$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa File: fd04e269-5e62-35b1-8fe8-4d2250555369.roa (raw, json) Hash identifier: TXgNwgZPMBq57L8/CJuIz4EJemhI9uh/eKdELZN9f/4= Subject key identifier: E9:EA:CF:C1:61:E2:EE:37:D2:7B:C0:9B:5F:B6:59:4D:41:23:6B:CF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCB3C4F8FD4B31A9A7700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396760 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:cb:3c:4f:8f:d4:b3:1a:9a:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=aa0f3c61-0821-445f-b18c-a088d2f3db50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:d0:69:5b:7b:c5:35:ac:b4:69:e5:d0:d7: dd:e6:5a:eb:9f:2b:d7:c3:35:d2:f9:56:db:53:ba: 72:8c:70:b4:2f:40:13:03:50:f4:09:e3:b7:ea:47: 09:a9:df:a2:48:2d:a4:1e:ef:1b:20:8f:95:74:ed: 9d:90:34:26:f5:e7:3e:53:c5:0a:33:f1:7e:a6:c6: c5:2d:f8:98:0c:85:da:1e:30:84:91:3b:ca:18:57: 54:d5:ac:23:53:e3:23:44:11:21:e4:11:a7:bc:4e: ed:00:5f:f2:03:18:62:0d:d5:21:33:1f:1b:9e:2e: 46:4d:4c:37:05:35:93:c4:5f:50:63:73:c8:20:ca: 02:3a:e3:89:49:61:c5:6b:b1:bb:6a:e2:57:e5:c9: 04:e6:f2:7c:3a:00:0e:d5:d4:f1:ae:9d:c8:43:ed: 2a:0a:c7:b9:d4:4d:3b:17:09:06:18:74:1c:60:1f: 01:63:fb:d8:59:08:0e:6b:0f:c1:b7:0a:f8:fc:9d: be:b1:3d:25:2c:c0:fe:56:a8:6f:b4:c5:92:24:8c: c6:97:4d:af:da:ec:23:c3:14:3a:46:8a:62:45:e8: ab:bc:78:1e:79:bb:2b:f6:b0:77:22:78:ce:00:4f: a9:ab:ec:fe:7b:5b:8e:f6:3c:15:fa:6f:dd:45:b2: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EA:CF:C1:61:E2:EE:37:D2:7B:C0:9B:5F:B6:59:4D:41:23:6B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd04e269-5e62-35b1-8fe8-4d2250555369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:61:0a:73:63:6b:e7:af:77:04:30:4c:76:54:18:44:ff:6a: d7:95:12:67:f4:3c:19:4e:6a:62:1f:2e:44:c3:03:5d:c8:57: e8:b6:d0:97:13:23:ac:4e:e8:cf:13:ee:f5:82:2e:e1:4d:01: 2d:60:03:c5:21:d9:97:a9:6f:70:07:13:4e:e3:38:f2:47:cf: 46:47:01:3e:5d:4d:ba:07:42:3d:ff:4c:81:42:e4:fb:f7:d7: e7:3a:4e:1b:68:cc:67:8b:bf:b7:55:52:ff:d9:e5:c1:91:d4: b4:62:76:87:14:eb:6a:36:b1:2a:51:3d:3e:e5:46:7e:16:f4: 5e:49:51:45:d0:cc:ba:3d:4c:2a:b0:7c:c0:96:1e:2b:7a:a5: 56:97:be:00:7d:80:64:30:7e:11:8f:92:6b:ae:b5:bd:fd:ca: 23:3b:1f:c7:a4:20:62:f5:b6:f4:2f:77:bf:c2:4c:91:43:86: 46:38:15:e7:a7:98:b6:0a:e9:d3:36:fd:b7:e7:65:b5:99:db: 79:77:15:cf:f4:6e:fa:a0:a6:d5:a3:b7:10:ef:c5:47:f8:6f: 07:34:44:fd:51:60:64:8a:7a:9d:98:a0:51:13:05:4c:2a:0c: 9f:e2:cf:6f:a0:1a:1a:db:67:d4:67:6e:e8:61:25:c4:e6:0c: 91:fc:82:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMs8T4/UsxqadwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YWEwZjNjNjEtMDgyMS00NDVmLWIxOGMtYTA4OGQyZjNkYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0TQaVt7xTWstGnl0Nfd5lrrnyvXwzXS+Vbb U7pyjHC0L0ATA1D0CeO36kcJqd+iSC2kHu8bII+VdO2dkDQm9ec+U8UKM/F+psbF LfiYDIXaHjCEkTvKGFdU1awjU+MjRBEh5BGnvE7tAF/yAxhiDdUhMx8bni5GTUw3 BTWTxF9QY3PIIMoCOuOJSWHFa7G7auJX5ckE5vJ8OgAO1dTxrp3IQ+0qCse51E07 FwkGGHQcYB8BY/vYWQgOaw/Btwr4/J2+sT0lLMD+VqhvtMWSJIzGl02v2uwjwxQ6 RopiReirvHgeebsr9rB3InjOAE+pq+z+e1uO9jwV+m/dRbL0EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOnqz8Fh4u430nvAm1+2WU1BI2vPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQwNGUyNjktNWU2Mi0z NWIxLThmZTgtNGQyMjUwNTU1MzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGdhCnNja+evdwQwTHZUGET/ateVEmf0PBlOamIfLkTDA13IV+i2 0JcTI6xO6M8T7vWCLuFNAS1gA8Uh2Zepb3AHE07jOPJHz0ZHAT5dTboHQj3/TIFC 5Pv31+c6ThtozGeLv7dVUv/Z5cGR1LRidocU62o2sSpRPT7lRn4W9F5JUUXQzLo9 TCqwfMCWHit6pVaXvgB9gGQwfhGPkmuutb39yiM7H8ekIGL1tvQvd7/CTJFDhkY4 FeenmLYK6dM2/bfnZbWZ23l3Fc/0bvqgptWjtxDvxUf4bwc0RP1RYGSKep2YoFET BUwqDJ/iz2+gGhrbZ9RnbuhhJcTmDJH8gms= -----END CERTIFICATE-----Generated at Mon Oct 20 03:53:34 2025 by rpki-client