$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e7c84a9-8b99-3e0e-9dd9-5e2836a46e16.roa File: 0e7c84a9-8b99-3e0e-9dd9-5e2836a46e16.roa (raw, json) Hash identifier: E/uhAoOsKidd23nPhsXooCEDaRq+qcsYV7nsleoJr9A= Subject key identifier: 1D:DF:B7:7B:D8:C0:D2:12:33:2C:96:AC:7D:EB:9B:35:E5:D4:25:66 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526CF9A1B1B425BD150500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e7c84a9-8b99-3e0e-9dd9-5e2836a46e16.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396587 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6c:f9:a1:b1:b4:25:bd:15:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6fac7586-707a-4f55-8936-cb4a81fc1dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4c:8c:d2:00:e2:35:26:6c:06:88:e2:5f:d4: d5:39:87:1b:d9:cf:b0:e8:93:bc:d3:d2:b6:b3:42: 44:b9:18:dd:15:31:b9:98:ae:c7:a8:e7:8a:cb:3e: 5c:11:03:24:0e:74:10:2f:39:16:b5:ba:a3:72:0a: cb:0d:36:3a:d1:17:6e:05:e5:7b:d4:30:e8:b2:2c: ab:71:dc:e4:2d:f8:ef:bf:e5:21:26:f6:85:d9:a6: c3:0b:45:5b:85:eb:0b:4f:31:54:31:f9:df:fc:8d: 82:cc:72:27:fa:0c:0a:32:41:6e:75:c3:cf:86:f2: 64:da:9e:e0:83:64:a9:aa:f2:e7:63:38:ff:34:55: f2:bb:cc:16:1f:f6:46:25:03:4a:21:ae:48:35:55: 86:f9:50:0f:99:d8:05:b9:fd:90:a3:32:93:df:01: 1e:77:0f:16:d0:74:f6:39:53:2f:e8:a4:b0:e9:40: 48:f5:93:87:cc:92:50:4c:5d:c7:fa:5c:83:80:8c: 5b:0f:4a:d3:62:ac:7a:24:26:3e:6c:0c:a9:67:21: 4e:5e:18:4f:03:57:c5:1c:58:85:1c:ef:a2:f0:92: eb:8a:f4:4e:ab:47:2b:f0:76:c4:5f:47:82:d2:ba: d3:5b:b7:c9:76:3c:e7:f2:73:6d:e6:d7:8d:6f:6e: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:B7:7B:D8:C0:D2:12:33:2C:96:AC:7D:EB:9B:35:E5:D4:25:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e7c84a9-8b99-3e0e-9dd9-5e2836a46e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b8:17:95:7d:97:47:4b:46:ba:90:6f:6f:69:60:45:b2:06: 3c:6a:c8:97:ad:9f:1f:0f:f5:5d:bc:7a:36:db:85:71:4c:9c: 3e:5b:98:7a:bd:39:20:a9:1e:4f:6a:09:67:85:0e:45:53:a8: e8:fa:6a:42:74:9e:81:de:d7:5a:9a:8a:e8:db:0b:37:3b:79: d4:41:e4:80:d6:16:94:d0:1f:52:2b:16:bf:58:f1:ae:60:66: 05:f6:1e:28:f3:ef:e7:31:db:18:76:6d:f9:2a:4b:99:86:89: 10:75:b8:e6:f3:13:4f:34:ae:30:6c:34:ce:13:bd:1f:e5:e6: 90:20:d3:56:3e:c5:54:fe:8f:26:52:64:36:97:1f:bd:9f:fd: c4:45:17:5d:c1:2f:b1:5e:28:52:bb:e1:6d:cc:13:00:d4:8f: 14:d1:9a:dd:ff:42:84:d3:3f:8b:8e:94:ba:69:4d:39:2f:a7: 5e:91:36:70:19:e9:9b:ba:3a:f0:ac:d7:3b:15:c6:57:44:3e: 03:2e:d1:af:d8:49:01:0b:84:e7:c0:7a:10:aa:54:8e:8c:dc: d4:25:b7:fc:09:52:ee:cd:2d:cd:e8:66:d8:d2:70:5b:81:9a: 3c:d9:b2:86:ca:0b:39:e4:65:5c:02:7a:a0:b7:a6:f2:3b:c7: f2:58:63:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Umz5obG0Jb0VBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NmZhYzc1ODYtNzA3YS00ZjU1LTg5MzYtY2I0YTgxZmMxZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUyM0gDiNSZsBojiX9TVOYcb2c+w6JO809K2 s0JEuRjdFTG5mK7HqOeKyz5cEQMkDnQQLzkWtbqjcgrLDTY60RduBeV71DDosiyr cdzkLfjvv+UhJvaF2abDC0VbhesLTzFUMfnf/I2CzHIn+gwKMkFudcPPhvJk2p7g g2SpqvLnYzj/NFXyu8wWH/ZGJQNKIa5INVWG+VAPmdgFuf2QozKT3wEedw8W0HT2 OVMv6KSw6UBI9ZOHzJJQTF3H+lyDgIxbD0rTYqx6JCY+bAypZyFOXhhPA1fFHFiF HO+i8JLrivROq0cr8HbEX0eC0rrTW7fJdjzn8nNt5teNb24TgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB3ft3vYwNISMyyWrH3rmzXl1CVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGU3Yzg0YTktOGI5OS0z ZTBlLTlkZDktNWUyODM2YTQ2ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALa4F5V9l0dLRrqQb29pYEWyBjxqyJetnx8P9V28ejbbhXFMnD5b mHq9OSCpHk9qCWeFDkVTqOj6akJ0noHe11qaiujbCzc7edRB5IDWFpTQH1IrFr9Y 8a5gZgX2Hijz7+cx2xh2bfkqS5mGiRB1uObzE080rjBsNM4TvR/l5pAg01Y+xVT+ jyZSZDaXH72f/cRFF13BL7FeKFK74W3MEwDUjxTRmt3/QoTTP4uOlLppTTkvp16R NnAZ6Zu6OvCs1zsVxldEPgMu0a/YSQELhOfAehCqVI6M3NQlt/wJUu7NLc3oZtjS cFuBmjzZsobKCznkZVwCeqC3pvI7x/JYYxs= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:11 2025 by rpki-client