$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41fbefa9-3179-3ddf-8ddb-be508a2e4a1f.roa File: 41fbefa9-3179-3ddf-8ddb-be508a2e4a1f.roa (raw, json) Hash identifier: gxx2C7jdgXPgU4tMqWtd3QoTkwBf18SGsXJDRqFGr4Y= Subject key identifier: F9:A5:E2:CC:E9:B6:77:2F:D1:64:56:6C:B5:8E:49:21:3C:E5:1C:2F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B83820D61ACC1511FBFAA0F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41fbefa9-3179-3ddf-8ddb-be508a2e4a1f.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 397194 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:0d:61:ac:c1:51:1f:bf:aa:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=bbc06d2a-fe73-42ea-b67f-22a93907cb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:96:70:69:1f:da:49:f7:1b:4a:5b:33:ed: c4:d4:43:06:61:57:6c:c2:4a:c7:82:75:34:8b:98: 51:bf:df:96:8f:08:8c:58:7f:b6:9e:77:fc:2f:b7: bc:33:01:11:ed:09:83:23:21:95:b1:ba:ef:f8:da: 1f:10:be:1b:34:97:3c:3d:b3:52:cc:64:b3:40:4d: 3f:75:f2:6f:10:d0:a6:7b:13:00:19:42:68:8a:ec: 15:5f:6d:b0:16:0f:ab:70:a9:25:15:9c:0b:f4:a9: 84:ca:77:79:94:05:f9:cb:f8:57:19:78:9d:6b:58: 64:2b:2a:de:38:4c:58:c5:b3:e1:1a:6b:19:07:58: f8:89:4f:2e:70:0f:33:d8:45:31:92:df:93:72:98: ba:5e:12:80:b1:46:5c:38:53:0b:bc:a2:09:77:c7: c0:f4:39:91:05:04:36:d5:52:c1:99:c4:8a:44:da: 23:d3:2d:65:ab:8c:ad:24:75:b1:81:f4:7b:c6:33: 5b:02:98:41:ad:d3:f2:d0:64:c5:3c:bf:fa:61:4b: a8:db:c0:af:27:37:7b:32:7b:71:f4:d9:b9:b3:0e: 27:fb:29:26:07:59:9f:13:47:92:22:96:16:1d:bc: d3:a9:e8:ee:ef:cd:fc:ba:86:47:4d:e4:bc:0f:a6: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A5:E2:CC:E9:B6:77:2F:D1:64:56:6C:B5:8E:49:21:3C:E5:1C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41fbefa9-3179-3ddf-8ddb-be508a2e4a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a3:39:82:d0:fc:8d:b2:3e:4d:e5:f1:7e:94:17:33:3a:10: 03:0f:11:75:1c:e0:57:06:67:8b:65:13:08:df:fb:a4:31:b8: 84:a3:b2:a0:27:66:38:21:0f:1b:e9:42:29:8c:86:65:4e:b5: 43:e0:8f:13:9c:94:45:84:5e:c2:63:80:7b:09:d0:38:5e:2b: 8d:07:25:f8:ef:dc:11:e2:73:a2:33:a1:7f:b7:a9:2d:fb:c5: 76:01:e4:61:d6:0d:bd:2f:63:af:50:3e:69:1e:57:29:44:ed: dc:95:d7:82:15:5b:10:55:f1:82:80:83:3b:a6:c1:cd:20:d2: 24:1d:47:18:cc:56:cc:46:8c:92:a0:eb:99:59:99:4f:12:f5: 16:e7:69:d9:33:96:02:36:63:21:fb:ed:10:db:79:cd:aa:b2: 35:a7:8c:44:a2:7b:59:e6:75:54:8d:b6:a6:c4:3d:2d:e8:d0: 01:e6:ed:fa:b0:9d:b2:4d:c1:6f:b2:a9:a2:37:8f:e4:69:f8: 33:e2:da:63:ec:33:fd:d0:4a:e1:7d:59:43:30:d0:37:45:cd: 15:b4:9a:86:4c:dd:46:86:f4:10:51:87:cf:0c:ab:f1:8b:b2: 4d:e6:d7:40:ed:e6:cf:b1:70:fb:55:4a:41:d8:5f:fa:2f:e8: 51:51:69:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDgg1hrMFRH7+qD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YmJjMDZkMmEtZmU3My00MmVhLWI2N2YtMjJhOTM5MDdjYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvmWcGkf2kn3G0pbM+3E1EMGYVdswkrHgnU0 i5hRv9+WjwiMWH+2nnf8L7e8MwER7QmDIyGVsbrv+NofEL4bNJc8PbNSzGSzQE0/ dfJvENCmexMAGUJoiuwVX22wFg+rcKklFZwL9KmEynd5lAX5y/hXGXida1hkKyre OExYxbPhGmsZB1j4iU8ucA8z2EUxkt+Tcpi6XhKAsUZcOFMLvKIJd8fA9DmRBQQ2 1VLBmcSKRNoj0y1lq4ytJHWxgfR7xjNbAphBrdPy0GTFPL/6YUuo28CvJzd7Mntx 9Nm5sw4n+ykmB1mfE0eSIpYWHbzTqeju7838uoZHTeS8D6bD+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPml4szptncv0WRWbLWOSSE85RwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDFmYmVmYTktMzE3OS0z ZGRmLThkZGItYmU1MDhhMmU0YTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEujOYLQ/I2yPk3l8X6UFzM6EAMPEXUc4FcGZ4tlEwjf+6QxuISj sqAnZjghDxvpQimMhmVOtUPgjxOclEWEXsJjgHsJ0DheK40HJfjv3BHic6IzoX+3 qS37xXYB5GHWDb0vY69QPmkeVylE7dyV14IVWxBV8YKAgzumwc0g0iQdRxjMVsxG jJKg65lZmU8S9RbnadkzlgI2YyH77RDbec2qsjWnjESie1nmdVSNtqbEPS3o0AHm 7fqwnbJNwW+yqaI3j+Rp+DPi2mPsM/3QSuF9WUMw0DdFzRW0moZM3UaG9BBRh88M q/GLsk3m10Dt5s+xcPtVSkHYX/ov6FFRaVo= -----END CERTIFICATE-----Generated at Wed Oct 29 09:25:59 2025 by rpki-client