu4E4TmZ90IkwK9aWPRv9jJKMuI4i I0H+CNu5pVblt3zZpEYAFKMHE8S5xYe/Df+Jb+mHsa82/XUohLE5t80wsAtcMr5y kNSaMNaSDEEyDtuywxBeI294qJS8zzrz3/NKluG6Jsl1Rk2OH282Vv5jHJN7Uz81 OituvXF73I6r0lGwBnB9ZcjVi6bmuz4k5e4rbT5hpW57+grn9s+eVCrDyB4BGn6y rXB+D80Li5Uf+ukmzoJvUXeftoEwQbulI7Y= -----END CERTIFICATE-----Generated at Tue Oct 21 06:27:59 2025 by rpki-client