$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc17d3a1-9c4d-38d9-9e1c-f9c37308f411.roa File: dc17d3a1-9c4d-38d9-9e1c-f9c37308f411.roa (raw, json) Hash identifier: U0FB8UHBoWL+JvcCA2vJPjDojrhf4DShZdWcQpp49Go= Subject key identifier: D3:E6:80:73:1C:8A:E8:9B:45:D3:44:C1:D3:5F:42:E4:25:A6:4F:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D59CC987CD71B3306480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc17d3a1-9c4d-38d9-9e1c-f9c37308f411.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 396574 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d5:9c:c9:87:cd:71:b3:30:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=e55cdd91-803f-448c-8431-8b2f6ed91aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9d:f9:07:d1:2f:5f:a4:9f:b9:b7:96:96:04: 21:87:7e:ff:15:54:23:fd:50:c8:fc:e5:b8:48:9b: a0:6e:4c:43:06:9c:d6:b6:87:b5:1c:b5:ba:8d:d0: 72:de:ad:b5:cb:d6:03:20:3c:42:9d:aa:14:7c:b8: 73:0f:72:98:1a:88:2c:fe:6c:5f:4c:1d:a4:2a:ba: 49:bb:71:a9:f6:d0:e8:9f:2e:cd:8d:62:06:66:42: ef:96:05:4e:e2:23:a0:24:f4:7d:df:49:8e:60:99: 4a:12:1c:8b:5a:99:31:5d:02:7a:57:06:8c:33:a3: ca:da:e3:87:4c:a8:8c:53:a8:5e:a7:ed:01:cf:51: cb:cb:44:21:29:cd:7a:e9:68:1a:ac:fb:ab:ab:4e: c0:51:63:a9:3f:a4:3e:a9:0f:ca:71:70:ba:86:14: 2d:89:8f:ef:33:27:35:c1:c5:62:fb:d1:c1:f7:48: a0:50:84:5c:73:69:fa:95:e3:f4:e6:b9:d5:95:2f: d1:7a:14:2c:79:42:14:f2:81:c3:96:c6:67:74:a5: 9a:3f:3a:e2:da:e3:e8:3b:0f:15:f1:e7:16:ed:1f: 48:5a:dd:99:6e:e9:13:e2:8f:7e:fe:10:bf:f8:7f: 94:bc:63:68:4b:66:67:73:67:61:2b:9f:ae:83:2c: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E6:80:73:1C:8A:E8:9B:45:D3:44:C1:D3:5F:42:E4:25:A6:4F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc17d3a1-9c4d-38d9-9e1c-f9c37308f411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8a:d9:8e:69:0a:e5:e1:6b:10:21:86:04:57:e5:1a:43:2f: d7:71:c7:70:a9:92:6a:c1:f3:56:a9:a2:34:3c:e8:cb:a1:19: bc:a0:0b:67:fd:0b:16:13:3a:a9:94:cd:33:b7:b4:9a:81:df: e2:b2:69:ff:3d:0b:d4:f7:0f:bb:a8:0d:b9:f9:e4:e3:b1:b7: c5:cf:e8:77:df:28:5f:d3:6d:07:66:d0:44:9d:3b:68:6b:37: 0b:9a:07:c0:6f:27:27:85:eb:47:b4:25:72:fc:c4:f4:96:bd: ee:a5:d4:32:cb:44:5c:51:b8:a9:ec:21:58:c0:41:e9:2a:e4: 74:c7:46:78:76:2d:0f:46:39:b3:fe:bd:0f:08:4a:b8:d9:e8: 0b:a0:a9:76:b1:c0:dd:9e:5c:75:f3:ba:c4:9d:11:77:5f:a1: 09:89:f2:47:b5:60:ba:e2:d7:8b:3e:28:fe:ec:ab:c8:a3:13: 23:aa:9e:62:70:d3:53:a5:37:34:9b:4d:98:6c:e0:31:69:68: fd:1b:d5:9b:8b:c6:51:4b:30:6d:bd:26:b1:fa:ac:0e:b8:5d: 16:39:f6:23:f7:72:99:6b:7d:06:f8:c4:39:5a:14:ce:b5:1f: 6c:81:ba:13:a7:7b:e0:85:7e:ec:ba:e8:78:ea:5f:42:fc:52: b0:91:63:d0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtAgdWcyYfNcbMwZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZTU1Y2RkOTEtODAzZi00NDhjLTg0MzEtOGIyZjZlZDkxYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ35B9EvX6SfubeWlgQhh37/FVQj/VDI/OW4 SJugbkxDBpzWtoe1HLW6jdBy3q21y9YDIDxCnaoUfLhzD3KYGogs/mxfTB2kKrpJ u3Gp9tDony7NjWIGZkLvlgVO4iOgJPR930mOYJlKEhyLWpkxXQJ6VwaMM6PK2uOH TKiMU6hep+0Bz1HLy0QhKc166WgarPurq07AUWOpP6Q+qQ/KcXC6hhQtiY/vMyc1 wcVi+9HB90igUIRcc2n6leP05rnVlS/RehQseUIU8oHDlsZndKWaPzri2uPoOw8V 8ecW7R9IWt2ZbukT4o9+/hC/+H+UvGNoS2Znc2dhK5+ugyzSHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNPmgHMciuibRdNEwdNfQuQlpk8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGMxN2QzYTEtOWM0ZC0z OGQ5LTllMWMtZjljMzczMDhmNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4itmOaQrl4WsQIYYEV+UaQy/XccdwqZJqwfNW qaI0POjLoRm8oAtn/QsWEzqplM0zt7Sagd/ismn/PQvU9w+7qA25+eTjsbfFz+h3 3yhf020HZtBEnTtoazcLmgfAbycnhetHtCVy/MT0lr3updQyy0RcUbip7CFYwEHp KuR0x0Z4di0PRjmz/r0PCEq42egLoKl2scDdnlx187rEnRF3X6EJifJHtWC64teL Pij+7KvIoxMjqp5icNNTpTc0m02YbOAxaWj9G9Wbi8ZRSzBtvSax+qwOuF0WOfYj 93KZa30G+MQ5WhTOtR9sgboTp3vghX7suuh46l9C/FKwkWPQ -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:29 2025 by rpki-client