$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35c353b3-efa4-3c1e-bcde-2fc25ce9ee73.roa File: 35c353b3-efa4-3c1e-bcde-2fc25ce9ee73.roa (raw, json) Hash identifier: APWRDnZ4E3sJCweBn2Ogxz2Rxpm7qoP1sIjMEvq0kkc= Subject key identifier: BC:04:7F:57:F8:C4:9A:39:FD:EA:61:E2:92:83:68:4C:77:CA:A2:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1B4CB259A9CC28846C020 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35c353b3-efa4-3c1e-bcde-2fc25ce9ee73.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 396549 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b4:cb:25:9a:9c:c2:88:46:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=475bb9ab-6e5e-466b-b6bf-d1a888cddc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:60:bc:b9:0b:72:3c:87:dc:9c:43:bd:61: 6d:ec:ac:72:6c:b9:7b:db:e0:2f:aa:e8:43:c9:73: d4:87:59:2c:b7:4e:2f:da:56:e3:76:5e:77:93:86: 3d:62:17:02:5c:48:37:68:f5:06:48:d9:7d:eb:c1: 44:d0:06:4e:e6:6f:f3:d8:d8:c3:cf:0a:f7:cf:97: 5e:dc:ca:b9:71:41:87:be:a4:d1:c9:7b:0e:9c:2b: 94:52:46:4c:66:45:03:c4:a2:93:6e:05:01:cf:6f: c0:68:05:c1:c0:2c:07:19:ca:f6:21:59:0b:8d:2f: 01:5a:aa:f7:bf:a9:83:db:a0:53:41:fd:6f:66:52: 82:df:80:f5:99:e4:c4:38:4c:05:7e:68:6b:e1:e6: aa:a1:4b:a9:31:f4:69:74:cb:7e:85:39:18:5b:18: 5d:51:e1:fd:19:ae:4f:be:b7:f8:da:fa:f2:11:49: d7:7c:20:a9:9a:6f:81:6f:f6:7c:4a:cc:33:b6:53: 7e:8b:b6:6f:87:79:97:d7:75:3d:23:90:aa:0f:89: 68:5e:a9:05:4f:51:ac:2d:f3:0f:dd:87:fb:b7:45: a0:f5:a3:db:63:d2:7a:eb:5f:36:c9:39:ab:82:e8: 68:9c:b2:8c:d1:e0:d6:46:7a:a1:d9:3c:77:6a:c9: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:7F:57:F8:C4:9A:39:FD:EA:61:E2:92:83:68:4C:77:CA:A2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35c353b3-efa4-3c1e-bcde-2fc25ce9ee73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:55:90:c9:04:6b:70:ff:19:78:45:21:7b:b4:4d:43:28:64: 4b:bc:f3:8e:fa:e8:dc:dc:72:0e:cf:b9:30:6d:85:31:d6:dc: 9d:0b:5a:fb:a7:f0:4f:60:fb:fb:80:43:87:67:d3:02:91:95: ad:72:e5:63:9d:ed:99:d2:3a:89:fd:d4:82:e8:aa:db:13:51: 1d:0b:2e:cd:16:86:ef:bc:2c:44:53:77:2e:46:cb:cc:9f:dc: 35:64:db:8c:4b:5d:2d:76:78:72:33:a4:1a:a7:c4:c7:73:51: 7a:76:65:a0:f5:2d:72:a5:4c:f1:0e:05:5f:91:9a:3d:f2:50: 62:d4:8c:70:ff:f4:bb:e0:c4:2e:90:94:1c:02:ec:dc:4a:31: 96:38:b0:cd:c5:e4:ec:2d:7f:9f:a4:47:26:13:93:2f:27:fb: 53:35:cc:f0:37:fc:9d:06:39:b4:e2:66:67:9f:a4:02:4c:18: 75:24:d4:19:fd:30:ca:01:64:dc:45:ec:91:e3:6a:4e:a3:e9: 17:35:74:2c:b7:30:24:7a:a1:67:bf:89:5e:d5:53:d3:59:41: 39:9c:4b:82:5e:84:af:a8:57:94:df:c0:ff:31:d2:f6:0a:b4: 91:e3:65:fa:2d:44:40:aa:f0:49:3b:30:e6:7d:cc:97:22:f7: 39:58:5d:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bTLJZqcwohGwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NDc1YmI5YWItNmU1ZS00NjZiLWI2YmYtZDFhODg4Y2RkYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZBgvLkLcjyH3JxDvWFt7KxybLl72+AvquhD yXPUh1kst04v2lbjdl53k4Y9YhcCXEg3aPUGSNl968FE0AZO5m/z2NjDzwr3z5de 3Mq5cUGHvqTRyXsOnCuUUkZMZkUDxKKTbgUBz2/AaAXBwCwHGcr2IVkLjS8BWqr3 v6mD26BTQf1vZlKC34D1meTEOEwFfmhr4eaqoUupMfRpdMt+hTkYWxhdUeH9Ga5P vrf42vryEUnXfCCpmm+Bb/Z8SswztlN+i7Zvh3mX13U9I5CqD4loXqkFT1GsLfMP 3Yf7t0Wg9aPbY9J66182yTmrguhonLKM0eDWRnqh2Tx3asnF9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLwEf1f4xJo5/eph4pKDaEx3yqLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzVjMzUzYjMtZWZhNC0z YzFlLWJjZGUtMmZjMjVjZTllZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACtVkMkEa3D/GXhFIXu0TUMoZEu884766Nzccg7PuTBthTHW3J0L Wvun8E9g+/uAQ4dn0wKRla1y5WOd7ZnSOon91ILoqtsTUR0LLs0Whu+8LERTdy5G y8yf3DVk24xLXS12eHIzpBqnxMdzUXp2ZaD1LXKlTPEOBV+Rmj3yUGLUjHD/9Lvg xC6QlBwC7NxKMZY4sM3F5Owtf5+kRyYTky8n+1M1zPA3/J0GObTiZmefpAJMGHUk 1Bn9MMoBZNxF7JHjak6j6Rc1dCy3MCR6oWe/iV7VU9NZQTmcS4JehK+oV5TfwP8x 0vYKtJHjZfotRECq8Ek7MOZ9zJci9zlYXcg= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:39 2025 by rpki-client