$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa File: 0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa (raw, json) Hash identifier: kNU6IS0wuSjJgpT7xPlu/tVeMTCujWyKp+zMN3JaOXI= Subject key identifier: F8:35:C9:04:92:A1:F9:AA:4F:DE:69:57:C2:47:33:0C:CA:BA:7B:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723693849E31D8B42417C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396585 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:36:93:84:9e:31:d8:b4:24:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=cab7dbe7-8e73-46c0-8b85-ce3382cf5ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:fb:67:56:2d:84:ec:e2:46:31:c0:c7:6b: a3:6a:8c:c4:01:f8:2f:1b:35:ad:f1:79:93:43:9b: c7:99:8e:a5:e9:d3:b7:e5:51:69:b2:5b:90:e2:2b: cc:5d:bf:77:22:3a:98:4d:73:bd:9b:76:e0:96:20: 48:43:dc:6c:6e:25:5b:38:f6:bd:18:ab:1d:69:a6: 50:5d:cf:27:ec:79:5f:d2:74:04:83:0e:6e:a1:42: b3:07:44:e6:ae:36:12:11:25:4f:ce:e2:8d:c2:da: a9:25:75:55:2a:3a:ab:85:86:db:6c:dd:91:4c:89: 7c:59:40:c5:07:5e:f6:39:07:60:0b:15:e7:fa:4c: f7:6a:8a:71:c5:c9:12:dd:ae:5f:59:9f:4d:bf:8f: 30:02:ba:ba:36:89:df:22:a8:c4:63:59:b0:4b:06: d1:62:48:58:ce:85:db:26:43:a4:52:87:fd:3d:a0: 65:1d:9d:f0:2d:9a:9f:31:6a:1b:54:82:3d:4b:55: e0:de:1c:b4:91:9e:a4:90:40:d0:8c:64:1c:12:e1: 34:ad:74:7f:82:31:b7:de:48:ec:bd:ad:87:20:34: 68:a4:86:b7:28:af:04:d4:c9:12:5d:46:ac:96:f2: 7d:d2:4e:b7:49:39:94:36:dc:46:ea:14:ce:e4:13: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:35:C9:04:92:A1:F9:AA:4F:DE:69:57:C2:47:33:0C:CA:BA:7B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b6:89:7c:df:5c:a0:9e:11:f1:84:c9:f3:de:52:b5:e3:a7: 4f:ce:0a:09:22:ef:65:85:b1:df:a9:b6:17:ba:4e:54:1b:00: 5c:92:21:f7:f4:e4:53:2f:8d:52:61:04:41:36:15:13:43:a2: 19:c4:79:cd:40:78:33:a3:76:bc:07:42:de:4b:f5:6d:47:22: d1:3a:96:c2:7a:81:ce:c1:44:a8:04:c0:b2:d0:69:d5:be:4d: 4d:be:93:41:92:33:c1:2f:63:a0:50:aa:c7:f6:59:d2:50:f1: 55:2a:ae:99:3b:3d:1c:07:24:79:b4:83:e7:17:68:19:cb:52: b7:4b:0b:7d:47:4b:48:55:41:c7:85:3e:b3:7a:c9:ed:50:14: 31:75:2a:c2:5c:d4:70:8a:80:6b:4a:98:ec:58:2a:16:59:4d: df:46:d6:6d:14:b6:49:05:59:64:59:cf:24:c1:12:27:d2:c7: a5:37:09:4e:ba:63:d3:0b:61:91:fe:1c:28:c8:8a:2d:ef:c3: 4b:c5:fa:bf:11:a6:53:3e:57:15:e8:fb:26:07:e8:92:f8:0c: 9f:c9:9e:a9:b5:87:3a:be:80:f6:bf:9f:71:5b:34:1c:ab:07: 0a:3d:90:84:49:54:38:76:57:3d:50:13:8d:27:7c:e2:7c:86: c6:88:5d:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjaThJ4x2LQkF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk Y2FiN2RiZTctOGU3My00NmMwLThiODUtY2UzMzgyY2Y1ZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB77Z1YthOziRjHAx2ujaozEAfgvGzWt8XmT Q5vHmY6l6dO35VFpsluQ4ivMXb93IjqYTXO9m3bgliBIQ9xsbiVbOPa9GKsdaaZQ Xc8n7Hlf0nQEgw5uoUKzB0TmrjYSESVPzuKNwtqpJXVVKjqrhYbbbN2RTIl8WUDF B172OQdgCxXn+kz3aopxxckS3a5fWZ9Nv48wArq6NonfIqjEY1mwSwbRYkhYzoXb JkOkUof9PaBlHZ3wLZqfMWobVII9S1Xg3hy0kZ6kkEDQjGQcEuE0rXR/gjG33kjs va2HIDRopIa3KK8E1MkSXUaslvJ90k63STmUNtxG6hTO5BPG1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPg1yQSSofmqT95pV8JHMwzKunugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI3ZGVlODctNjJkYi0z YzljLWIxMWUtYWZkM2E0N2QzZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIm2iXzfXKCeEfGEyfPeUrXjp0/OCgki72WFsd+pthe6TlQbAFyS Iff05FMvjVJhBEE2FRNDohnEec1AeDOjdrwHQt5L9W1HItE6lsJ6gc7BRKgEwLLQ adW+TU2+k0GSM8EvY6BQqsf2WdJQ8VUqrpk7PRwHJHm0g+cXaBnLUrdLC31HS0hV QceFPrN6ye1QFDF1KsJc1HCKgGtKmOxYKhZZTd9G1m0UtkkFWWRZzyTBEifSx6U3 CU66Y9MLYZH+HCjIii3vw0vF+r8RplM+VxXo+yYH6JL4DJ/Jnqm1hzq+gPa/n3Fb NByrBwo9kIRJVDh2Vz1QE40nfOJ8hsaIXcg= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:25 2025 by rpki-client