$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2889c4a9-bce3-3e69-825c-c13c0fc07995.roa File: 2889c4a9-bce3-3e69-825c-c13c0fc07995.roa (raw, json) Hash identifier: m9248Nz33nBAUBZMzw3qBAmc3wTlPtonYzzG+eQwVRI= Subject key identifier: 06:18:F2:48:DA:8B:93:25:94:DA:AA:D3:18:88:8B:52:98:14:C5:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987248488C6ADA28226ACB40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2889c4a9-bce3-3e69-825c-c13c0fc07995.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 36631 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:48:48:8c:6a:da:28:22:6a:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=a6564b5b-6356-407f-8d5f-550a0530fef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:e3:a0:e5:59:5e:c4:69:7d:a3:65:2f:76: 36:6d:ec:e0:9f:dc:34:22:b0:3b:bd:60:f9:29:44: eb:09:d6:b8:39:b1:6a:af:e0:59:05:9b:55:0d:06: 3d:16:74:b2:cb:fc:1b:e0:d6:a9:4d:c8:85:4d:71: 8f:56:26:65:2c:4e:f9:3a:75:f8:78:b8:ca:4c:5e: 77:ed:b0:e6:30:48:39:8d:b0:2d:39:72:3d:2e:39: 60:cf:bc:a2:3d:a2:97:19:27:58:d8:cb:c5:d2:5f: d7:c9:7e:0d:26:aa:d1:8c:b4:8a:5c:12:0f:8a:47: e3:78:52:26:73:25:00:b9:cb:25:50:57:68:cd:6e: 46:7f:05:5f:8a:90:49:b1:ea:1c:65:f3:67:cc:d2: 5a:be:2e:57:3e:8a:5d:be:7f:cb:81:d7:94:4b:72: 53:1d:9c:db:46:e0:c2:08:ac:da:27:20:f9:b0:85: ec:7e:32:76:e1:ba:73:91:90:ea:b8:91:e1:d3:9a: 46:97:60:7d:4a:b0:8e:13:50:53:bd:eb:57:de:25: 90:ef:c9:f4:ae:a8:c6:a8:94:9e:df:bb:c1:5c:60: 37:7f:dd:dc:ec:d5:6d:59:f6:58:79:bd:d1:ab:82: 57:ec:03:87:59:5a:65:7e:f8:57:05:af:8a:ab:2b: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:18:F2:48:DA:8B:93:25:94:DA:AA:D3:18:88:8B:52:98:14:C5:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2889c4a9-bce3-3e69-825c-c13c0fc07995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:aa:17:7e:34:58:ae:14:a9:5f:df:76:fe:d2:0c:41:f4:6e: 6f:f0:bf:eb:4f:b1:1e:b0:42:cc:93:69:4f:ee:e2:71:7c:4a: 31:7e:f7:db:b9:bf:98:d3:18:85:de:fb:23:fc:c3:e8:29:e6: 31:ae:87:a5:56:82:c7:4f:1f:40:5d:c5:41:5e:a2:4a:73:86: 90:e0:31:09:e5:20:60:01:31:fb:46:83:a6:e8:69:a4:87:bb: 89:b3:1b:19:d5:38:8e:f4:9a:20:fd:5b:4f:75:46:93:b2:f0: 02:c3:3f:32:b8:fa:b3:7a:43:b5:52:9c:b5:37:b8:d8:18:9b: 24:67:87:90:86:a9:97:30:50:84:d2:a8:51:97:e3:4b:1b:51: 7d:58:54:df:d1:43:8a:31:f6:91:8e:80:e1:53:31:9f:cd:ac: 47:5f:9a:73:b5:d0:36:98:04:a1:ab:10:d6:9a:27:24:ef:83: de:1c:17:39:68:ac:4f:6c:53:19:d3:1f:3d:53:41:cb:e5:83: fa:5e:2e:75:7e:66:72:27:af:8a:fc:aa:27:da:07:f6:87:bd: d8:86:fd:9a:06:97:b6:94:c7:89:29:6a:1c:a4:c1:9e:7e:47: 52:54:40:1f:d4:2f:96:be:f0:5b:e3:f2:00:65:ad:a7:f2:0f: 4a:97:49:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckhIjGraKCJqy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YTY1NjRiNWItNjM1Ni00MDdmLThkNWYtNTUwYTA1MzBmZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCnjoOVZXsRpfaNlL3Y2bezgn9w0IrA7vWD5 KUTrCda4ObFqr+BZBZtVDQY9FnSyy/wb4NapTciFTXGPViZlLE75OnX4eLjKTF53 7bDmMEg5jbAtOXI9Ljlgz7yiPaKXGSdY2MvF0l/XyX4NJqrRjLSKXBIPikfjeFIm cyUAucslUFdozW5GfwVfipBJseocZfNnzNJavi5XPopdvn/LgdeUS3JTHZzbRuDC CKzaJyD5sIXsfjJ24bpzkZDquJHh05pGl2B9SrCOE1BTvetX3iWQ78n0rqjGqJSe 37vBXGA3f93c7NVtWfZYeb3Rq4JX7AOHWVplfvhXBa+KqyvfWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAYY8kjai5MllNqq0xiIi1KYFMXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg4OWM0YTktYmNlMy0z ZTY5LTgyNWMtYzEzYzBmYzA3OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeqF340WK4UqV/fdv7SDEH0bm/wv+tPsR6wQsyTaU/u4nF8SjF+ 99u5v5jTGIXe+yP8w+gp5jGuh6VWgsdPH0BdxUFeokpzhpDgMQnlIGABMftGg6bo aaSHu4mzGxnVOI70miD9W091RpOy8ALDPzK4+rN6Q7VSnLU3uNgYmyRnh5CGqZcw UITSqFGX40sbUX1YVN/RQ4ox9pGOgOFTMZ/NrEdfmnO10DaYBKGrENaaJyTvg94c FzlorE9sUxnTHz1TQcvlg/peLnV+ZnInr4r8qifaB/aHvdiG/ZoGl7aUx4kpahyk wZ5+R1JUQB/UL5a+8Fvj8gBlrafyD0qXSTA= -----END CERTIFICATE-----Generated at Wed Oct 29 07:20:15 2025 by rpki-client