$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c1720e2-8c84-3d33-8c4b-11ae0c679329.roa File: 0c1720e2-8c84-3d33-8c4b-11ae0c679329.roa (raw, json) Hash identifier: OCTyPeC7xH0lW4ROW0Fzuceqkmx6lRLXguXGd7x9SfU= Subject key identifier: B1:6D:51:04:7A:53:61:CA:74:EF:8A:0A:6C:72:F4:5F:6B:2F:A0:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723E9F7E2740D389718580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c1720e2-8c84-3d33-8c4b-11ae0c679329.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 397194 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3e:9f:7e:27:40:d3:89:71:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=9c17b6fe-fc9a-45d2-9865-c5056220bf14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fe:05:4c:01:34:f4:f9:ff:38:1f:34:91:6c: ab:0d:d4:38:27:ee:c2:9d:9b:4d:5a:90:0c:38:3e: 8d:a1:b2:66:8b:c0:4a:ea:4a:a2:e2:87:27:03:e3: 38:c1:b1:5f:00:fe:29:69:01:84:69:0e:b9:92:92: 25:fd:f4:2a:84:b7:24:48:d4:9d:97:63:aa:54:74: a9:c8:ac:f3:db:b0:88:5a:30:82:ba:79:1a:f7:6e: 98:c4:87:aa:b7:ee:11:b2:22:53:a5:7b:13:7e:6c: 1c:60:29:ab:30:7a:5f:0a:14:c6:39:22:65:5e:68: a2:12:cf:f8:26:26:b2:ff:d5:27:d5:c0:63:4b:2c: 62:2c:2c:73:eb:61:ca:84:7f:22:51:73:9d:99:f3: b3:83:91:75:2b:93:46:79:1d:0a:41:24:1a:47:ca: 96:6b:a8:72:76:90:a0:45:59:09:fb:9c:9f:a5:9c: 5f:18:c3:a0:a2:8d:fd:bd:17:50:d9:8a:ba:66:a2: 0c:28:84:19:c2:28:74:5a:45:a5:be:5e:c5:f8:7d: af:83:5e:88:ed:29:a8:db:dc:ef:5a:50:b6:5c:51: 8d:67:12:b2:b5:6a:9a:aa:06:3a:31:f6:12:b6:69: 27:d9:e9:1c:02:13:de:b8:7a:94:ca:0f:9b:e7:c1: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6D:51:04:7A:53:61:CA:74:EF:8A:0A:6C:72:F4:5F:6B:2F:A0:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c1720e2-8c84-3d33-8c4b-11ae0c679329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3c:35:b3:32:20:3f:d7:78:7b:6b:cf:a9:53:51:8f:72:f2: 04:c3:f7:4d:aa:cf:b4:ed:cf:b1:70:28:a8:b4:14:f4:86:4e: d5:0d:0b:81:14:7d:8e:c8:3d:18:a4:43:ee:82:32:4f:df:fb: 8a:3a:60:e4:52:21:06:1f:09:c7:c1:5a:74:8c:69:e3:89:d7: ce:13:fb:1d:76:70:31:16:a1:25:99:3b:f1:70:83:ca:5a:0c: 1b:d3:92:ef:d8:62:84:7d:96:21:08:da:87:35:2a:ea:5f:88: 0a:e3:03:7a:82:28:e5:d1:0d:a8:8f:37:26:88:0f:27:56:df: e2:06:b2:87:9d:75:63:2f:9e:3b:21:11:76:f6:4b:64:5f:10: b9:65:b6:1a:2f:10:a5:4e:42:20:58:59:0e:d2:2c:8e:fe:ec: be:7e:a3:d8:d8:82:82:98:0c:22:ca:fc:84:8d:45:27:52:02: 1f:8f:85:9e:bd:9d:d1:4e:c1:02:06:1e:34:b8:a0:ed:64:8c: 59:de:66:77:f4:6e:73:da:4f:4a:98:e8:f9:f8:43:41:7a:4e: bc:11:17:e2:fe:6a:80:20:45:96:2e:aa:71:21:6e:ed:05:43: c1:86:dd:c0:19:6e:0a:d2:ba:25:f8:78:68:a5:96:af:ec:e3: e7:23:6b:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcj6ffidA04lxhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OWMxN2I2ZmUtZmM5YS00NWQyLTk4NjUtYzUwNTYyMjBiZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/4FTAE09Pn/OB80kWyrDdQ4J+7CnZtNWpAM OD6NobJmi8BK6kqi4ocnA+M4wbFfAP4paQGEaQ65kpIl/fQqhLckSNSdl2OqVHSp yKzz27CIWjCCunka926YxIeqt+4RsiJTpXsTfmwcYCmrMHpfChTGOSJlXmiiEs/4 Jiay/9Un1cBjSyxiLCxz62HKhH8iUXOdmfOzg5F1K5NGeR0KQSQaR8qWa6hydpCg RVkJ+5yfpZxfGMOgoo39vRdQ2Yq6ZqIMKIQZwih0WkWlvl7F+H2vg16I7Smo29zv WlC2XFGNZxKytWqaqgY6MfYStmkn2ekcAhPeuHqUyg+b58F91wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLFtUQR6U2HKdO+KCmxy9F9rL6AYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGMxNzIwZTItOGM4NC0z ZDMzLThjNGItMTFhZTBjNjc5MzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAU8NbMyID/XeHtrz6lTUY9y8gTD902qz7Ttz7FwKKi0FPSGTtUN C4EUfY7IPRikQ+6CMk/f+4o6YORSIQYfCcfBWnSMaeOJ184T+x12cDEWoSWZO/Fw g8paDBvTku/YYoR9liEI2oc1KupfiArjA3qCKOXRDaiPNyaIDydW3+IGsoeddWMv njshEXb2S2RfELllthovEKVOQiBYWQ7SLI7+7L5+o9jYgoKYDCLK/ISNRSdSAh+P hZ69ndFOwQIGHjS4oO1kjFneZnf0bnPaT0qY6Pn4Q0F6TrwRF+L+aoAgRZYuqnEh bu0FQ8GG3cAZbgrSuiX4eGillq/s4+cja7A= -----END CERTIFICATE-----Generated at Wed Oct 29 07:16:08 2025 by rpki-client