$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351ff685-d672-32e0-ad2a-f3936a7f47f4.roa File: 351ff685-d672-32e0-ad2a-f3936a7f47f4.roa (raw, json) Hash identifier: MjSGzf5NILbmQBUVpyFq63EO7g8sNMWXENzNRpjWPzg= Subject key identifier: C4:5A:97:77:87:96:24:4C:F1:29:67:29:5F:B0:63:EF:74:56:B0:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23D3E19E13670300F6720 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351ff685-d672-32e0-ad2a-f3936a7f47f4.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396543 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3d:3e:19:e1:36:70:30:0f:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=ee2373e0-ea95-43c6-bad1-182cd7151ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:32:dc:94:02:43:9f:9c:46:6d:31:17:8b: 85:31:91:db:1f:3b:95:97:99:cf:03:7e:eb:03:d2: 94:c5:3d:f3:5b:ac:6b:c5:fa:3c:d1:70:9d:69:32: 7d:c5:e5:55:52:f7:7a:93:e9:36:9a:1a:ab:74:e1: 27:87:64:1f:b0:f3:47:41:83:b2:b2:67:0d:8e:fd: e0:54:8c:4b:2c:d6:ed:0b:90:d8:6e:6f:f0:dd:66: bb:ad:ca:43:4d:32:a9:94:16:24:c0:11:3a:e2:9f: 13:56:e0:0d:7e:0f:d2:ee:b8:a0:57:75:41:ab:a6: e1:97:01:a3:14:87:46:a3:5e:40:ee:f7:9a:ec:e6: 65:42:94:ed:1d:b2:12:bb:6e:ec:4a:3e:39:2f:29: 48:e0:7b:48:f5:2d:a7:d8:e2:37:f3:9d:29:32:74: d6:cc:1d:90:d3:68:b8:7c:c2:f1:a8:78:09:63:33: 00:2d:e8:f8:8c:4b:61:25:b0:3d:10:1c:f4:8b:0d: 1b:11:ba:82:54:65:53:fa:45:31:10:e8:dc:f0:22: c3:19:c8:66:b0:d6:aa:22:8c:31:21:e0:15:b3:22: 5e:f2:91:13:82:83:1d:fd:e4:8f:86:2a:ad:73:36: aa:f1:37:d9:b2:da:1a:1d:0b:43:81:ac:eb:b6:60: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:97:77:87:96:24:4C:F1:29:67:29:5F:B0:63:EF:74:56:B0:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/351ff685-d672-32e0-ad2a-f3936a7f47f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:99:6c:6c:68:a4:c4:94:8d:4e:81:52:30:d6:58:98:57:2c: 9c:a3:0e:e4:23:6c:c5:86:66:d3:26:bb:5f:76:38:33:bd:b6: 0e:5f:92:b6:c2:3d:8c:1e:15:67:65:bc:5f:c4:a6:6f:69:fe: df:fd:07:fa:f2:19:9b:e3:94:84:c4:16:6f:bf:82:58:9d:fa: ea:97:29:09:02:48:89:73:b5:0a:85:a5:13:70:f6:b4:68:ca: 5c:e6:a7:d5:da:35:05:f5:bf:62:bc:4a:30:31:2d:4b:5e:51: 10:c1:50:df:b1:9f:b8:0c:50:7e:8c:45:dd:a6:8b:e1:60:d7: 3a:cc:ad:0d:1b:cc:17:b5:a0:94:39:a5:ff:75:68:27:e9:8e: 7b:1c:03:38:53:ad:e0:6a:6f:fd:0f:e2:42:85:e5:28:fc:04: a9:8e:ee:53:06:b1:01:6a:84:ef:5a:1a:ab:30:03:d2:34:87: 4a:49:43:f0:d1:64:be:a2:26:22:e7:67:ed:59:07:8c:1c:0b: c1:79:cc:68:d1:2e:b8:27:d6:cc:dc:1b:d8:53:be:7a:5a:3b: 3f:63:3d:3e:9a:42:d1:ec:2d:90:eb:d0:6b:ff:a4:8a:0e:36: 1a:11:3a:7a:dc:9c:ed:53:ac:ef:14:56:9b:3b:63:3e:4c:aa: c6:4b:21:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoj0+GeE2cDAPZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWUyMzczZTAtZWE5NS00M2M2LWJhZDEtMTgyY2Q3MTUxYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH4y3JQCQ5+cRm0xF4uFMZHbHzuVl5nPA37r A9KUxT3zW6xrxfo80XCdaTJ9xeVVUvd6k+k2mhqrdOEnh2QfsPNHQYOysmcNjv3g VIxLLNbtC5DYbm/w3Wa7rcpDTTKplBYkwBE64p8TVuANfg/S7rigV3VBq6bhlwGj FIdGo15A7vea7OZlQpTtHbISu27sSj45LylI4HtI9S2n2OI3850pMnTWzB2Q02i4 fMLxqHgJYzMALej4jEthJbA9EBz0iw0bEbqCVGVT+kUxEOjc8CLDGchmsNaqIowx IeAVsyJe8pETgoMd/eSPhiqtczaq8TfZstoaHQtDgazrtmAcTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMRal3eHliRM8SlnKV+wY+90VrAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzUxZmY2ODUtZDY3Mi0z MmUwLWFkMmEtZjM5MzZhN2Y0N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCZbGxopMSUjU6BUjDWWJhXLJyjDuQjbMWGZtMmu192ODO9tg5f krbCPYweFWdlvF/Epm9p/t/9B/ryGZvjlITEFm+/glid+uqXKQkCSIlztQqFpRNw 9rRoylzmp9XaNQX1v2K8SjAxLUteURDBUN+xn7gMUH6MRd2mi+Fg1zrMrQ0bzBe1 oJQ5pf91aCfpjnscAzhTreBqb/0P4kKF5Sj8BKmO7lMGsQFqhO9aGqswA9I0h0pJ Q/DRZL6iJiLnZ+1ZB4wcC8F5zGjRLrgn1szcG9hTvnpaOz9jPT6aQtHsLZDr0Gv/ pIoONhoROnrcnO1TrO8UVps7Yz5MqsZLIbo= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:35 2025 by rpki-client