$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/452e80e9-6ab1-3fba-97f2-22c2d0f4a57b.roa File: 452e80e9-6ab1-3fba-97f2-22c2d0f4a57b.roa (raw, json) Hash identifier: fthH8HhaLo0QgJxO6H7WyK1bD1cE+KhZ0pkEiE96364= Subject key identifier: 65:42:42:9C:F6:D6:D1:BC:F3:EA:15:66:49:A5:FA:49:DD:88:8D:D9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724985250F98424DDBD900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/452e80e9-6ab1-3fba-97f2-22c2d0f4a57b.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396611 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:49:85:25:0f:98:42:4d:db:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=45d372d5-970f-4199-913a-8a03e319a862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:72:7f:bb:76:60:b7:f3:88:7c:1b:dc:1f: 8d:cf:09:92:23:42:8f:c3:9a:5f:fb:d4:6a:f5:a9: e1:c4:2d:d2:ba:f9:d6:59:8d:86:0c:62:1c:51:11: a0:7a:5e:56:7a:ce:6e:0d:2e:b9:d0:ab:70:3a:a4: 12:1f:90:3c:d0:97:b7:c5:8f:ec:56:93:57:b3:04: c1:55:c8:8b:ff:58:dc:9b:19:ef:c4:97:be:6a:a9: 49:e7:b9:75:fb:c6:b6:fb:08:fe:c1:04:90:57:a8: 12:e7:1e:dd:c2:ce:70:1a:40:a0:2b:6b:c8:1f:cb: 8f:c9:91:bb:a9:e9:3b:9d:19:fb:82:5e:6b:be:c3: b4:e9:4a:05:ac:b6:14:99:b3:a3:c9:7e:a1:71:52: 61:2c:3c:13:94:5f:e8:06:ae:67:b2:5d:e1:ec:ee: fd:38:d6:a2:fd:b7:9f:3e:8c:3e:ad:46:50:39:c5: 94:e4:02:1e:e7:7b:25:d3:f4:7f:e7:e6:73:aa:57: 06:ab:e1:bd:2b:79:61:64:b0:0d:b8:b5:c9:6a:81: a4:81:60:af:8f:87:7a:61:e4:5c:79:6d:79:af:ea: 8a:57:b8:ab:71:83:f9:0c:f5:0d:c4:3d:c9:9e:3e: 0c:be:f2:98:f8:b2:1c:fd:95:a6:e0:6b:b5:91:57: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:42:42:9C:F6:D6:D1:BC:F3:EA:15:66:49:A5:FA:49:DD:88:8D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/452e80e9-6ab1-3fba-97f2-22c2d0f4a57b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:df:e8:98:c9:ab:ba:d0:9d:00:3a:e9:d7:bb:4f:9c:5d:c5: e0:38:25:3b:fe:49:73:f2:f1:56:4a:aa:7f:08:d3:7a:f9:27: 22:b1:4d:ed:5f:7c:08:0f:df:09:5a:0b:e2:6b:3c:6a:1a:b6: 68:4a:75:ed:ad:3c:48:cc:b1:0a:fd:71:f8:81:77:23:51:0d: 28:46:dc:be:2c:87:b0:07:c2:c1:81:ac:a8:85:14:a0:d4:d6: b1:00:18:72:53:6e:57:c1:c7:a8:c0:e1:dd:54:da:57:c8:9e: 70:bf:1c:f7:ca:4e:7d:2f:d0:37:af:83:21:50:e6:ed:67:74: b4:df:70:92:83:c7:7a:bd:bf:cd:e0:b8:9c:71:11:88:0a:c6: 56:a6:8d:b0:c8:86:99:50:a3:55:bb:6a:c5:a8:38:be:b8:ec: 7b:bc:29:1c:66:26:8a:bb:dd:37:8f:10:ff:df:8a:17:dd:25: ca:7a:38:1d:39:09:45:80:7f:a2:0a:ef:5e:8a:64:f8:29:01: 81:c7:e4:b9:9c:38:27:2c:71:10:86:78:bb:cb:49:a3:f5:37: 22:7e:c2:09:6c:89:67:c0:67:d8:48:97:97:e0:f8:21:57:5a: 3a:e9:f7:de:24:7b:48:8f:27:6c:ac:6a:6c:f9:5e:c4:1f:f3: 31:b0:aa:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckmFJQ+YQk3b2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NDVkMzcyZDUtOTcwZi00MTk5LTkxM2EtOGEwM2UzMTlhODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZlyf7t2YLfziHwb3B+NzwmSI0KPw5pf+9Rq 9anhxC3SuvnWWY2GDGIcURGgel5Wes5uDS650KtwOqQSH5A80Je3xY/sVpNXswTB VciL/1jcmxnvxJe+aqlJ57l1+8a2+wj+wQSQV6gS5x7dws5wGkCgK2vIH8uPyZG7 qek7nRn7gl5rvsO06UoFrLYUmbOjyX6hcVJhLDwTlF/oBq5nsl3h7O79ONai/bef Pow+rUZQOcWU5AIe53sl0/R/5+ZzqlcGq+G9K3lhZLANuLXJaoGkgWCvj4d6YeRc eW15r+qKV7ircYP5DPUNxD3Jnj4MvvKY+LIc/ZWm4Gu1kVclMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVCQpz21tG88+oVZkml+kndiI3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDUyZTgwZTktNmFiMS0z ZmJhLTk3ZjItMjJjMmQwZjRhNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFDf6JjJq7rQnQA66de7T5xdxeA4JTv+SXPy8VZKqn8I03r5JyKx Te1ffAgP3wlaC+JrPGoatmhKde2tPEjMsQr9cfiBdyNRDShG3L4sh7AHwsGBrKiF FKDU1rEAGHJTblfBx6jA4d1U2lfInnC/HPfKTn0v0DevgyFQ5u1ndLTfcJKDx3q9 v83guJxxEYgKxlamjbDIhplQo1W7asWoOL647Hu8KRxmJoq73TePEP/fihfdJcp6 OB05CUWAf6IK716KZPgpAYHH5LmcOCcscRCGeLvLSaP1NyJ+wglsiWfAZ9hIl5fg +CFXWjrp994ke0iPJ2ysamz5XsQf8zGwqq0= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:58 2025 by rpki-client