$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f9f886a-0319-32c9-a623-ac4d5cd465c5.roa File: 0f9f886a-0319-32c9-a623-ac4d5cd465c5.roa (raw, json) Hash identifier: GLRBLO1uYj2O0Mi1o7ULBPBpfYBNaS4VR90z1IZdESY= Subject key identifier: F3:91:12:8E:A0:CD:F6:93:AE:98:74:A8:6F:AB:99:AE:6C:48:A2:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA22D23FDC87267D5170B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f9f886a-0319-32c9-a623-ac4d5cd465c5.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 397205 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2d:23:fd:c8:72:67:d5:17:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=d8bbf7ff-c6cc-4a88-ad84-b01b0eecc3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:06:ec:23:61:ed:6b:58:a3:0d:04:af:46: f0:18:ce:b6:6e:b3:52:ff:25:d1:f9:db:c6:d7:48: 61:f0:27:37:92:bc:ba:d0:b6:d7:6a:9b:b5:48:8f: d8:6b:6a:23:bb:a6:d8:dc:1c:79:26:24:a6:cb:63: a4:6e:ed:03:9f:04:bb:2b:c8:3f:e3:1f:ce:4f:bd: 65:8e:45:b2:59:dc:16:17:bf:d3:18:76:1f:b4:b3: cb:b5:56:68:a2:bf:d2:da:02:33:8b:9a:50:9d:7f: cb:23:4e:2f:6d:a9:2d:09:db:04:52:4e:2d:d7:21: 3d:38:11:92:b2:73:35:9c:33:5b:a7:04:a6:96:7f: 40:51:48:97:43:f3:5a:6f:cf:e4:f8:63:f8:6e:88: 40:69:c1:8d:dc:0a:41:e5:7b:03:80:65:a9:a8:8a: ac:ea:5b:2a:9c:e6:8b:1f:3d:1f:33:9f:dd:c0:bc: 92:a8:49:51:0b:84:10:60:f0:24:3d:51:5b:71:db: b6:55:a9:27:85:73:23:4d:72:fb:69:5d:3c:11:29: a7:ba:59:23:97:b7:50:18:41:67:5d:f2:a4:45:26: 42:eb:3c:03:51:90:87:9e:a6:ef:7c:c5:2c:50:fa: d5:6d:44:3a:98:d2:61:5a:47:6f:d1:0d:35:20:b0: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:91:12:8E:A0:CD:F6:93:AE:98:74:A8:6F:AB:99:AE:6C:48:A2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f9f886a-0319-32c9-a623-ac4d5cd465c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:77:cc:37:ac:87:b0:d2:13:bf:5b:c0:3e:cf:8f:cb:62:4e: 17:28:2a:96:02:d8:47:dc:c6:9f:3b:4a:14:0f:2a:73:e3:84: ad:ef:ac:29:dc:37:f9:be:c0:de:d2:68:11:c8:1a:3d:54:71: e2:02:4f:02:78:36:fe:0a:e0:78:58:73:3b:92:4b:8b:59:38: 7c:7d:a0:12:0e:44:28:d2:29:39:84:5b:43:15:89:c9:23:ae: 1e:55:4f:2e:b7:7b:84:fc:c6:25:33:c3:e4:29:06:a3:5f:c0: 79:ec:c6:6e:59:ed:cf:62:fd:5b:ac:38:dd:72:d7:cd:dd:74: 73:3c:b4:43:95:6f:99:64:e7:8c:a6:3f:a1:e4:aa:c0:d8:c1: af:30:4d:02:b8:7b:9b:bf:0c:29:a7:ff:17:11:15:ef:90:7c: 20:33:39:7f:75:10:fb:d6:0c:b3:21:8c:84:b0:8c:91:1b:3f: d3:83:d2:79:93:1c:a1:dc:d2:22:92:97:ac:4d:e2:aa:ee:c6: cb:af:c0:87:13:27:6a:47:69:ef:b9:5d:06:fd:e7:88:b6:d5: a9:b0:87:83:a7:ec:ca:e8:e0:dc:29:3a:0c:ae:4d:84:81:73: 92:0a:73:f6:38:f9:21:68:ac:f1:c6:70:e5:3e:c3:12:73:4a: 20:f2:43:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoi0j/chyZ9UXC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDhiYmY3ZmYtYzZjYy00YTg4LWFkODQtYjAxYjBlZWNjM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp4G7CNh7WtYow0Er0bwGM62brNS/yXR+dvG 10hh8Cc3kry60LbXapu1SI/Ya2oju6bY3Bx5JiSmy2Okbu0DnwS7K8g/4x/OT71l jkWyWdwWF7/TGHYftLPLtVZoor/S2gIzi5pQnX/LI04vbaktCdsEUk4t1yE9OBGS snM1nDNbpwSmln9AUUiXQ/Nab8/k+GP4bohAacGN3ApB5XsDgGWpqIqs6lsqnOaL Hz0fM5/dwLySqElRC4QQYPAkPVFbcdu2VaknhXMjTXL7aV08ESmnulkjl7dQGEFn XfKkRSZC6zwDUZCHnqbvfMUsUPrVbUQ6mNJhWkdv0Q01ILC5vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOREo6gzfaTrph0qG+rma5sSKKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGY5Zjg4NmEtMDMxOS0z MmM5LWE2MjMtYWM0ZDVjZDQ2NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABB3zDesh7DSE79bwD7Pj8tiThcoKpYC2Efcxp87ShQPKnPjhK3v rCncN/m+wN7SaBHIGj1UceICTwJ4Nv4K4HhYczuSS4tZOHx9oBIORCjSKTmEW0MV ickjrh5VTy63e4T8xiUzw+QpBqNfwHnsxm5Z7c9i/VusON1y183ddHM8tEOVb5lk 54ymP6HkqsDYwa8wTQK4e5u/DCmn/xcRFe+QfCAzOX91EPvWDLMhjISwjJEbP9OD 0nmTHKHc0iKSl6xN4qruxsuvwIcTJ2pHae+5XQb954i21amwh4On7Mro4NwpOgyu TYSBc5IKc/Y4+SForPHGcOU+wxJzSiDyQ2M= -----END CERTIFICATE-----Generated at Wed Oct 29 07:22:53 2025 by rpki-client