$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c970c4e1-40bf-3c9e-87ea-220d9987a030.roa File: c970c4e1-40bf-3c9e-87ea-220d9987a030.roa (raw, json) Hash identifier: ercc+Es3GSEzYDlAC8Tdz2tUCLynFeUYLHp7A4pVTws= Subject key identifier: D3:3D:CC:08:F3:27:92:61:13:FB:41:C9:96:4D:B3:B5:21:CF:8F:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B83820936CEF11B4B7E7A9D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c970c4e1-40bf-3c9e-87ea-220d9987a030.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 36624 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:09:36:ce:f1:1b:4b:7e:7a:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=ca1b2a84-2705-4dd7-af3b-78b6798748c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:26:4b:99:e3:0f:6e:f3:c3:9b:86:b5:59: de:01:e9:cd:5a:59:9c:57:a5:33:9e:03:0c:d8:36: d6:6c:1e:09:47:0a:6e:af:3f:2f:02:fc:a4:08:1b: 49:da:b1:94:de:e6:e1:27:3a:d0:1c:0b:b8:80:a3: 18:d4:49:42:3e:c3:e8:20:6a:24:4f:2f:90:a6:0a: 62:10:a8:be:c5:bb:fb:b0:71:35:30:6a:f9:7a:45: 5a:b3:30:6e:01:9b:b9:57:7b:c6:ad:4a:fe:04:41: 24:83:51:2f:8c:59:f9:27:d6:cd:8b:ff:fe:a0:d1: bb:0f:47:3f:f1:93:58:a3:f8:9b:55:a4:8a:af:43: 19:c7:6a:6b:11:61:88:5c:dc:f3:91:77:04:3c:37: 36:50:39:30:35:b1:3a:21:0c:c1:49:89:fc:c3:20: a4:41:48:39:e3:78:d3:53:d4:bf:80:fb:1f:85:88: cc:3f:0a:a4:77:ba:0f:74:37:a7:25:d1:cd:13:8d: f8:9c:09:ce:16:2c:20:7f:9f:65:ed:4f:1b:ad:da: db:d3:72:d3:b7:79:12:a0:bb:bd:33:b1:7a:bd:af: ba:59:48:24:f0:bf:e2:e7:e9:b1:27:aa:51:15:8e: 3e:26:e5:3c:ef:df:b0:23:e7:8d:91:e7:3d:2d:18: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3D:CC:08:F3:27:92:61:13:FB:41:C9:96:4D:B3:B5:21:CF:8F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c970c4e1-40bf-3c9e-87ea-220d9987a030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f9:87:ec:38:57:94:0e:5c:f1:52:ff:c1:b4:88:01:13:27: 04:bf:6b:ec:78:85:1b:60:0b:68:a0:4e:6f:cf:18:1a:c0:cd: d6:49:33:a6:e8:16:b0:88:af:f6:a1:7d:db:86:8d:12:2c:31: d7:94:98:d0:d6:4a:e9:0d:63:29:05:52:02:6b:e3:c3:4d:69: ef:10:34:4a:52:a4:c2:4e:4b:6d:cf:8d:6f:a8:59:a7:e5:e6: a5:b4:fd:1a:68:41:e9:8d:28:93:9e:d2:be:e9:42:a3:ac:38: 0c:9a:2c:e3:99:1d:51:be:28:b1:3a:46:82:4a:7e:c7:04:a4: 5f:9e:ce:52:2e:7d:79:91:74:2c:af:dc:d7:3c:c3:22:c3:23: 7d:89:07:0a:07:34:b7:f9:8c:68:69:2f:9d:c4:5b:a2:d9:ff: 7a:9b:60:bc:b0:27:51:68:fb:d7:9a:9c:0c:ad:7b:e6:46:3b: 32:5a:15:d0:a1:34:68:84:c3:ed:38:48:e4:97:55:eb:0c:79: aa:79:3b:6f:30:d4:51:a9:7d:55:af:cd:4c:b7:80:23:72:61: 72:4e:e5:1b:47:d9:56:74:f1:23:7c:17:47:93:28:bb:a8:33: 45:6e:84:76:42:d9:1c:95:46:c6:f7:a4:76:5e:f9:c8:b2:34: b7:4e:82:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDggk2zvEbS356nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk Y2ExYjJhODQtMjcwNS00ZGQ3LWFmM2ItNzhiNjc5ODc0OGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgAmS5njD27zw5uGtVneAenNWlmcV6UzngMM 2DbWbB4JRwpurz8vAvykCBtJ2rGU3ubhJzrQHAu4gKMY1ElCPsPoIGokTy+Qpgpi EKi+xbv7sHE1MGr5ekVaszBuAZu5V3vGrUr+BEEkg1EvjFn5J9bNi//+oNG7D0c/ 8ZNYo/ibVaSKr0MZx2prEWGIXNzzkXcEPDc2UDkwNbE6IQzBSYn8wyCkQUg543jT U9S/gPsfhYjMPwqkd7oPdDenJdHNE434nAnOFiwgf59l7U8brdrb03LTt3kSoLu9 M7F6va+6WUgk8L/i5+mxJ6pRFY4+JuU879+wI+eNkec9LRj3+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNM9zAjzJ5JhE/tByZZNs7Uhz48QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzk3MGM0ZTEtNDBiZi0z YzllLTg3ZWEtMjIwZDk5ODdhMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALL5h+w4V5QOXPFS/8G0iAETJwS/a+x4hRtgC2igTm/PGBrAzdZJ M6boFrCIr/ahfduGjRIsMdeUmNDWSukNYykFUgJr48NNae8QNEpSpMJOS23PjW+o Wafl5qW0/RpoQemNKJOe0r7pQqOsOAyaLOOZHVG+KLE6RoJKfscEpF+ezlIufXmR dCyv3Nc8wyLDI32JBwoHNLf5jGhpL53EW6LZ/3qbYLywJ1Fo+9eanAyte+ZGOzJa FdChNGiEw+04SOSXVesMeap5O28w1FGpfVWvzUy3gCNyYXJO5RtH2VZ08SN8F0eT KLuoM0VuhHZC2RyVRsb3pHZe+ciyNLdOgiA= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:49 2025 by rpki-client