$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32a5d73f-1798-3ade-a9f7-06a49b56e4ff.roa File: 32a5d73f-1798-3ade-a9f7-06a49b56e4ff.roa (raw, json) Hash identifier: HWMS+IDg1gFVrQ9eBmcUZ/bH7AwV0wjH1JwhwZx/sWE= Subject key identifier: 5F:D0:0A:21:81:12:9D:A6:B1:DC:A7:4C:D0:70:64:18:63:00:14:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723C44AC52BA16A6DD4A20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32a5d73f-1798-3ade-a9f7-06a49b56e4ff.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396554 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3c:44:ac:52:ba:16:a6:dd:4a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=3c78fe34-f57a-40a2-b877-815cedbfa476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:33:3a:12:26:e3:43:0a:2d:85:64:3c:e7: 4d:7e:57:16:3d:61:3c:37:74:0f:28:b7:1a:31:1e: 0d:b4:79:91:86:e9:d6:5d:6b:af:a1:df:81:0b:2c: 6c:08:a7:8c:eb:75:95:fa:fa:c1:ef:ed:11:4a:5f: e5:7e:75:4e:90:a3:e6:8a:f8:90:0b:97:10:ad:61: 64:53:16:b4:b0:1b:81:d0:2f:ec:a2:cd:db:54:f4: 88:91:55:ad:07:c7:fe:fc:4c:07:3f:5e:bc:32:a3: 56:0a:9c:43:ca:a9:79:f2:87:b5:f8:1f:c9:43:ba: de:48:83:bd:20:ea:c7:ed:d9:ee:8e:b7:67:a8:e9: 34:dc:98:f2:ab:20:61:7b:0b:da:d8:ea:94:50:ce: 47:31:26:25:e4:ea:5b:67:62:e4:f3:48:74:06:cc: 54:17:e1:49:db:5f:d0:80:20:91:50:62:6f:9a:3a: c5:f6:11:99:61:32:3a:6b:d1:61:c9:7f:68:50:e0: 32:ad:dd:08:31:9f:01:09:dc:f8:bb:82:8b:ad:97: 87:20:31:63:d3:04:70:c7:8a:a0:c9:a0:16:af:1e: fa:b4:67:21:a2:85:b3:03:f7:26:4c:1e:e6:6e:a1: 2d:22:ac:fb:4c:4c:b6:67:7e:7d:80:e9:b2:6f:7b: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D0:0A:21:81:12:9D:A6:B1:DC:A7:4C:D0:70:64:18:63:00:14:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32a5d73f-1798-3ade-a9f7-06a49b56e4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0f:b2:17:c6:fe:e6:bf:7a:13:a9:a9:2c:6a:21:a2:61:3b: 16:60:e2:9a:c5:3e:45:19:03:63:3d:63:c8:92:66:e4:91:a0: 17:fc:b5:28:19:c7:fb:a0:33:68:78:e0:6b:3d:0f:66:7a:d5: db:17:b1:33:30:a7:38:7a:80:b5:87:92:ee:47:5f:33:ed:2d: f0:7b:be:cc:51:d8:d7:eb:b0:6c:7b:48:f2:f0:1e:11:d9:d6: 2d:ac:aa:3e:d6:07:09:75:74:ed:e6:58:6f:91:5a:c5:c3:58: 29:e7:57:d7:ed:71:00:c2:54:ae:04:be:5d:7b:e9:57:32:00: 93:87:fe:16:2a:10:8b:7f:4a:ca:e1:5d:24:f4:d4:9f:19:77: 40:0c:3e:c3:1f:a2:47:a6:d0:86:e3:41:c7:d5:6c:1a:1e:20: ed:66:2b:91:9b:b0:d8:b2:fa:4f:ac:6b:76:4e:2c:ff:38:b4: 14:61:b5:6a:2e:97:72:81:fc:d4:43:4d:b9:f6:ff:b0:ff:d0: 0d:b0:cc:e6:1d:6d:d1:3e:98:7b:b8:3f:ae:47:43:3a:46:9c: cb:e4:7c:17:54:1c:17:a5:96:23:72:ad:54:41:37:09:05:35: 32:cc:13:98:c8:09:80:f3:8f:e3:53:ac:4c:33:35:fa:de:0d: 24:f4:e6:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjxErFK6FqbdSiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk M2M3OGZlMzQtZjU3YS00MGEyLWI4NzctODE1Y2VkYmZhNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmMzOhIm40MKLYVkPOdNflcWPWE8N3QPKLca MR4NtHmRhunWXWuvod+BCyxsCKeM63WV+vrB7+0RSl/lfnVOkKPmiviQC5cQrWFk Uxa0sBuB0C/sos3bVPSIkVWtB8f+/EwHP168MqNWCpxDyql58oe1+B/JQ7reSIO9 IOrH7dnujrdnqOk03JjyqyBhewva2OqUUM5HMSYl5OpbZ2Lk80h0BsxUF+FJ21/Q gCCRUGJvmjrF9hGZYTI6a9FhyX9oUOAyrd0IMZ8BCdz4u4KLrZeHIDFj0wRwx4qg yaAWrx76tGchooWzA/cmTB7mbqEtIqz7TEy2Z359gOmyb3vZtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF/QCiGBEp2msdynTNBwZBhjABQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJhNWQ3M2YtMTc5OC0z YWRlLWE5ZjctMDZhNDliNTZlNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIoPshfG/ua/ehOpqSxqIaJhOxZg4prFPkUZA2M9Y8iSZuSRoBf8 tSgZx/ugM2h44Gs9D2Z61dsXsTMwpzh6gLWHku5HXzPtLfB7vsxR2NfrsGx7SPLw HhHZ1i2sqj7WBwl1dO3mWG+RWsXDWCnnV9ftcQDCVK4Evl176VcyAJOH/hYqEIt/ SsrhXST01J8Zd0AMPsMfokem0IbjQcfVbBoeIO1mK5GbsNiy+k+sa3ZOLP84tBRh tWoul3KB/NRDTbn2/7D/0A2wzOYdbdE+mHu4P65HQzpGnMvkfBdUHBelliNyrVRB NwkFNTLME5jICYDzj+NTrEwzNfreDST05oc= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:57 2025 by rpki-client