$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/443c0b8d-68a3-3635-925b-5cd421fe37f9.roa File: 443c0b8d-68a3-3635-925b-5cd421fe37f9.roa (raw, json) Hash identifier: DiHYno8pYFoGUKbLn4X8NI3RSMgIgWGw709vF3A6WyQ= Subject key identifier: 07:AA:B2:4A:19:07:4E:81:59:C3:7C:A9:61:46:EF:04:D3:CD:67:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081CFEC21AC2770FB389E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/443c0b8d-68a3-3635-925b-5cd421fe37f9.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 397203 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:cf:ec:21:ac:27:70:fb:38:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=29f14759-2364-4368-85dd-e932310933f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:d5:f4:b6:1b:92:0f:6b:fe:b0:e4:00:7f: b8:63:3e:78:fa:bf:76:de:86:10:99:56:26:dd:4f: 91:b5:4c:ec:ff:f7:af:65:16:96:8c:5f:79:bc:ef: 20:fd:20:8b:2e:54:ca:11:ea:7d:42:01:12:f6:e0: c0:55:ea:1e:09:a3:13:9c:d8:01:ba:57:d5:3e:82: 14:ef:61:67:b6:e8:ae:82:c5:00:9e:dc:58:89:54: d7:72:6b:a5:a9:55:d0:e5:61:66:3a:df:ba:4e:b0: 9e:d8:c8:19:25:63:74:b2:ea:b9:b2:a7:8c:a3:28: d5:4f:96:b6:d7:1a:f2:37:dc:b1:4b:f2:41:c0:14: 5b:34:8b:6a:7e:d9:1b:4a:ef:23:45:22:71:70:b4: 5d:10:62:71:8c:34:0b:9e:ad:f7:fc:ea:b0:84:52: 1b:62:fd:19:55:a4:78:57:37:a0:ef:1c:2c:81:90: ac:e8:35:30:23:d1:1c:0e:36:23:3b:df:83:b1:17: a3:89:91:2d:ec:17:bf:30:ac:07:d7:47:08:57:42: 2a:a3:9f:a4:09:a2:b4:f4:49:a5:15:85:23:2f:fb: a1:d0:f5:e0:23:0c:d4:39:d3:f6:fb:2d:b4:dd:40: 24:9f:c7:0a:7d:39:20:25:ef:35:ea:27:09:cc:7f: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AA:B2:4A:19:07:4E:81:59:C3:7C:A9:61:46:EF:04:D3:CD:67:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/443c0b8d-68a3-3635-925b-5cd421fe37f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:45:47:d4:cc:ac:7c:26:80:72:a5:f0:bf:8f:68:89:c7:fe: a9:d3:1e:4c:4d:37:fb:c0:0c:42:8e:36:84:60:8b:46:71:15: a0:be:b1:52:89:b8:b3:7b:1f:cf:7e:ae:e3:f1:06:56:16:93: b4:f2:14:2c:74:af:45:5c:56:59:04:8d:d7:8e:12:fc:ca:b5: 18:51:8c:17:89:fb:0d:eb:5a:22:c1:5a:ba:a7:4c:d1:52:f7: 91:d2:39:23:cb:49:8a:d2:91:e7:32:51:03:38:fe:83:0f:76: d8:ac:4b:82:e9:36:6f:9f:6c:3f:18:83:ca:4f:86:3a:c1:2c: bd:0d:a2:fb:c7:1e:36:dc:30:5d:1e:fd:bd:4a:d5:c0:ae:17: 43:88:4a:14:24:79:27:be:8b:67:9b:44:38:99:da:b2:c2:0e: fa:3d:b7:45:ae:5c:ba:38:35:86:6d:bd:92:b4:72:44:45:d4: aa:27:24:e4:0d:58:b8:00:ff:34:a0:16:92:c3:b6:0c:a4:17: e9:be:ef:38:70:ad:34:24:cd:07:3d:68:58:2d:06:6b:9e:df: de:d0:78:eb:66:19:0a:b8:52:fd:37:d8:a8:31:d6:50:77:88: 0a:44:04:23:c0:2d:52:74:3e:0c:83:bf:34:9d:0f:a2:26:ca: 5a:f7:21:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtAgc/sIawncPs4noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MjlmMTQ3NTktMjM2NC00MzY4LTg1ZGQtZTkzMjMxMDkzM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0XV9LYbkg9r/rDkAH+4Yz54+r923oYQmVYm 3U+RtUzs//evZRaWjF95vO8g/SCLLlTKEep9QgES9uDAVeoeCaMTnNgBulfVPoIU 72FntuiugsUAntxYiVTXcmulqVXQ5WFmOt+6TrCe2MgZJWN0suq5sqeMoyjVT5a2 1xryN9yxS/JBwBRbNItqftkbSu8jRSJxcLRdEGJxjDQLnq33/OqwhFIbYv0ZVaR4 Vzeg7xwsgZCs6DUwI9EcDjYjO9+DsRejiZEt7Be/MKwH10cIV0Iqo5+kCaK09Eml FYUjL/uh0PXgIwzUOdP2+y203UAkn8cKfTkgJe816icJzH9PJwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAeqskoZB06BWcN8qWFG7wTTzWdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDQzYzBiOGQtNjhhMy0z NjM1LTkyNWItNWNkNDIxZmUzN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAwRUfUzKx8JoBypfC/j2iJx/6p0x5MTTf7wAxC jjaEYItGcRWgvrFSibizex/Pfq7j8QZWFpO08hQsdK9FXFZZBI3XjhL8yrUYUYwX ifsN61oiwVq6p0zRUveR0jkjy0mK0pHnMlEDOP6DD3bYrEuC6TZvn2w/GIPKT4Y6 wSy9DaL7xx423DBdHv29StXArhdDiEoUJHknvotnm0Q4mdqywg76PbdFrly6ODWG bb2StHJERdSqJyTkDVi4AP80oBaSw7YMpBfpvu84cK00JM0HPWhYLQZrnt/e0Hjr ZhkKuFL9N9ioMdZQd4gKRAQjwC1SdD4Mg780nQ+iJspa9yE+ -----END CERTIFICATE-----Generated at Wed Oct 29 07:21:37 2025 by rpki-client