$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa File: ddf0256d-f4c8-3c11-81f8-a2da66601315.roa (raw, json) Hash identifier: YA8v7GdZwS+3V5GV2VRfC8c+BFWocuj3ViKP7sz6WMI= Subject key identifier: B1:39:B8:8A:5C:ED:12:A0:3B:5E:87:53:C2:F3:AA:F0:44:CE:B6:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1B962F572BB37A8651050 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 397209 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b9:62:f5:72:bb:37:a8:65:10:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=3d38bc87-baaf-4369-be3c-67d5c80b5b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:98:89:c6:f7:5e:6e:e7:97:15:ec:98:f0: 8c:e9:8d:35:cc:2b:2b:f7:29:c0:48:be:1b:44:46: 74:66:15:a1:c5:5b:9c:e3:48:e5:d2:f7:9f:d7:ba: 34:43:f7:46:00:01:fe:8c:93:1f:7f:05:3f:ff:01: a8:e4:19:69:7b:c9:66:5d:ad:5f:92:7f:51:2b:9d: 26:30:2d:84:39:33:65:fa:31:fc:78:43:73:ee:ca: dc:50:49:1c:f9:20:38:a2:78:24:be:01:3b:fa:ce: d4:47:db:15:94:f3:ad:c2:77:9b:ee:ee:5d:ea:b9: 7d:3b:14:47:5c:0c:d1:03:fb:59:17:22:ba:a2:08: 19:87:93:59:da:ef:ea:0a:87:13:07:cb:dd:e6:f0: 3e:35:50:4b:0a:65:ef:2a:98:d5:d9:b1:a6:70:50: 27:e1:86:cb:6f:54:48:ae:05:fd:5f:b9:b7:80:c9: 2a:e0:8d:35:82:96:0a:61:51:5f:a2:a9:69:78:a6: b7:60:f9:6b:b2:d0:35:fb:cb:6e:78:ea:86:f0:49: d2:4a:57:a9:3d:98:62:41:c1:fe:26:8b:33:aa:37: c3:3f:90:b1:bc:ae:ba:2f:94:70:86:a8:e2:a8:7b: ad:de:78:e7:57:a6:d3:d4:c7:5d:e2:06:a5:c5:14: 02:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:39:B8:8A:5C:ED:12:A0:3B:5E:87:53:C2:F3:AA:F0:44:CE:B6:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b0:ba:2c:12:21:7f:bf:75:88:e2:48:3c:e8:f4:ca:d7:93: b2:4c:82:9f:5a:64:66:38:e0:6e:56:f4:35:b4:5f:5c:02:e4: d1:2d:ca:21:a2:e0:1c:8a:54:38:fd:9e:35:a0:e5:c2:92:f7: f5:6a:f5:72:d3:a8:5c:af:14:ef:8b:51:c6:2a:06:a4:6c:2f: 5d:d3:75:7b:93:8e:ab:26:0f:83:ae:2a:1d:d2:ea:1a:2b:23: 0a:37:4d:42:f9:b5:45:d2:0b:de:e5:74:ed:dd:8a:72:1a:14: ea:93:68:67:d2:f5:87:a9:bc:33:d5:68:c0:68:7b:e1:31:3c: 60:1b:31:b1:19:a7:c2:c8:c5:cf:12:48:7f:de:99:c6:39:95: 3b:43:98:84:94:15:0b:c6:5a:0c:04:99:ac:0f:a0:66:e1:7e: a8:d7:08:05:a6:d2:fd:97:16:23:09:7c:5b:da:af:38:53:3a: aa:9d:e2:5a:71:78:76:fe:db:43:ae:88:30:16:8f:10:7a:4d: 91:67:8a:18:f0:f3:88:1b:39:7f:17:5b:85:d4:e5:0b:9e:ea: 48:31:38:76:69:56:07:a0:6e:0a:1e:e9:b8:88:00:bf:fc:ae: 27:71:96:7b:e7:42:e9:14:71:2a:91:77:31:a6:4a:a7:3d:f2: f5:a2:80:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bli9XK7N6hlEFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk M2QzOGJjODctYmFhZi00MzY5LWJlM2MtNjdkNWM4MGI1YjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2iYicb3Xm7nlxXsmPCM6Y01zCsr9ynASL4b REZ0ZhWhxVuc40jl0vef17o0Q/dGAAH+jJMffwU//wGo5Blpe8lmXa1fkn9RK50m MC2EOTNl+jH8eENz7srcUEkc+SA4ongkvgE7+s7UR9sVlPOtwneb7u5d6rl9OxRH XAzRA/tZFyK6oggZh5NZ2u/qCocTB8vd5vA+NVBLCmXvKpjV2bGmcFAn4YbLb1RI rgX9X7m3gMkq4I01gpYKYVFfoqlpeKa3YPlrstA1+8tueOqG8EnSSlepPZhiQcH+ JoszqjfDP5CxvK66L5RwhqjiqHut3njnV6bT1Mdd4galxRQCZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLE5uIpc7RKgO16HU8LzqvBEzraQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRmMDI1NmQtZjRjOC0z YzExLTgxZjgtYTJkYTY2NjAxMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqwuiwSIX+/dYjiSDzo9MrXk7JMgp9aZGY44G5W9DW0X1wC5NEt yiGi4ByKVDj9njWg5cKS9/Vq9XLTqFyvFO+LUcYqBqRsL13TdXuTjqsmD4OuKh3S 6horIwo3TUL5tUXSC97ldO3dinIaFOqTaGfS9YepvDPVaMBoe+ExPGAbMbEZp8LI xc8SSH/emcY5lTtDmISUFQvGWgwEmawPoGbhfqjXCAWm0v2XFiMJfFvarzhTOqqd 4lpxeHb+20OuiDAWjxB6TZFnihjw84gbOX8XW4XU5Que6kgxOHZpVgegbgoe6biI AL/8ridxlnvnQukUcSqRdzGmSqc98vWigCc= -----END CERTIFICATE-----Generated at Wed Oct 29 09:04:51 2025 by rpki-client