$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/447dfb85-e2a0-3954-9d1a-16ac9889f2cd.roa File: 447dfb85-e2a0-3954-9d1a-16ac9889f2cd.roa (raw, json) Hash identifier: yFRPXDzL64j+DnVyrxwpmppNm70lghlXXq5Lg9PzEDc= Subject key identifier: D5:E8:3B:BA:D8:DE:72:3E:46:65:D0:AD:E5:51:06:EC:9B:F5:5B:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA227E7E4EECA206E81CE30 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/447dfb85-e2a0-3954-9d1a-16ac9889f2cd.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 36623 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:27:e7:e4:ee:ca:20:6e:81:ce:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=454007e7-3799-4e66-9877-0b56043c656d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:85:95:35:c7:02:6f:b2:03:5a:bf:cc:11:7f: bb:12:c9:2f:eb:5d:b2:cc:df:cb:06:cf:9d:61:b4: 2b:63:96:93:cd:e7:d2:a8:ed:fc:84:2e:c0:4d:a5: fe:87:c8:f1:da:6d:99:35:a3:24:63:ae:ed:6f:b9: 89:3b:14:9f:fc:47:50:ee:8f:d4:fa:37:bd:6f:ac: ca:4e:de:5d:a2:01:f6:6d:c7:73:c5:21:c1:e1:76: 62:34:b0:62:97:4e:0e:a4:1b:73:7d:28:f7:2e:60: b9:2c:52:83:2a:09:52:5b:5b:16:0b:69:65:31:aa: 64:60:53:92:b7:5c:c0:13:ce:0d:02:cf:60:1f:5b: 05:bb:43:54:e6:60:1a:ec:66:80:d0:34:dc:16:b5: 33:63:a0:0f:c3:39:34:53:fa:4d:2f:a6:9f:07:9c: 66:38:01:83:ab:1a:5b:38:f2:d4:75:be:fb:cc:c4: 89:dd:df:d2:92:ad:a8:3a:a2:b7:48:d3:3c:6f:98: 2c:fe:d9:cc:9a:3f:54:b6:67:4e:64:da:81:d5:49: 28:e4:3e:06:03:9c:55:bb:ca:23:3c:0e:aa:b3:7f: d6:9f:bd:e4:60:6a:bf:ac:e4:4e:de:7a:3c:9b:d6: 13:bb:5e:1e:12:4a:6f:52:6c:a8:85:fb:8f:cb:d1: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E8:3B:BA:D8:DE:72:3E:46:65:D0:AD:E5:51:06:EC:9B:F5:5B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/447dfb85-e2a0-3954-9d1a-16ac9889f2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:99:b2:4e:41:72:a5:97:94:bd:92:35:1d:29:f9:dd:a3:49: 04:6f:59:81:96:d4:46:d0:76:03:c2:e6:d4:5d:6c:21:11:a5: e3:9a:c4:30:ac:f6:bb:87:f4:1c:5e:7a:d3:34:64:f8:f4:45: 27:68:ca:65:d3:6a:ef:3e:e1:11:ca:aa:3a:80:49:76:74:13: 2b:96:f4:71:25:8a:d8:84:de:23:6b:9b:65:16:b5:55:db:e6: 8e:a8:66:26:f0:80:01:6d:fd:b9:70:66:f2:ad:09:a0:0b:77: ed:5b:1c:dd:2e:a0:f9:5f:f6:3b:5c:c6:52:0b:3e:bf:88:4e: dc:96:40:5d:7f:d3:6e:f9:87:fe:0e:c1:04:4c:84:68:fb:35: cb:88:5b:fd:9f:f9:88:6e:dd:4b:0a:ef:23:3a:91:15:0f:97: 4a:d3:92:2f:28:2d:fc:48:be:b5:5e:ec:8b:64:6e:35:c6:73: c4:37:84:49:77:38:a7:61:0a:c9:05:72:ab:b5:ba:b5:bc:bc: 0e:1f:70:e5:32:cf:6d:83:f2:03:f2:48:9b:23:60:03:e6:bd: 74:bd:a5:91:0a:2b:af:2d:07:ce:1f:6f:51:f9:1c:af:37:ff: 73:6c:b3:93:0c:09:e6:2c:b5:4a:17:fb:62:ee:5a:a8:0d:e1: 38:c5:70:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoifn5O7KIG6BzjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk NDU0MDA3ZTctMzc5OS00ZTY2LTk4NzctMGI1NjA0M2M2NTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4WVNccCb7IDWr/MEX+7Eskv612yzN/LBs+d YbQrY5aTzefSqO38hC7ATaX+h8jx2m2ZNaMkY67tb7mJOxSf/EdQ7o/U+je9b6zK Tt5dogH2bcdzxSHB4XZiNLBil04OpBtzfSj3LmC5LFKDKglSW1sWC2llMapkYFOS t1zAE84NAs9gH1sFu0NU5mAa7GaA0DTcFrUzY6APwzk0U/pNL6afB5xmOAGDqxpb OPLUdb77zMSJ3d/Skq2oOqK3SNM8b5gs/tnMmj9UtmdOZNqB1Uko5D4GA5xVu8oj PA6qs3/Wn73kYGq/rORO3no8m9YTu14eEkpvUmyohfuPy9FdlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNXoO7rY3nI+RmXQreVRBuyb9VvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDQ3ZGZiODUtZTJhMC0z OTU0LTlkMWEtMTZhYzk4ODlmMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESZsk5BcqWXlL2SNR0p+d2jSQRvWYGW1EbQdgPC5tRdbCERpeOa xDCs9ruH9BxeetM0ZPj0RSdoymXTau8+4RHKqjqASXZ0EyuW9HElitiE3iNrm2UW tVXb5o6oZibwgAFt/blwZvKtCaALd+1bHN0uoPlf9jtcxlILPr+ITtyWQF1/0275 h/4OwQRMhGj7NcuIW/2f+Yhu3UsK7yM6kRUPl0rTki8oLfxIvrVe7ItkbjXGc8Q3 hEl3OKdhCskFcqu1urW8vA4fcOUyz22D8gPySJsjYAPmvXS9pZEKK68tB84fb1H5 HK83/3Nss5MMCeYstUoX+2LuWqgN4TjFcOQ= -----END CERTIFICATE-----Generated at Wed Oct 29 07:19:22 2025 by rpki-client