$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f010c1e-9ac6-3117-a043-237edc35c79d.roa File: 0f010c1e-9ac6-3117-a043-237edc35c79d.roa (raw, json) Hash identifier: 3OelMeoPvFAPYinjyplIhzp1QgNMmiFCnf/+CJxnI3w= Subject key identifier: 26:40:D2:4D:9D:56:94:52:20:D9:E4:88:76:6B:3D:C6:17:C5:06:45 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724BA794A69179989118C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f010c1e-9ac6-3117-a043-237edc35c79d.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 19836 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4b:a7:94:a6:91:79:98:91:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=213ec99c-44c6-4aa2-badb-cea608f613e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:52:77:d8:c3:6c:bb:6e:bc:aa:aa:cc:32: 75:95:14:ff:1d:ee:cb:72:5a:f1:65:c2:1f:91:93: de:a8:b1:2c:7d:5a:14:7d:cc:f4:e0:ce:f6:32:c1: 4e:f8:ff:b4:f0:9c:72:3a:14:e4:c2:27:44:0f:f1: db:d2:c6:f4:0b:09:e9:a6:5b:05:a0:3f:56:ad:ea: 0c:4f:b6:03:30:69:dc:33:ad:c2:ba:a3:75:58:d6: b1:c6:96:db:65:ea:04:f3:17:d5:0c:f1:cd:d5:35: a7:0a:7f:ee:f3:5c:1f:4b:0d:d5:f5:5d:94:05:0f: a7:7a:9d:27:5b:35:f6:7a:f7:cc:01:7f:c3:21:aa: 77:4c:b5:c5:1b:96:f7:e7:a5:c0:18:fe:fe:67:90: 11:72:5b:20:af:df:bd:cc:6b:57:0e:e4:7c:8c:d2: e5:ba:5e:8b:e7:ef:c1:52:bb:7d:59:b8:9a:58:13: 4b:2e:aa:d8:5c:22:38:b0:7c:60:2e:fc:8b:27:0e: 66:c6:dd:4b:da:f0:a6:60:74:a6:ce:a9:ff:e4:77: ff:9d:c5:6f:12:ae:92:7f:3a:71:bd:5c:43:e5:eb: dc:2e:e4:8e:bd:48:a2:e0:7e:1e:ee:0d:2f:de:53: 32:4c:69:12:dc:25:d7:94:27:39:77:b2:ea:e5:db: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:40:D2:4D:9D:56:94:52:20:D9:E4:88:76:6B:3D:C6:17:C5:06:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f010c1e-9ac6-3117-a043-237edc35c79d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c5:2c:db:d7:6f:08:27:15:00:a2:09:2f:8a:0e:10:1a:08: 33:a2:f3:b6:e8:c4:93:a0:0a:18:05:fa:8b:9f:dd:cb:d6:46: 5f:66:73:b4:d8:fd:b7:54:db:af:31:6c:bd:f0:7e:08:9a:f9: ba:c3:9d:85:4e:a4:3e:8f:3f:77:2c:f1:90:01:7b:3a:ab:97: 97:35:12:9b:94:9e:9c:e1:30:ec:4b:fe:bb:2f:26:54:42:75: 02:d0:5f:1e:21:d1:1e:59:c2:b5:e5:1e:73:fb:21:b8:0a:e8: 13:fd:c2:f2:87:d7:7a:f7:ff:18:47:91:be:81:b1:aa:07:c8: 15:72:ac:88:1b:5a:66:c7:3a:ab:31:c1:4b:66:1a:eb:51:f2: 89:27:b4:aa:da:d9:e4:7b:05:73:c9:fb:a8:d2:49:87:a7:99: 3a:a9:60:0c:7c:59:51:19:f5:39:ed:93:3e:31:0a:7e:8d:ad: e6:62:ab:9d:36:fe:dd:91:57:3b:61:f7:5a:90:ef:83:14:d6: 69:31:5c:f5:cc:04:b5:c4:14:3a:f4:41:20:f4:50:bd:3f:d8: e0:19:eb:fb:db:f6:af:bd:fe:b5:6d:9c:29:10:f8:a3:3f:74: 50:52:4d:54:10:53:b2:96:d1:8d:15:e4:d2:63:6b:34:aa:cf: a1:57:14:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckunlKaReZiRGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MjEzZWM5OWMtNDRjNi00YWEyLWJhZGItY2VhNjA4ZjYxM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+JSd9jDbLtuvKqqzDJ1lRT/He7LclrxZcIf kZPeqLEsfVoUfcz04M72MsFO+P+08JxyOhTkwidED/Hb0sb0CwnpplsFoD9WreoM T7YDMGncM63CuqN1WNaxxpbbZeoE8xfVDPHN1TWnCn/u81wfSw3V9V2UBQ+nep0n WzX2evfMAX/DIap3TLXFG5b356XAGP7+Z5ARclsgr9+9zGtXDuR8jNLlul6L5+/B Urt9WbiaWBNLLqrYXCI4sHxgLvyLJw5mxt1L2vCmYHSmzqn/5Hf/ncVvEq6Sfzpx vVxD5evcLuSOvUii4H4e7g0v3lMyTGkS3CXXlCc5d7Lq5duvCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCZA0k2dVpRSINnkiHZrPcYXxQZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGYwMTBjMWUtOWFjNi0z MTE3LWEwNDMtMjM3ZWRjMzVjNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3FLNvXbwgnFQCiCS+KDhAaCDOi87boxJOgChgF+ouf3cvWRl9m c7TY/bdU268xbL3wfgia+brDnYVOpD6PP3cs8ZABezqrl5c1EpuUnpzhMOxL/rsv JlRCdQLQXx4h0R5ZwrXlHnP7IbgK6BP9wvKH13r3/xhHkb6BsaoHyBVyrIgbWmbH OqsxwUtmGutR8okntKra2eR7BXPJ+6jSSYenmTqpYAx8WVEZ9Tntkz4xCn6NreZi q502/t2RVzth91qQ74MU1mkxXPXMBLXEFDr0QSD0UL0/2OAZ6/vb9q+9/rVtnCkQ +KM/dFBSTVQQU7KW0Y0V5NJjazSqz6FXFCc= -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:45 2025 by rpki-client