$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa File: 0a111577-ad49-3c3d-994c-2cb29a1212b8.roa (raw, json) Hash identifier: Dgn5t68U8NriWmAt9k8CfA+X2sf/JOD2LxbdOOrAZ4s= Subject key identifier: 3B:62:3D:74:DF:A1:68:02:DA:0D:FC:82:1A:82:88:AE:C3:46:9C:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987246D7EF61A94D1DBFA740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 397196 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:46:d7:ef:61:a9:4d:1d:bf:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=3a0f21b0-0529-48b7-b718-03b61d78e3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:b5:52:7b:8e:bb:e8:7a:2c:8a:d3:6d:fd: ff:11:b9:76:c2:03:53:77:9c:5c:46:1a:8e:53:34: 69:78:64:04:83:25:63:a9:77:14:ab:04:58:4e:65: 49:d2:1d:d8:20:8b:40:13:b3:c0:4b:4a:b2:09:91: 5e:be:9b:36:64:ba:37:68:84:4a:98:7b:b4:e6:9b: 8d:8f:01:ea:74:30:68:e1:7a:95:ea:d3:f5:64:6a: 01:01:4e:4e:64:0a:ac:b7:03:c7:92:bf:7f:81:61: d4:0d:32:f6:09:b4:ad:76:4e:3f:b7:01:04:2a:6c: a1:7e:2d:ea:f0:42:8c:a5:d2:e9:64:8e:5c:4e:25: 3c:52:21:70:15:72:30:11:3a:f4:76:43:fe:39:df: 0f:81:a4:0c:6c:27:62:ae:8f:6f:c0:b9:48:07:fe: b8:e4:4b:8b:78:b0:c0:cc:d5:51:d8:13:99:ae:c7: b9:68:8b:95:5f:4f:6c:b4:55:23:43:8c:6b:fc:07: ca:51:05:aa:3a:12:75:b7:6d:1c:c3:5f:ed:5f:36: 7b:8a:4c:dd:b1:28:6f:93:0e:83:92:87:0e:92:fe: 9c:4d:96:66:0e:4f:df:67:28:24:a4:ea:9f:f1:5c: 46:f9:68:f4:e3:74:a9:17:87:4a:42:6f:62:17:46: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:62:3D:74:DF:A1:68:02:DA:0D:FC:82:1A:82:88:AE:C3:46:9C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3c:1f:df:a2:f9:ea:af:fc:4c:11:7b:57:02:97:7a:4e:09: be:9c:bc:34:c5:0d:b8:d7:a6:ee:4b:07:a5:48:cb:ba:ee:6d: 11:ed:d3:21:98:93:74:80:39:30:db:cf:a7:f4:ec:5c:9f:4a: 11:cb:ce:6d:ba:f3:9d:c1:ae:9e:28:fd:68:a0:78:89:49:89: ae:9f:7b:a7:84:ab:1a:f7:c7:de:fd:a1:97:0c:d1:38:5f:be: d0:67:f0:9f:ef:83:6a:43:2b:c4:f2:64:30:2b:81:a7:d1:12: 7b:86:29:f2:e4:44:f7:46:9d:43:0d:65:e7:fd:ba:e6:a3:e0: be:21:43:5e:9b:23:a3:84:1b:59:60:60:6b:5a:ce:f5:a2:be: 9b:da:60:24:4d:a9:7f:f6:c4:25:97:b8:fa:76:83:1b:5e:59: 81:cf:71:6f:aa:27:cb:c7:0e:45:9f:1c:19:22:5d:68:57:7b: ca:55:eb:ac:8d:85:5a:8f:91:86:98:21:a6:32:66:45:1c:20: 9b:d3:9a:ff:6d:92:5a:c7:79:48:5a:c2:3e:5d:b9:cd:46:ad: 1d:1b:9e:7b:14:4f:21:f6:f0:d4:4f:3d:b2:5c:e9:1e:ef:e7: 43:8e:61:5d:fb:85:3b:77:01:4f:a1:51:7d:27:85:4c:b3:88: 93:30:d8:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckbX72GpTR2/p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk M2EwZjIxYjAtMDUyOS00OGI3LWI3MTgtMDNiNjFkNzhlM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCm1UnuOu+h6LIrTbf3/Ebl2wgNTd5xcRhqO UzRpeGQEgyVjqXcUqwRYTmVJ0h3YIItAE7PAS0qyCZFevps2ZLo3aIRKmHu05puN jwHqdDBo4XqV6tP1ZGoBAU5OZAqstwPHkr9/gWHUDTL2CbStdk4/twEEKmyhfi3q 8EKMpdLpZI5cTiU8UiFwFXIwETr0dkP+Od8PgaQMbCdiro9vwLlIB/645EuLeLDA zNVR2BOZrse5aIuVX09stFUjQ4xr/AfKUQWqOhJ1t20cw1/tXzZ7ikzdsShvkw6D kocOkv6cTZZmDk/fZygkpOqf8VxG+Wj043SpF4dKQm9iF0YJoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtiPXTfoWgC2g38ghqCiK7DRpwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGExMTE1NzctYWQ0OS0z YzNkLTk5NGMtMmNiMjlhMTIxMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFc8H9+i+eqv/EwRe1cCl3pOCb6cvDTFDbjXpu5LB6VIy7rubRHt 0yGYk3SAOTDbz6f07FyfShHLzm26853Brp4o/WigeIlJia6fe6eEqxr3x979oZcM 0ThfvtBn8J/vg2pDK8TyZDArgafREnuGKfLkRPdGnUMNZef9uuaj4L4hQ16bI6OE G1lgYGtazvWivpvaYCRNqX/2xCWXuPp2gxteWYHPcW+qJ8vHDkWfHBkiXWhXe8pV 66yNhVqPkYaYIaYyZkUcIJvTmv9tklrHeUhawj5duc1GrR0bnnsUTyH28NRPPbJc 6R7v50OOYV37hTt3AU+hUX0nhUyziJMw2J0= -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:48 2025 by rpki-client