$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f554a176-f300-32de-8e8b-5da652774614.roa File: f554a176-f300-32de-8e8b-5da652774614.roa (raw, json) Hash identifier: 8qWv3+x9lDHUhdnDIqprWUlIlEGf2OmVdR1JdlRKVKk= Subject key identifier: 51:B4:53:1C:C7:36:A3:68:3B:B5:83:24:3B:DF:11:FC:DE:17:87:48 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B64CE418F22DB4330CC7B7000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f554a176-f300-32de-8e8b-5da652774614.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 397203 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:41:8f:22:db:43:30:cc:7b:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=33e2aa36-414e-4ccf-81ec-e30c8ee21a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:ed:27:db:c9:b7:a1:0a:81:9e:c7:95:8f: 6c:16:3b:02:17:78:35:41:ac:8e:f7:0e:c1:1a:6c: 82:cd:64:aa:7f:39:be:d4:16:95:33:87:aa:d3:af: eb:c8:64:2f:3d:73:ac:b9:37:96:38:ec:0d:11:d4: 51:b0:fe:e6:89:84:90:fb:00:5e:da:2c:48:0a:85: 6f:8f:23:e7:d4:3d:0e:e2:63:5c:9e:a3:b9:cd:c9: 23:63:59:0c:67:bb:ca:36:8a:a4:c5:a9:02:ff:62: ad:e1:1a:f1:29:46:cd:23:c7:a7:a8:c4:00:ee:fe: 26:be:7f:30:74:42:a3:92:2f:bf:c4:01:64:29:70: f0:71:6e:c1:6f:d1:ec:8f:5e:84:c4:e0:0b:f4:cb: 38:88:2e:cd:3e:b6:a1:a8:22:27:f0:4f:3f:f6:21: e0:30:c6:19:b8:be:96:49:50:c3:5f:b9:02:c9:4a: a5:73:4e:72:a3:e3:93:8d:4e:6b:4c:f4:83:c1:5e: 59:c0:67:f7:e5:87:2c:a7:a0:0b:db:d3:3d:92:76: 49:a4:2d:7f:00:dd:6f:9e:e6:dd:36:aa:a7:06:68: d1:4a:83:fa:6a:66:55:6c:da:7f:59:94:bd:f0:e7: fa:dd:f5:ff:f1:03:54:06:dd:d3:e9:17:53:69:44: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B4:53:1C:C7:36:A3:68:3B:B5:83:24:3B:DF:11:FC:DE:17:87:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f554a176-f300-32de-8e8b-5da652774614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:22:d4:68:43:e4:45:46:99:66:e6:84:bd:05:71:49:ed:ab: e8:5d:31:ec:fa:03:9d:bb:76:0d:0e:3c:f0:5e:68:c0:b2:61: 47:82:62:98:5b:d3:0f:4f:df:79:1a:da:50:0f:ca:47:e8:55: 10:08:b0:ca:b4:94:0c:13:5a:25:57:db:b7:75:62:b4:02:41: be:ce:b7:43:a2:b0:15:69:f2:3a:fc:14:4e:92:ea:2e:1e:0c: 0c:d0:91:fd:f3:ed:04:65:27:de:c0:56:23:9e:5c:a5:5c:5d: f6:be:41:fe:75:ee:49:17:3d:b6:c7:fa:62:52:54:92:da:8a: a3:83:13:ba:af:8c:4e:e6:65:55:85:2a:69:14:f6:37:e8:de: 6c:4b:1c:25:5a:5e:54:c9:14:9e:4e:02:d5:0c:b8:60:dd:9e: 95:0a:44:d8:77:cc:2f:95:66:ad:71:2d:d6:e9:c8:4d:63:1d: 1a:52:63:c7:7e:b3:03:d0:ca:25:a1:f3:e1:92:03:1f:9b:e0: 56:74:5c:ae:70:68:b2:8b:26:3b:b3:5f:21:c8:38:37:37:94: 7e:20:24:2e:08:0a:4e:72:fc:fd:89:af:86:7a:9b:59:c5:3b: ea:18:1c:fa:bb:cf:61:f9:29:cc:b5:16:ff:3a:ad:e1:14:7c: 19:67:11:47 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtkzkGPIttDMMx7cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzNlMmFhMzYtNDE0ZS00Y2NmLTgxZWMtZTMwYzhlZTIxYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1ftJ9vJt6EKgZ7HlY9sFjsCF3g1QayO9w7B GmyCzWSqfzm+1BaVM4eq06/ryGQvPXOsuTeWOOwNEdRRsP7miYSQ+wBe2ixICoVv jyPn1D0O4mNcnqO5zckjY1kMZ7vKNoqkxakC/2Kt4RrxKUbNI8enqMQA7v4mvn8w dEKjki+/xAFkKXDwcW7Bb9Hsj16ExOAL9Ms4iC7NPrahqCIn8E8/9iHgMMYZuL6W SVDDX7kCyUqlc05yo+OTjU5rTPSDwV5ZwGf35Ycsp6AL29M9knZJpC1/AN1vnubd NqqnBmjRSoP6amZVbNp/WZS98Of63fX/8QNUBt3T6RdTaUSVHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFG0UxzHNqNoO7WDJDvfEfzeF4dIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjU1NGExNzYtZjMwMC0z MmRlLThlOGItNWRhNjUyNzc0NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBEItRoQ+RFRplm5oS9BXFJ7avoXTHs+gOdu3YN DjzwXmjAsmFHgmKYW9MPT995GtpQD8pH6FUQCLDKtJQME1olV9u3dWK0AkG+zrdD orAVafI6/BROkuouHgwM0JH98+0EZSfewFYjnlylXF32vkH+de5JFz22x/piUlSS 2oqjgxO6r4xO5mVVhSppFPY36N5sSxwlWl5UyRSeTgLVDLhg3Z6VCkTYd8wvlWat cS3W6chNYx0aUmPHfrMD0MolofPhkgMfm+BWdFyucGiyiyY7s18hyDg3N5R+ICQu CApOcvz9ia+GeptZxTvqGBz6u89h+SnMtRb/Oq3hFHwZZxFH -----END CERTIFICATE-----Generated at Mon Oct 20 03:53:28 2025 by rpki-client