$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2142e76b-4450-3777-8c8e-0b24fafc4b96.roa File: 2142e76b-4450-3777-8c8e-0b24fafc4b96.roa (raw, json) Hash identifier: xRKHznFLjCPtlA4sTnMA8mpwur8+VHLir9YGxzxovFY= Subject key identifier: 00:A9:AE:94:D4:E2:FC:F2:6E:A0:28:C8:14:71:4F:D7:92:FB:CA:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724E96EC08AA3E6144E5C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2142e76b-4450-3777-8c8e-0b24fafc4b96.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396576 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4e:96:ec:08:aa:3e:61:44:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=bd5d12ea-b881-49e2-ad9c-88fc73d4afa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a6:ec:a7:fd:e2:4b:f0:90:5f:11:84:eb:01: 31:86:5a:66:44:a4:c6:af:92:8d:9c:0e:a4:e0:9e: ad:3d:29:b1:0e:bc:9a:1c:5f:fd:7e:f7:d0:2e:dd: f8:e2:81:a5:3f:09:b2:0f:bd:e8:d4:3d:73:dd:66: cc:1c:44:e8:3f:95:0b:a0:41:02:3b:4a:9f:ee:3d: 26:7d:18:4c:eb:0f:44:77:fb:04:9e:ec:db:db:23: 65:97:f2:60:f8:01:ed:83:0c:6b:31:dc:19:29:f3: 6d:76:4c:c2:e0:b8:cf:14:6f:45:2b:bf:5a:6b:6d: 93:fc:21:ae:55:10:b6:d7:fc:95:23:c0:37:12:87: ee:46:e9:87:e6:5d:10:fd:4d:b4:04:16:0e:73:8b: af:02:7e:7d:5b:7e:e1:55:ff:56:dd:bc:4e:88:7f: 88:db:c1:c9:19:a1:75:32:5e:ed:e3:ad:5c:52:7c: 99:3a:e8:43:6a:01:6a:05:8b:fd:06:f9:d4:ae:0f: be:43:0b:61:c6:61:09:63:85:43:1d:67:24:ab:be: 57:08:bf:40:47:21:5d:fc:80:38:4e:eb:83:a7:ea: 9d:b1:94:49:2e:ac:9b:6b:89:82:0f:eb:2c:fe:65: 4c:ab:f2:c1:5f:90:51:3f:93:32:d5:d9:68:da:c6: 7d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A9:AE:94:D4:E2:FC:F2:6E:A0:28:C8:14:71:4F:D7:92:FB:CA:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2142e76b-4450-3777-8c8e-0b24fafc4b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4b:95:65:2a:8f:34:2c:f7:5b:00:89:06:dc:98:58:0f:b0: 07:c9:dc:d8:76:db:02:35:de:ef:9e:0b:ba:03:a6:94:70:ff: 5f:57:e9:7f:0f:d8:79:37:43:91:6e:bf:84:ca:42:9a:bc:74: dc:c5:d0:ff:0c:01:42:fa:54:13:d8:6e:f3:8b:53:ae:cc:28: 01:19:d7:47:47:cf:fe:fe:86:02:f4:06:e6:98:49:a2:1d:9d: 74:67:e5:8b:e2:cd:c7:e5:f9:6f:31:b2:7e:78:ca:a0:19:40: d7:56:34:56:10:3f:8f:65:b5:79:66:1b:28:cb:c4:9c:04:9a: 63:d7:fc:ea:d1:e0:38:9a:b5:16:72:68:cc:7d:81:10:bb:d6: 31:b6:ac:9f:96:a3:7c:53:86:db:2d:ae:de:53:67:57:c2:94: c8:30:f7:34:63:b4:d3:dc:7a:5d:a4:7d:07:fc:6f:12:df:3c: e4:ac:c6:67:dd:1b:76:1d:8b:91:da:8a:78:bf:4e:4d:7c:c4: b9:ce:5c:17:4e:a0:bf:20:6a:aa:c0:2b:1f:8f:8c:17:6d:00: 9a:11:9f:ee:a1:11:0d:06:f9:a6:54:a9:16:72:63:45:b2:77: 73:b1:f7:e3:12:b4:01:4a:b7:7a:b5:d2:d8:79:ab:01:e1:83: 36:34:bc:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYck6W7AiqPmFE5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YmQ1ZDEyZWEtYjg4MS00OWUyLWFkOWMtODhmYzczZDRhZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46bsp/3iS/CQXxGE6wExhlpmRKTGr5KNnA6k 4J6tPSmxDryaHF/9fvfQLt344oGlPwmyD73o1D1z3WbMHEToP5ULoEECO0qf7j0m fRhM6w9Ed/sEnuzb2yNll/Jg+AHtgwxrMdwZKfNtdkzC4LjPFG9FK79aa22T/CGu VRC21/yVI8A3EofuRumH5l0Q/U20BBYOc4uvAn59W37hVf9W3bxOiH+I28HJGaF1 Ml7t461cUnyZOuhDagFqBYv9BvnUrg++QwthxmEJY4VDHWckq75XCL9ARyFd/IA4 TuuDp+qdsZRJLqyba4mCD+ss/mVMq/LBX5BRP5My1dlo2sZ9bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFACprpTU4vzybqAoyBRxT9eS+8o9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjE0MmU3NmItNDQ1MC0z Nzc3LThjOGUtMGIyNGZhZmM0Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1LlWUqjzQs91sAiQbcmFgPsAfJ3Nh22wI13u+eC7oDppRw/19X 6X8P2Hk3Q5Fuv4TKQpq8dNzF0P8MAUL6VBPYbvOLU67MKAEZ10dHz/7+hgL0BuaY SaIdnXRn5Yvizcfl+W8xsn54yqAZQNdWNFYQP49ltXlmGyjLxJwEmmPX/OrR4Dia tRZyaMx9gRC71jG2rJ+Wo3xThtstrt5TZ1fClMgw9zRjtNPcel2kfQf8bxLfPOSs xmfdG3Ydi5Haini/Tk18xLnOXBdOoL8gaqrAKx+PjBdtAJoRn+6hEQ0G+aZUqRZy Y0Wyd3Ox9+MStAFKt3q10th5qwHhgzY0vN0= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:30 2025 by rpki-client