$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa39dbfa-0fcb-34df-bb3f-4dc86950a0b1.roa File: fa39dbfa-0fcb-34df-bb3f-4dc86950a0b1.roa (raw, json) Hash identifier: vbHh4npRFBb9nlOkjvw0k1YSY932bpfw1vBOkBV874Q= Subject key identifier: 33:BF:75:F9:49:6F:9E:BB:A9:4F:DA:00:0F:E8:BD:8E:17:F5:E5:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDD2B5B45B09AA7C51200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa39dbfa-0fcb-34df-bb3f-4dc86950a0b1.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396765 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:dd:2b:5b:45:b0:9a:a7:c5:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=e5212930-2aa4-4498-abc1-96af0cb6c860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:ee:55:2f:0c:3f:ea:21:7e:31:7e:98:98: 38:63:1b:6d:b8:5c:89:30:21:1b:f5:1e:2b:33:ac: dd:f7:d6:21:18:1e:41:10:69:64:fe:f2:27:ed:9c: 9e:89:85:f6:01:52:45:e8:6e:81:dc:86:42:10:c1: 7a:69:21:9f:3e:53:a8:9e:59:e7:9c:c5:12:d0:f8: b8:4e:41:b2:df:4e:a1:a2:13:3c:06:5f:9c:46:03: 45:08:06:62:a2:2d:ab:9d:b4:4e:6b:ce:74:10:38: a9:5e:1d:79:c5:06:4a:d6:1c:e0:dd:4b:11:86:ad: 14:ed:9a:da:ab:ed:48:7d:b7:2a:50:46:45:fd:f8: f3:2d:e1:d2:78:5c:62:b0:33:e0:86:9f:e4:8a:ec: 3e:b2:bb:4c:0f:90:2f:7b:97:e2:88:6d:cc:98:80: 83:a7:fa:c3:d3:ff:cf:63:32:56:a4:6e:03:cf:3c: f0:2e:54:65:3d:23:7c:00:3b:66:fd:78:6f:c2:2d: 36:0f:60:6d:e4:45:54:87:cb:0a:31:47:43:b6:a1: 10:1b:53:7b:37:93:9d:50:9f:e4:30:ee:b9:73:83: 8c:da:1a:e5:57:e0:ae:ed:92:08:30:8a:19:20:bd: 43:d5:62:d8:cc:c1:a7:b0:18:c0:e3:98:37:c2:70: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BF:75:F9:49:6F:9E:BB:A9:4F:DA:00:0F:E8:BD:8E:17:F5:E5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa39dbfa-0fcb-34df-bb3f-4dc86950a0b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:3d:55:53:c1:77:49:e2:c6:27:f2:4e:fd:88:64:2f:ff:97: 1d:f2:11:2a:33:de:3e:93:b2:d9:7d:80:cc:ba:26:cb:be:f2: 74:87:3b:96:bb:6b:ba:93:c4:ad:81:26:cf:d4:ce:c0:75:19: 79:10:c9:28:51:10:99:98:30:5e:6c:5a:ce:29:80:3c:d3:88: 73:58:67:ce:df:6e:f7:51:c6:20:7c:41:45:b6:80:40:6f:c2: 18:b3:90:71:6a:cd:10:f1:72:a9:83:74:f5:0e:f9:61:29:d8: e7:3c:24:50:4d:99:0f:7c:9a:f3:a6:c6:77:24:a9:b9:51:52: 94:18:86:ef:67:92:e8:d5:99:79:34:2f:fe:0f:a5:50:d7:db: c9:51:e3:3a:e1:a4:37:71:d9:bf:ad:60:69:f4:f5:c6:d6:64: 4f:16:4b:86:1e:76:b7:98:8f:e6:89:8e:1b:a3:82:10:76:35: 7b:34:48:ee:24:06:c0:a2:71:f7:36:86:f0:a4:c7:9c:7f:cc: e4:07:7b:88:7f:98:9f:53:be:40:97:3a:1c:f9:94:86:10:4b: be:bb:34:e4:99:ee:73:f4:54:a8:8d:66:90:91:32:39:de:97: 77:84:97:bd:a8:ca:b6:86:63:c5:d1:41:96:91:e2:63:ec:e7: 9a:19:d4:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vN0rW0WwmqfFEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZTUyMTI5MzAtMmFhNC00NDk4LWFiYzEtOTZhZjBjYjZjODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoobuVS8MP+ohfjF+mJg4YxttuFyJMCEb9R4r M6zd99YhGB5BEGlk/vIn7ZyeiYX2AVJF6G6B3IZCEMF6aSGfPlOonlnnnMUS0Pi4 TkGy306hohM8Bl+cRgNFCAZioi2rnbROa850EDipXh15xQZK1hzg3UsRhq0U7Zra q+1IfbcqUEZF/fjzLeHSeFxisDPghp/kiuw+srtMD5Ave5fiiG3MmICDp/rD0//P YzJWpG4DzzzwLlRlPSN8ADtm/Xhvwi02D2Bt5EVUh8sKMUdDtqEQG1N7N5OdUJ/k MO65c4OM2hrlV+Cu7ZIIMIoZIL1D1WLYzMGnsBjA45g3wnBipQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDO/dflJb567qU/aAA/ovY4X9eWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmEzOWRiZmEtMGZjYi0z NGRmLWJiM2YtNGRjODY5NTBhMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK49VVPBd0nixifyTv2IZC//lx3yESoz3j6Tstl9gMy6Jsu+8nSH O5a7a7qTxK2BJs/UzsB1GXkQyShREJmYMF5sWs4pgDzTiHNYZ87fbvdRxiB8QUW2 gEBvwhizkHFqzRDxcqmDdPUO+WEp2Oc8JFBNmQ98mvOmxnckqblRUpQYhu9nkujV mXk0L/4PpVDX28lR4zrhpDdx2b+tYGn09cbWZE8WS4YedreYj+aJjhujghB2NXs0 SO4kBsCicfc2hvCkx5x/zOQHe4h/mJ9TvkCXOhz5lIYQS767NOSZ7nP0VKiNZpCR Mjnel3eEl72oyraGY8XRQZaR4mPs55oZ1Kk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:45:03 2025 by rpki-client