$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04ab4bf-f8e2-3fc8-abbe-13ffee73e057.roa File: b04ab4bf-f8e2-3fc8-abbe-13ffee73e057.roa (raw, json) Hash identifier: fYXsZTeu2S/aUpub9qVOk4A4GrzqIaGDFIHJ0w+oGuI= Subject key identifier: B1:C8:58:96:AB:08:E2:1F:53:31:B6:33:C4:7E:3B:AF:D0:3B:B2:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCCA188E0F694D8AE1300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04ab4bf-f8e2-3fc8-abbe-13ffee73e057.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396688 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:cc:a1:88:e0:f6:94:d8:ae:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=170ffa2f-d48f-4b1c-a5fe-2658788ad173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9e:c0:e5:84:5c:e1:b4:dc:a1:76:70:22:69: c8:b1:bd:d1:e6:b7:25:91:eb:59:4d:a6:55:4b:38: 9d:fe:69:76:57:aa:49:b1:d6:f3:2f:e7:76:44:0e: 89:3e:81:86:23:0b:ae:1d:e7:bb:58:9f:00:8e:96: b3:af:7b:cb:ca:bf:6e:f4:90:d3:64:ff:b4:2e:0e: 80:2b:2b:c3:b9:d4:47:f0:31:8f:61:e2:db:a0:d6: 4f:0e:9f:b7:37:59:f3:d0:63:60:d6:e5:86:a2:13: 8f:5c:a9:10:f7:49:80:05:23:6e:1e:2c:28:ae:75: e0:d0:3e:c6:2d:39:a0:af:9c:fa:8c:dd:56:9e:bd: d3:03:df:b4:78:ef:b2:56:b2:d5:80:ea:35:89:0d: 09:ea:99:99:95:70:89:80:89:a0:23:19:e2:dd:05: d9:a4:60:f3:f2:dd:3d:08:13:c2:6d:26:6b:12:f9: 02:70:6e:2f:8a:98:43:3d:cc:e9:92:56:95:9f:ac: b3:57:9e:9c:d2:83:ff:5b:25:60:6e:f5:a3:16:14: cf:c2:3c:c3:11:eb:5a:4d:ad:54:7a:65:48:65:34: 64:16:98:ec:e7:54:0b:67:12:a2:4d:1f:51:eb:49: c1:0c:ec:e7:0d:55:e9:de:b9:99:df:fe:86:b5:fa: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C8:58:96:AB:08:E2:1F:53:31:B6:33:C4:7E:3B:AF:D0:3B:B2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04ab4bf-f8e2-3fc8-abbe-13ffee73e057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:21:c5:5a:92:05:39:ab:8f:15:dd:75:67:f4:59:e5:82:8e: f1:05:c1:ff:d4:09:34:75:f2:93:e8:a2:b9:71:e2:85:86:09: ff:23:0a:0a:41:3f:ba:7c:af:b5:70:62:6b:95:f6:ee:d3:d7: a0:b3:19:24:e8:05:8b:f2:b3:a6:45:6f:84:3b:b7:4d:85:15: 32:64:14:b6:40:58:76:f3:e1:20:7d:e2:09:14:8a:f5:4b:68: 5b:d2:24:fd:df:b9:ba:f4:31:46:66:7e:ce:f6:01:10:d6:31: b1:16:66:36:60:fb:f9:31:f4:9b:f2:e1:ed:20:14:32:b1:9a: 88:c8:4b:58:0a:0a:db:10:ca:f1:c0:1a:1c:38:56:28:e1:c5: 4f:58:0d:5a:ce:01:ca:a4:67:7a:ae:e8:59:0f:19:bd:62:fe: e4:60:c5:c7:31:ea:ea:0d:3e:33:29:aa:86:89:2c:cf:69:84: 40:fe:8e:9b:83:6f:1e:d7:16:a2:6e:23:6a:c3:da:72:2a:89: e9:aa:0d:09:f3:30:e7:94:82:29:7f:7c:1e:e2:5a:75:76:21: 1c:75:08:ed:13:74:80:85:56:a8:26:a6:90:38:76:44:d7:76: 8f:50:8b:58:a8:78:1a:8a:c2:e4:e3:48:3c:33:38:43:74:ab: 51:b6:cb:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMyhiOD2lNiuEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MTcwZmZhMmYtZDQ4Zi00YjFjLWE1ZmUtMjY1ODc4OGFkMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl57A5YRc4bTcoXZwImnIsb3R5rclketZTaZV Szid/ml2V6pJsdbzL+d2RA6JPoGGIwuuHee7WJ8Ajpazr3vLyr9u9JDTZP+0Lg6A KyvDudRH8DGPYeLboNZPDp+3N1nz0GNg1uWGohOPXKkQ90mABSNuHiwornXg0D7G LTmgr5z6jN1Wnr3TA9+0eO+yVrLVgOo1iQ0J6pmZlXCJgImgIxni3QXZpGDz8t09 CBPCbSZrEvkCcG4viphDPczpklaVn6yzV56c0oP/WyVgbvWjFhTPwjzDEetaTa1U emVIZTRkFpjs51QLZxKiTR9R60nBDOznDVXp3rmZ3/6Gtfod0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLHIWJarCOIfUzG2M8R+O6/QO7I9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjA0YWI0YmYtZjhlMi0z ZmM4LWFiYmUtMTNmZmVlNzNlMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHshxVqSBTmrjxXddWf0WeWCjvEFwf/UCTR18pPoorlx4oWGCf8j CgpBP7p8r7VwYmuV9u7T16CzGSToBYvys6ZFb4Q7t02FFTJkFLZAWHbz4SB94gkU ivVLaFvSJP3fubr0MUZmfs72ARDWMbEWZjZg+/kx9Jvy4e0gFDKxmojIS1gKCtsQ yvHAGhw4VijhxU9YDVrOAcqkZ3qu6FkPGb1i/uRgxccx6uoNPjMpqoaJLM9phED+ jpuDbx7XFqJuI2rD2nIqiemqDQnzMOeUgil/fB7iWnV2IRx1CO0TdICFVqgmppA4 dkTXdo9Qi1ioeBqKwuTjSDwzOEN0q1G2y8E= -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:28 2025 by rpki-client