$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40aa1d8e-10fc-3605-b465-787856cbefed.roa File: 40aa1d8e-10fc-3605-b465-787856cbefed.roa (raw, json) Hash identifier: Ma/CBBEtB3RfuZqgeG2zh9LOSDM5wtkNF5CXV4SOUsk= Subject key identifier: EE:49:D8:E2:7A:B2:47:75:34:0E:C9:30:F5:FE:AC:E3:3C:05:F4:41 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724D9095D64B5A30461280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40aa1d8e-10fc-3605-b465-787856cbefed.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396543 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4d:90:95:d6:4b:5a:30:46:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=10ed1953-9bbb-4e28-b92f-cfe75321fb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:26:16:41:67:b8:e4:71:fb:69:ba:5b:b2: e6:11:f8:5f:e6:57:74:25:44:04:49:4d:3a:55:1d: 0d:09:dd:96:23:be:80:02:0d:86:f6:43:e1:26:3e: a0:c8:c7:1a:4c:07:fe:7e:44:fa:97:7d:5c:a7:ee: 11:cc:22:52:0c:12:a1:cc:58:53:e1:f3:fe:86:32: aa:e8:48:6b:9c:fb:07:38:57:ae:9e:50:78:52:26: e5:26:e9:24:ba:d5:f5:0b:11:85:28:d6:1d:bb:96: ee:ce:19:7a:00:d1:3e:53:7e:77:03:38:ed:61:d4: 0d:47:9e:50:69:ba:3f:44:32:f2:9b:4d:67:21:e9: 52:b6:28:98:d8:ab:61:90:c8:8c:71:96:9b:ef:39: 78:29:c4:b2:e1:87:ed:0c:ca:02:67:d1:ac:d9:cf: 30:0e:f2:85:db:95:e3:5f:41:0a:56:c2:d6:95:ec: b2:9a:6d:08:e1:e4:75:4a:ed:bf:bc:37:fe:e2:54: 18:69:72:6d:2d:15:46:00:43:7d:f3:e0:8b:c0:00: 57:21:b5:62:1f:eb:31:24:e0:0b:64:41:a0:2f:77: 29:d9:35:b1:82:27:54:83:af:6d:4a:db:5c:4b:f8: 1e:f4:f7:2c:66:9e:00:48:7b:d5:31:fd:7f:11:0b: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:49:D8:E2:7A:B2:47:75:34:0E:C9:30:F5:FE:AC:E3:3C:05:F4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40aa1d8e-10fc-3605-b465-787856cbefed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b7:f4:eb:a4:ee:57:20:6e:53:6f:2c:5d:22:e9:a3:8d:cb: 83:cb:db:bd:84:30:3f:67:da:ec:89:ee:dc:ec:c6:e9:c7:cb: e2:b3:99:c3:1c:f0:ce:f4:a3:7b:a7:f6:b2:8f:cd:8b:20:43: 72:9e:23:30:a1:04:f8:89:5a:71:8e:a2:20:e6:bc:f7:6f:ee: ca:a6:7e:2e:32:44:06:9f:97:a5:6d:58:d9:f7:d0:cb:7c:6b: 32:e5:2b:75:98:47:17:3c:ab:4f:36:7d:15:06:81:0f:0b:83: 72:2c:82:3d:d5:f6:8e:bb:e0:ff:c2:6b:07:0f:50:20:2e:cf: b5:98:06:c1:2d:47:e6:b9:57:f5:ce:7a:91:84:1f:0a:ea:66: 60:48:b7:f4:db:19:bd:7d:af:3f:d9:5e:85:ac:75:21:f9:98: dd:17:f2:d2:a4:ad:70:29:50:00:ff:0e:8d:a0:92:06:8f:67: dc:91:5c:7d:d3:c5:0e:fe:70:95:57:26:7d:be:c7:b2:b7:8b: c1:a0:68:cb:3c:87:90:18:62:e0:10:e0:21:ec:41:f5:b2:b4: dd:0a:e6:31:2b:13:2a:d4:4a:09:aa:7e:61:04:ce:c5:c7:6e: 44:71:a2:47:3b:78:ff:c5:d7:6a:1f:7e:76:5f:e5:d6:1a:ce: b1:7d:e5:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYck2QldZLWjBGEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MTBlZDE5NTMtOWJiYi00ZTI4LWI5MmYtY2ZlNzUzMjFmYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwgmFkFnuORx+2m6W7LmEfhf5ld0JUQESU06 VR0NCd2WI76AAg2G9kPhJj6gyMcaTAf+fkT6l31cp+4RzCJSDBKhzFhT4fP+hjKq 6EhrnPsHOFeunlB4UiblJukkutX1CxGFKNYdu5buzhl6ANE+U353AzjtYdQNR55Q abo/RDLym01nIelStiiY2KthkMiMcZab7zl4KcSy4YftDMoCZ9Gs2c8wDvKF25Xj X0EKVsLWleyymm0I4eR1Su2/vDf+4lQYaXJtLRVGAEN98+CLwABXIbViH+sxJOAL ZEGgL3cp2TWxgidUg69tSttcS/ge9PcsZp4ASHvVMf1/EQtMBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO5J2OJ6skd1NA7JMPX+rOM8BfRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBhYTFkOGUtMTBmYy0z NjA1LWI0NjUtNzg3ODU2Y2JlZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ639Ouk7lcgblNvLF0i6aONy4PL272EMD9n2uyJ7tzsxunHy+Kz mcMc8M70o3un9rKPzYsgQ3KeIzChBPiJWnGOoiDmvPdv7sqmfi4yRAafl6VtWNn3 0Mt8azLlK3WYRxc8q082fRUGgQ8Lg3Isgj3V9o674P/CawcPUCAuz7WYBsEtR+a5 V/XOepGEHwrqZmBIt/TbGb19rz/ZXoWsdSH5mN0X8tKkrXApUAD/Do2gkgaPZ9yR XH3TxQ7+cJVXJn2+x7K3i8GgaMs8h5AYYuAQ4CHsQfWytN0K5jErEyrUSgmqfmEE zsXHbkRxokc7eP/F12offnZf5dYazrF95ck= -----END CERTIFICATE-----Generated at Wed Oct 29 07:22:59 2025 by rpki-client