$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3940988-33d5-310e-adf0-7a27f90d89a4.roa File: b3940988-33d5-310e-adf0-7a27f90d89a4.roa (raw, json) Hash identifier: Re9PbOx2bA/1uEci+0iqLhaQUiOITLEu24NEwGqrhiA= Subject key identifier: CA:72:9C:1E:3B:88:D3:5E:67:B3:5F:68:45:51:B6:EC:77:FB:79:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D29FDD11300DA89FC340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3940988-33d5-310e-adf0-7a27f90d89a4.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36629 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d2:9f:dd:11:30:0d:a8:9f:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=6420d5c8-8755-41cc-8e4b-1691e3003161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:5c:75:29:08:0f:19:ac:89:cf:aa:d8:c4: 2b:ed:aa:71:e0:81:6c:a6:b7:2d:09:8d:7a:63:cc: c6:10:2e:80:f6:e5:7c:81:4c:80:db:e5:29:5f:92: d4:eb:4b:c6:98:2e:b7:d7:a0:74:ba:14:c3:34:91: 13:e5:95:69:5a:b4:df:13:17:10:9c:15:cd:f3:f2: 76:24:b3:15:cb:ae:85:96:b6:a4:b8:f8:e5:7e:1b: d7:dd:03:b4:b1:1d:17:61:f5:ee:b0:cb:df:c3:6c: 64:83:0c:a5:d7:73:44:d6:4a:a0:f1:ae:93:56:61: 39:dc:e8:c6:23:63:48:bf:1d:4d:e6:07:d0:64:d0: f9:e8:c8:16:be:bd:d6:7d:0d:a7:0f:e3:8b:0f:c2: a9:9a:85:2d:7c:37:66:68:05:76:3d:e1:7f:8b:af: e4:c1:5e:de:c5:39:09:2a:8b:b7:21:01:ef:4c:7c: 28:30:43:ae:9e:76:b8:86:4e:a6:5f:46:28:1f:95: e8:1c:f9:4e:33:25:80:7b:b6:72:d1:bd:ab:8c:61: 12:e6:87:60:76:fe:32:b9:b0:c3:83:32:60:74:7a: c0:ec:94:9d:c4:86:d6:b6:cc:6c:82:8e:24:72:1e: 35:71:55:1f:ce:d6:86:b2:23:02:20:3a:62:88:ca: 60:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:72:9C:1E:3B:88:D3:5E:67:B3:5F:68:45:51:B6:EC:77:FB:79:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3940988-33d5-310e-adf0-7a27f90d89a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2a:5e:20:29:54:89:d3:9a:ed:d3:fb:fc:43:ab:c4:0c:ac: 57:4a:c3:8a:08:f2:59:f5:e2:bd:e0:d8:c3:10:55:1e:f3:31: 8c:e3:2e:d1:05:33:64:6a:2c:74:2b:95:26:c5:ed:14:74:9e: 98:4b:83:51:73:54:ad:16:90:fd:93:73:ca:c8:71:fa:bd:c3: e3:4f:5d:a3:f4:e9:d4:23:f4:4b:c1:f1:9c:0b:dc:03:13:2f: 2d:d6:a2:10:e8:54:06:d0:85:1f:ec:c3:aa:4a:72:87:b6:80: 05:45:d0:83:e4:be:00:56:06:45:cb:3c:46:f7:c0:e4:29:3a: 62:14:38:58:04:68:1e:c2:2b:c5:4c:cf:0e:16:07:2f:cd:5e: 1a:3d:fe:7c:04:e2:61:07:4b:e9:fd:04:69:28:10:ab:7c:a6: fd:94:a6:fd:63:be:eb:a7:3c:1e:ab:49:5c:77:19:65:67:56: 16:08:59:10:8b:4f:ce:7f:17:6c:4d:cc:22:7d:5a:eb:d1:2e: 81:7c:f6:7b:54:6f:03:8f:0a:a3:a4:1d:65:d1:0f:af:da:a0: b4:04:65:bb:0d:e3:c8:e3:36:d9:04:f0:7e:11:3f:e3:52:54: bb:a7:65:7b:98:6b:b8:40:32:48:a7:4d:d6:c4:d6:ab:52:ec: 1d:07:2d:da -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtAgdKf3REwDaifw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NjQyMGQ1YzgtODc1NS00MWNjLThlNGItMTY5MWUzMDAzMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcRcdSkIDxmsic+q2MQr7apx4IFsprctCY16 Y8zGEC6A9uV8gUyA2+UpX5LU60vGmC6316B0uhTDNJET5ZVpWrTfExcQnBXN8/J2 JLMVy66FlrakuPjlfhvX3QO0sR0XYfXusMvfw2xkgwyl13NE1kqg8a6TVmE53OjG I2NIvx1N5gfQZND56MgWvr3WfQ2nD+OLD8KpmoUtfDdmaAV2PeF/i6/kwV7exTkJ Kou3IQHvTHwoMEOunna4hk6mX0YoH5XoHPlOMyWAe7Zy0b2rjGES5odgdv4yubDD gzJgdHrA7JSdxIbWtsxsgo4kch41cVUfztaGsiMCIDpiiMpgkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMpynB47iNNeZ7NfaEVRtux3+3mhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjM5NDA5ODgtMzNkNS0z MTBlLWFkZjAtN2EyN2Y5MGQ4OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4Kl4gKVSJ05rt0/v8Q6vEDKxXSsOKCPJZ9eK9 4NjDEFUe8zGM4y7RBTNkaix0K5Umxe0UdJ6YS4NRc1StFpD9k3PKyHH6vcPjT12j 9OnUI/RLwfGcC9wDEy8t1qIQ6FQG0IUf7MOqSnKHtoAFRdCD5L4AVgZFyzxG98Dk KTpiFDhYBGgewivFTM8OFgcvzV4aPf58BOJhB0vp/QRpKBCrfKb9lKb9Y77rpzwe q0lcdxllZ1YWCFkQi0/OfxdsTcwifVrr0S6BfPZ7VG8DjwqjpB1l0Q+v2qC0BGW7 DePI4zbZBPB+ET/jUlS7p2V7mGu4QDJIp03WxNarUuwdBy3a -----END CERTIFICATE-----Generated at Wed Oct 29 09:07:13 2025 by rpki-client