$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41efc56a-c8f4-36a9-9351-05eab1c2d060.roa File: 41efc56a-c8f4-36a9-9351-05eab1c2d060.roa (raw, json) Hash identifier: heou3O6KYl2pwWfpcU5jbL4KL9YzJMNVgQJDj+9uYv8= Subject key identifier: 01:07:5C:0C:1E:26:5B:0D:B4:75:CF:F5:AA:E3:57:D4:9D:14:4B:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23B011E8BB88D8DB85080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41efc56a-c8f4-36a9-9351-05eab1c2d060.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 397212 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3b:01:1e:8b:b8:8d:8d:b8:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=4ebdf758-8a2f-4452-8495-e5000833bb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:c7:fb:9e:98:67:dc:41:41:84:ca:a3:29: 21:18:2b:c4:9f:80:8a:59:48:5a:bc:46:87:4f:39: 8f:55:3d:66:92:6e:93:b6:a6:0f:5d:a9:28:28:2f: 27:5f:ab:2d:f6:e6:4d:aa:32:fd:68:37:23:13:df: 40:88:a7:d4:79:45:e5:12:ef:92:45:08:83:cd:6e: c8:9e:74:a2:28:31:a1:e3:c3:2d:d9:97:f3:b3:c1: 12:40:83:d3:6a:28:31:e4:e9:1e:a4:b5:7b:47:e1: c0:cd:2f:b3:4e:2f:63:e0:e4:f2:d6:75:bb:48:4a: b1:fd:81:98:0a:9e:3f:2d:f0:33:aa:d2:fc:25:e6: 36:a1:82:7f:2a:d8:6c:82:01:f6:e6:91:c1:99:6a: 0d:58:f3:4e:f8:fd:5c:ba:43:92:01:13:18:26:da: 23:ee:1c:a7:8a:aa:31:af:4f:e7:fe:b5:75:6c:97: 07:07:cf:ee:d8:56:ec:e5:bc:5c:d9:47:01:ac:7d: 7b:23:66:8b:46:64:89:50:66:da:65:0d:3c:65:98: 7d:40:f0:01:21:6a:71:77:fb:dc:06:b4:dc:b3:e3: 81:e1:5b:8e:b9:e9:f6:86:20:11:2d:5d:36:a2:32: cb:6d:08:3a:2e:ea:1e:22:ff:b1:b1:1c:40:53:4f: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:07:5C:0C:1E:26:5B:0D:B4:75:CF:F5:AA:E3:57:D4:9D:14:4B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41efc56a-c8f4-36a9-9351-05eab1c2d060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:0d:65:c5:c8:13:1e:3e:84:74:bb:06:4c:db:5b:65:8a:08: b2:f1:da:09:03:04:a2:8c:55:b7:bd:0e:5a:4c:1b:43:fb:77: 8a:e4:ac:f5:bb:5a:6f:fa:db:7b:04:a4:b5:e9:aa:33:95:c4: c5:6f:e6:70:d3:ac:4b:24:22:30:35:95:45:fc:3b:08:26:e1: c8:d7:bb:d0:f5:19:75:d0:87:9d:c0:0c:20:e4:9f:05:0d:8d: f2:a7:d8:0a:62:1e:ba:9d:34:5e:6b:1b:bd:2a:41:4a:ac:56: f6:b0:b4:50:e0:c0:66:95:e5:38:ef:ab:b9:73:96:71:6f:74: 12:ef:80:07:50:f7:5c:bb:9a:2b:c5:c6:e2:7a:14:5b:35:4c: 17:21:6c:bf:19:9b:41:b0:6d:55:4b:32:01:56:5e:cb:d0:3d: e2:00:5b:32:81:27:4b:72:a6:c3:6e:8b:73:a2:ce:41:24:af: 77:a9:ed:32:b1:bb:51:17:ff:87:94:dc:d4:16:15:22:85:fe: be:c7:fc:3e:98:37:bf:18:d0:d0:e4:c4:96:4f:14:15:d1:67: 08:a4:95:92:39:70:d6:97:9a:b3:04:8c:86:a3:de:25:29:96: be:6b:4b:a5:76:c9:6f:98:29:b6:67:18:b4:26:d6:2d:fa:2f: 0a:84:9c:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucojsBHou4jY24UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk NGViZGY3NTgtOGEyZi00NDUyLTg0OTUtZTUwMDA4MzNiYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn7H+56YZ9xBQYTKoykhGCvEn4CKWUhavEaH TzmPVT1mkm6TtqYPXakoKC8nX6st9uZNqjL9aDcjE99AiKfUeUXlEu+SRQiDzW7I nnSiKDGh48Mt2Zfzs8ESQIPTaigx5OkepLV7R+HAzS+zTi9j4OTy1nW7SEqx/YGY Cp4/LfAzqtL8JeY2oYJ/KthsggH25pHBmWoNWPNO+P1cukOSARMYJtoj7hyniqox r0/n/rV1bJcHB8/u2Fbs5bxc2UcBrH17I2aLRmSJUGbaZQ08ZZh9QPABIWpxd/vc BrTcs+OB4VuOuen2hiARLV02ojLLbQg6LuoeIv+xsRxAU0+XawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEHXAweJlsNtHXP9arjV9SdFEthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDFlZmM1NmEtYzhmNC0z NmE5LTkzNTEtMDVlYWIxYzJkMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMANZcXIEx4+hHS7BkzbW2WKCLLx2gkDBKKMVbe9DlpMG0P7d4rk rPW7Wm/623sEpLXpqjOVxMVv5nDTrEskIjA1lUX8Owgm4cjXu9D1GXXQh53ADCDk nwUNjfKn2ApiHrqdNF5rG70qQUqsVvawtFDgwGaV5Tjvq7lzlnFvdBLvgAdQ91y7 mivFxuJ6FFs1TBchbL8Zm0GwbVVLMgFWXsvQPeIAWzKBJ0typsNui3OizkEkr3ep 7TKxu1EX/4eU3NQWFSKF/r7H/D6YN78Y0NDkxJZPFBXRZwiklZI5cNaXmrMEjIaj 3iUplr5rS6V2yW+YKbZnGLQm1i36LwqEnMg= -----END CERTIFICATE-----Generated at Wed Oct 29 07:20:19 2025 by rpki-client