$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a1f10e-984d-3e62-8aac-f55f4728c72a.roa File: d6a1f10e-984d-3e62-8aac-f55f4728c72a.roa (raw, json) Hash identifier: MT90kcU7OIO0pJOChASIUjoV0qCSWIM8x9btKVVA718= Subject key identifier: 76:E8:62:EC:6D:1D:8D:F7:3F:9B:4B:5F:F0:BE:95:4F:6D:78:60:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A78380602514DB63890400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a1f10e-984d-3e62-8aac-f55f4728c72a.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 397193 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:83:80:60:25:14:db:63:89:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=0da059e7-3c95-4e18-92af-62dba19ca6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:ef:ad:bd:70:fe:5d:d2:ad:80:72:f5:5c: 96:bb:d0:7a:89:24:84:f1:a5:d0:ea:0e:30:a4:b9: 3e:71:9e:05:ed:81:af:d9:d5:42:49:d0:d2:0b:f1: 94:d3:66:d3:76:ee:d5:cc:b4:54:99:75:a0:1f:48: f9:d9:96:19:14:5c:6e:ba:53:2b:e5:b4:56:d6:5a: 1b:8d:1c:3a:36:a3:ae:2f:8d:ce:4f:a6:c8:09:a5: 92:ae:eb:77:0f:eb:6b:1a:3a:8c:3d:9c:ff:f7:29: c2:00:17:3f:af:6d:b8:c9:5a:6d:9a:6b:92:e0:de: 02:da:22:34:40:41:49:9e:c7:79:5d:56:86:98:37: 99:8f:db:da:f7:b3:b6:d1:4a:75:b5:79:e3:b8:f6: f6:6e:d9:d3:b1:bc:fa:6d:e9:81:80:ff:66:46:16: 6d:1e:65:0e:16:36:c4:b4:0a:c7:ee:e5:25:63:c8: df:3c:23:64:1f:2a:d8:7c:6b:d2:1a:e5:be:c0:27: a1:6a:57:16:de:ec:01:fa:ed:88:bd:7c:a9:ef:11: 13:10:9b:d1:62:0b:55:e2:fe:1c:32:7d:81:1b:69: 30:e6:db:bc:3f:37:41:4c:cb:42:32:ce:68:b8:35: 36:fd:c2:fb:e3:8e:7e:4a:c1:ad:23:3f:fc:1c:ae: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E8:62:EC:6D:1D:8D:F7:3F:9B:4B:5F:F0:BE:95:4F:6D:78:60:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a1f10e-984d-3e62-8aac-f55f4728c72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:64:a9:52:4f:d3:03:88:3e:35:90:89:4a:cd:3e:ec:0e:84: e8:69:ce:64:b6:3f:22:41:72:71:52:8a:31:97:ba:22:c0:4c: db:48:b3:c0:8b:51:d6:02:f6:e5:f7:cb:2f:01:10:94:ee:fe: c3:9b:bd:a4:c6:ec:fc:ba:46:16:1d:c6:01:c6:46:fa:87:fc: 4f:ca:3f:00:86:ee:0b:af:f4:d6:0d:14:06:8a:74:59:72:3b: a1:70:b4:d9:94:50:8b:cd:d8:01:df:69:30:ae:e1:d9:79:72: e7:12:23:02:64:3d:2b:cd:70:ce:88:20:81:f3:8f:07:1f:60: 11:f5:27:d9:4b:4f:f6:94:41:1e:f1:dd:fc:61:9d:95:c5:8f: 4d:9d:f6:8a:9f:08:d5:b4:23:24:fe:be:51:3b:c5:1e:4c:8b: 4f:ec:28:92:86:f5:6c:80:a5:03:90:b9:87:a4:a0:0e:f1:3c: bc:f1:51:f0:d2:11:a7:56:6e:e2:2d:d7:d4:8c:bc:55:01:b2: c4:36:f4:1e:1e:52:ff:e0:7b:5b:5d:19:e9:d4:eb:98:07:f4: 74:f1:bb:10:11:81:f1:ef:6e:f4:dd:4b:4c:56:a2:04:db:fb: 37:5c:fb:57:41:a9:92:05:23:ee:93:5a:1b:28:4f:e6:1a:85: 07:c9:74:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4OAYCUU22OJBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MGRhMDU5ZTctM2M5NS00ZTE4LTkyYWYtNjJkYmExOWNhNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaXvrb1w/l3SrYBy9VyWu9B6iSSE8aXQ6g4w pLk+cZ4F7YGv2dVCSdDSC/GU02bTdu7VzLRUmXWgH0j52ZYZFFxuulMr5bRW1lob jRw6NqOuL43OT6bICaWSrut3D+trGjqMPZz/9ynCABc/r224yVptmmuS4N4C2iI0 QEFJnsd5XVaGmDeZj9va97O20Up1tXnjuPb2btnTsbz6bemBgP9mRhZtHmUOFjbE tArH7uUlY8jfPCNkHyrYfGvSGuW+wCehalcW3uwB+u2IvXyp7xETEJvRYgtV4v4c Mn2BG2kw5tu8PzdBTMtCMs5ouDU2/cL7445+SsGtIz/8HK4j6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHboYuxtHY33P5tLX/C+lU9teGDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDZhMWYxMGUtOTg0ZC0z ZTYyLThhYWMtZjU1ZjQ3MjhjNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFkqVJP0wOIPjWQiUrNPuwOhOhpzmS2PyJBcnFSijGXuiLATNtI s8CLUdYC9uX3yy8BEJTu/sObvaTG7Py6RhYdxgHGRvqH/E/KPwCG7guv9NYNFAaK dFlyO6FwtNmUUIvN2AHfaTCu4dl5cucSIwJkPSvNcM6IIIHzjwcfYBH1J9lLT/aU QR7x3fxhnZXFj02d9oqfCNW0IyT+vlE7xR5Mi0/sKJKG9WyApQOQuYekoA7xPLzx UfDSEadWbuIt19SMvFUBssQ29B4eUv/ge1tdGenU65gH9HTxuxARgfHvbvTdS0xW ogTb+zdc+1dBqZIFI+6TWhsoT+YahQfJdLU= -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:34 2025 by rpki-client