$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa File: 3f1b0596-2674-340b-844e-d508a34d5971.roa (raw, json) Hash identifier: dbv8NpGXFmkGrXBgGyrFOv3L0Gitp+GjE2xJoJGSbcc= Subject key identifier: 0C:E7:83:12:6D:E0:30:49:BA:B7:8A:B5:D5:66:5C:D8:6C:25:CC:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9872469F01A1BE95D3A4BEC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396608 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:46:9f:01:a1:be:95:d3:a4:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=95850b25-3515-4352-9917-b0f8cd5737d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:27:3b:53:74:dc:0c:01:27:4f:f7:98:d5: ef:5f:b3:9c:9c:93:1c:a1:4f:6d:f3:9c:3c:c9:3d: 81:a3:96:48:2b:1a:7f:25:3a:2b:b1:1b:98:3b:f5: 0c:2b:e7:06:57:8c:29:94:b8:64:81:dd:d0:32:6f: 2b:23:bf:5c:c4:c3:7c:fa:22:29:9e:d1:d2:91:dd: e8:f7:1b:1b:1f:e2:2f:2d:c0:77:2c:f5:98:f3:82: 8d:1b:88:c0:b8:5f:7d:91:e8:69:99:68:01:2d:02: c8:61:2a:28:b0:bb:7e:cc:7b:03:96:93:1b:54:d3: 5f:08:46:60:18:8f:00:9c:be:da:fa:60:14:8d:1d: 55:4e:1f:1c:90:23:70:52:ed:1e:54:b8:13:6c:9a: 0b:e1:a3:18:bd:34:af:84:05:15:b2:e3:10:3b:b1: b7:6a:1b:86:4a:dd:e8:4d:d7:fd:c7:19:4d:0d:9a: c3:05:1c:b5:71:50:04:68:66:b6:27:97:73:c5:cd: df:e5:51:89:29:8a:8d:54:45:bb:8b:7c:9b:32:9d: 36:56:2b:b3:1b:11:eb:44:37:b3:7a:4a:7d:95:03: 3f:3b:22:8a:23:09:4e:41:2e:a1:1f:6a:61:29:11: 2a:a4:e9:b5:e1:a5:15:a2:1c:a2:b7:69:ac:25:fd: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E7:83:12:6D:E0:30:49:BA:B7:8A:B5:D5:66:5C:D8:6C:25:CC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ac:c9:ab:8b:4c:cb:7e:03:6c:62:ba:6f:b4:9c:82:b4:ef: 71:95:19:11:0c:a5:a1:c2:b6:3d:06:55:a8:3f:b9:fd:ab:ca: 42:6f:8d:1a:98:50:da:23:b5:74:3a:2f:ae:74:49:07:5f:e1: 42:9c:c8:8b:6d:b0:52:15:83:11:02:43:09:0f:f6:0c:0d:09: 90:99:61:96:fd:18:29:67:3d:ea:48:26:b0:d1:db:ba:cb:6f: ff:89:16:2c:d5:99:72:4f:83:92:9f:30:e0:6d:71:a0:6e:07: 20:91:54:2e:2f:cd:60:25:ba:b4:f0:6b:48:1c:5a:b8:41:02: 2b:44:b6:a2:e1:93:50:7e:c6:5a:75:ea:b6:3e:d9:8e:be:07: a7:6f:dc:22:49:de:38:32:ef:bc:77:32:b3:93:a3:f9:43:65: 10:84:ba:79:03:00:30:bc:0a:14:91:f3:e1:54:78:96:b4:19: 84:3d:54:6c:7f:37:7e:42:e7:49:e7:91:8b:6b:e3:f4:68:2e: 7e:5d:33:b3:45:b4:41:23:73:0d:f6:9a:c7:65:68:74:47:0e: 21:39:77:49:83:40:c1:4b:03:a0:bf:e8:eb:75:e1:ab:c8:4b: 6a:4b:b1:c5:66:d0:25:3a:c0:45:9c:c4:4c:25:f7:a2:ca:f8: 27:25:ef:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckafAaG+ldOkvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OTU4NTBiMjUtMzUxNS00MzUyLTk5MTctYjBmOGNkNTczN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxesnO1N03AwBJ0/3mNXvX7OcnJMcoU9t85w8 yT2Bo5ZIKxp/JTorsRuYO/UMK+cGV4wplLhkgd3QMm8rI79cxMN8+iIpntHSkd3o 9xsbH+IvLcB3LPWY84KNG4jAuF99kehpmWgBLQLIYSoosLt+zHsDlpMbVNNfCEZg GI8AnL7a+mAUjR1VTh8ckCNwUu0eVLgTbJoL4aMYvTSvhAUVsuMQO7G3ahuGSt3o Tdf9xxlNDZrDBRy1cVAEaGa2J5dzxc3f5VGJKYqNVEW7i3ybMp02ViuzGxHrRDez ekp9lQM/OyKKIwlOQS6hH2phKREqpOm14aUVohyit2msJf2gQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzngxJt4DBJureKtdVmXNhsJcyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YxYjA1OTYtMjY3NC0z NDBiLTg0NGUtZDUwOGEzNGQ1OTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOsyauLTMt+A2xium+0nIK073GVGREMpaHCtj0GVag/uf2rykJv jRqYUNojtXQ6L650SQdf4UKcyIttsFIVgxECQwkP9gwNCZCZYZb9GClnPepIJrDR 27rLb/+JFizVmXJPg5KfMOBtcaBuByCRVC4vzWAlurTwa0gcWrhBAitEtqLhk1B+ xlp16rY+2Y6+B6dv3CJJ3jgy77x3MrOTo/lDZRCEunkDADC8ChSR8+FUeJa0GYQ9 VGx/N35C50nnkYtr4/RoLn5dM7NFtEEjcw32msdlaHRHDiE5d0mDQMFLA6C/6Ot1 4avIS2pLscVm0CU6wEWcxEwl96LK+Ccl7+Y= -----END CERTIFICATE-----Generated at Wed Oct 29 07:18:47 2025 by rpki-client