$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb657dff-27b1-3856-9aba-52f62c84b1ba.roa File: fb657dff-27b1-3856-9aba-52f62c84b1ba.roa (raw, json) Hash identifier: 5kx+GZbZotqVHZzA1jrt0l0G8IK+E9ZUQyXIho0YqJA= Subject key identifier: C1:A1:2B:48:2D:06:57:8B:8F:32:52:46:1B:32:96:D3:A8:3B:8F:3F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D2773A456BEFF6771080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb657dff-27b1-3856-9aba-52f62c84b1ba.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 21313 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d2:77:3a:45:6b:ef:f6:77:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=856c203f-aa30-4218-8924-b8a391a1a23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:cd:c2:dd:b0:32:ce:47:61:74:9f:d0:64: 3e:30:91:80:1d:0d:d3:6b:eb:9a:4b:44:b9:0c:77: 81:01:80:53:db:ad:b9:51:21:bc:1b:29:21:59:f4: ec:03:37:5e:81:b1:b0:2f:5e:44:58:ba:66:a0:97: da:9f:bb:b0:92:55:dd:33:05:6d:95:e0:0d:31:bf: 72:05:ad:39:c7:a2:93:27:ba:52:21:fb:e2:5d:64: b4:aa:5c:7c:0e:c9:09:9b:cf:37:4f:62:59:f5:3a: 0a:b1:7d:4c:ec:48:bf:8e:fd:15:3e:ad:1f:42:65: 60:98:98:9d:42:5a:77:c3:e4:6f:2e:d7:7b:f6:3d: 84:82:2b:d1:5b:7c:9b:a8:39:f5:bd:6e:5b:96:10: 0e:2a:d8:19:f5:b3:bd:90:87:da:7a:34:38:74:46: 96:24:a5:f0:09:ad:cf:28:f9:78:89:0a:b4:70:a5: 96:75:c0:89:8d:33:ad:ef:6e:09:0a:fc:4e:05:16: 19:4f:52:89:4b:e8:59:23:d1:e0:3f:7e:9b:56:0e: 6a:6e:af:7c:38:c5:fa:99:4a:bf:f0:ef:1d:8f:f5: 72:72:a2:dd:67:04:15:39:b7:57:96:26:78:72:5f: e1:15:5b:61:61:ca:bb:ab:b3:96:7e:1c:99:08:c0: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A1:2B:48:2D:06:57:8B:8F:32:52:46:1B:32:96:D3:A8:3B:8F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb657dff-27b1-3856-9aba-52f62c84b1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f5:92:11:e1:d9:20:99:3d:e4:56:d9:d8:4b:5f:26:0a:cc: 70:f6:89:c1:08:f3:c5:eb:85:8d:8b:28:41:b8:51:ba:65:3b: 2d:58:e1:b2:a1:4f:69:aa:0e:8c:01:05:00:8e:e6:f5:53:9f: d5:a0:5c:5b:c6:1e:9c:81:b2:e3:88:51:e1:b3:0f:bc:e8:d7: 8d:5c:13:a2:4d:4c:f1:00:89:da:bc:84:8d:f7:ca:23:64:2f: 17:1b:15:ef:de:18:d8:1e:20:20:49:46:ca:5a:6e:98:b3:3d: e3:7e:67:74:3a:58:69:fc:bc:25:f4:5f:94:ab:af:9e:9d:11: f7:05:3d:af:1d:65:dd:47:36:56:74:e9:3a:65:df:1d:84:0d: 7b:9b:76:ab:09:4a:34:d2:8f:5c:57:32:cf:a4:bc:1b:9a:ec: d5:2f:cf:fa:e1:96:e2:78:03:a3:f5:5c:b3:1a:b0:4e:d0:0f: 09:20:3d:5f:67:8d:b2:d1:4b:bc:ab:16:cc:18:94:02:68:5b: a9:eb:38:b6:14:a1:93:53:fd:b2:28:04:dd:4f:c7:33:7b:4a: 35:7c:d1:a5:1d:7e:13:4d:65:68:5d:ed:83:86:28:59:1a:8f: fe:f1:79:29:d8:45:34:fe:f0:74:67:a3:fe:d2:d2:f0:53:49: c2:17:27:51 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtAgdJ3OkVr7/Z3EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ODU2YzIwM2YtYWEzMC00MjE4LTg5MjQtYjhhMzkxYTFhMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstnNwt2wMs5HYXSf0GQ+MJGAHQ3Ta+uaS0S5 DHeBAYBT2625USG8GykhWfTsAzdegbGwL15EWLpmoJfan7uwklXdMwVtleANMb9y Ba05x6KTJ7pSIfviXWS0qlx8DskJm883T2JZ9ToKsX1M7Ei/jv0VPq0fQmVgmJid Qlp3w+RvLtd79j2EgivRW3ybqDn1vW5blhAOKtgZ9bO9kIfaejQ4dEaWJKXwCa3P KPl4iQq0cKWWdcCJjTOt724JCvxOBRYZT1KJS+hZI9HgP36bVg5qbq98OMX6mUq/ 8O8dj/VycqLdZwQVObdXliZ4cl/hFVthYcq7q7OWfhyZCMA7awIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMGhK0gtBleLjzJSRhsyltOoO48/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmI2NTdkZmYtMjdiMS0z ODU2LTlhYmEtNTJmNjJjODRiMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCJ9ZIR4dkgmT3kVtnYS18mCsxw9onBCPPF64WN iyhBuFG6ZTstWOGyoU9pqg6MAQUAjub1U5/VoFxbxh6cgbLjiFHhsw+86NeNXBOi TUzxAInavISN98ojZC8XGxXv3hjYHiAgSUbKWm6Ysz3jfmd0Olhp/Lwl9F+Uq6+e nRH3BT2vHWXdRzZWdOk6Zd8dhA17m3arCUo00o9cVzLPpLwbmuzVL8/64ZbieAOj 9VyzGrBO0A8JID1fZ42y0Uu8qxbMGJQCaFup6zi2FKGTU/2yKATdT8cze0o1fNGl HX4TTWVoXe2DhihZGo/+8Xkp2EU0/vB0Z6P+0tLwU0nCFydR -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:13 2025 by rpki-client