$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a757c30-6c18-3320-b532-4692aa3c9519.roa File: 2a757c30-6c18-3320-b532-4692aa3c9519.roa (raw, json) Hash identifier: LPFLgRCi3jEG6FHMqPehvLxtVUDJZTnm5UWEDFNPtQ0= Subject key identifier: 42:BF:8B:D3:7E:E1:95:6A:B0:7A:20:13:B2:D4:C9:D5:FA:00:A1:CF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A7829C25485AA6EEDA9AC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a757c30-6c18-3320-b532-4692aa3c9519.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 396580 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:82:9c:25:48:5a:a6:ee:da:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=3bd78c7d-a559-444e-aad1-f178265cf90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:45:e1:f0:94:57:52:11:43:18:8f:48:63: cf:be:09:b5:38:02:de:c5:a1:d6:42:31:78:5d:b4: 11:9b:d7:e7:ee:d0:07:56:9b:9f:7e:44:9d:d4:74: 6f:30:40:b6:db:d2:13:e8:f4:70:f5:31:a8:ff:23: 6d:02:6e:5c:37:11:f8:51:ff:5a:9a:5e:8a:a9:8a: 02:60:e1:49:50:74:03:f6:11:40:27:fc:42:57:81: 6a:ec:5d:3a:7b:67:a8:2c:7e:8a:39:c8:33:1d:d0: e1:e9:0a:ad:84:58:19:ab:7d:a6:5a:67:d5:e2:91: c4:36:ba:95:5c:af:f0:bc:51:74:dc:0c:76:35:a3: 96:45:c9:c2:fb:08:e5:12:fb:03:42:49:6c:c5:86: ac:00:b0:c1:30:4c:e3:d5:a8:58:97:3b:3c:f2:7d: 13:59:f9:be:3f:2e:8a:c7:a9:2b:45:a4:b6:9c:20: ff:9c:fd:85:97:03:a2:89:b1:b4:21:e5:33:0f:79: 5c:8d:d3:10:4d:2f:b2:14:ce:b5:cb:3b:19:fd:f4: 4d:32:ff:cc:af:b5:48:68:81:d7:a8:ff:a5:50:b4: 01:3d:a2:90:14:30:7d:a5:6c:5f:d5:3c:91:6c:0c: 02:28:38:71:35:21:2b:e1:02:94:74:de:cc:bb:1e: 42:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BF:8B:D3:7E:E1:95:6A:B0:7A:20:13:B2:D4:C9:D5:FA:00:A1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a757c30-6c18-3320-b532-4692aa3c9519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:80:12:65:b3:e8:cd:94:ed:49:b1:0e:a5:12:3b:fb:cc:9e: 3a:f3:6f:e1:fc:23:fe:ee:5a:8c:d0:bd:d5:9a:41:70:49:41: 12:86:5f:4c:1c:8b:4c:e1:e4:af:01:00:7b:63:1d:8d:76:27: 4c:45:df:5d:73:66:8d:51:b9:2d:a3:80:d3:86:20:48:5e:c8: 33:f9:29:db:04:cc:29:ee:06:7d:aa:0d:55:8e:ec:20:8d:ba: fd:03:ca:d4:fc:22:10:ad:71:5a:1f:4f:de:ec:bc:85:7c:96: da:8c:aa:54:29:68:08:4f:11:cb:07:44:78:28:ea:ca:c8:e2: 50:94:ee:f8:8a:19:10:19:32:a2:65:45:57:6e:2e:17:64:1e: 1f:56:04:32:79:ce:83:6b:c9:03:3a:b1:dd:3f:8d:a8:0b:b0: 96:8f:74:b2:11:49:91:49:5b:88:25:48:9b:05:05:53:7d:f9: 1c:7b:b4:18:0b:34:ff:24:a3:25:43:da:7a:bc:5f:a4:83:e8: 0d:65:7b:d1:91:75:fc:1b:3c:e5:06:24:69:c9:06:8c:0e:a7: e5:73:15:b1:a5:47:ee:22:41:0a:9f:ec:bf:65:bb:0a:4e:4e: a0:a9:32:d8:41:95:37:31:ae:ac:1f:a0:5c:cb:59:5d:9e:50: 4a:05:f7:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4KcJUhapu7amsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk M2JkNzhjN2QtYTU1OS00NDRlLWFhZDEtZjE3ODI2NWNmOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHlF4fCUV1IRQxiPSGPPvgm1OALexaHWQjF4 XbQRm9fn7tAHVpuffkSd1HRvMEC229IT6PRw9TGo/yNtAm5cNxH4Uf9aml6KqYoC YOFJUHQD9hFAJ/xCV4Fq7F06e2eoLH6KOcgzHdDh6QqthFgZq32mWmfV4pHENrqV XK/wvFF03Ax2NaOWRcnC+wjlEvsDQklsxYasALDBMEzj1ahYlzs88n0TWfm+Py6K x6krRaS2nCD/nP2FlwOiibG0IeUzD3lcjdMQTS+yFM61yzsZ/fRNMv/Mr7VIaIHX qP+lULQBPaKQFDB9pWxf1TyRbAwCKDhxNSEr4QKUdN7Mux5CCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEK/i9N+4ZVqsHogE7LUydX6AKHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmE3NTdjMzAtNmMxOC0z MzIwLWI1MzItNDY5MmFhM2M5NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKAEmWz6M2U7UmxDqUSO/vMnjrzb+H8I/7uWozQvdWaQXBJQRKG X0wci0zh5K8BAHtjHY12J0xF311zZo1RuS2jgNOGIEheyDP5KdsEzCnuBn2qDVWO 7CCNuv0DytT8IhCtcVofT97svIV8ltqMqlQpaAhPEcsHRHgo6srI4lCU7viKGRAZ MqJlRVduLhdkHh9WBDJ5zoNryQM6sd0/jagLsJaPdLIRSZFJW4glSJsFBVN9+Rx7 tBgLNP8koyVD2nq8X6SD6A1le9GRdfwbPOUGJGnJBowOp+VzFbGlR+4iQQqf7L9l uwpOTqCpMthBlTcxrqwfoFzLWV2eUEoF9yo= -----END CERTIFICATE-----Generated at Wed Oct 29 07:19:21 2025 by rpki-client