$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9fa854-9697-3e91-a1d2-b34e6534adb6.roa File: 4f9fa854-9697-3e91-a1d2-b34e6534adb6.roa (raw, json) Hash identifier: oHeTJoBaeidAqrJsLqR+wvtTeO0Y4gYwgI6I3FySjLU= Subject key identifier: 0E:94:39:B9:1B:EA:51:0E:23:F5:0D:7D:3C:AB:62:5B:33:97:F8:0E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23DBAD25D6A09CAF2E380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9fa854-9697-3e91-a1d2-b34e6534adb6.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 397201 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3d:ba:d2:5d:6a:09:ca:f2:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=bc3478ce-7ea6-483b-9d07-28573e15bc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:b8:8a:f4:fe:72:7c:c0:5a:db:10:55:09: 3d:6e:ae:e5:ff:9f:ff:72:4c:ce:b9:98:01:08:f7: 07:eb:4e:57:93:e8:57:80:2d:4a:45:df:62:e2:30: 7c:8d:26:72:98:05:02:d1:e8:08:9d:52:70:9b:73: ba:9f:2c:57:42:8d:21:d0:10:0b:a6:d4:59:10:84: d9:7e:a5:e5:e1:89:d7:d8:1c:f7:ab:3d:f6:8d:00: 58:6e:a5:cc:e6:d2:9d:92:bb:be:9a:1f:61:74:2d: 00:66:f9:14:bb:8c:e6:34:f1:87:e0:4a:e7:23:79: 93:f3:86:cb:ff:20:a5:01:99:94:a6:72:f1:90:48: 5b:4c:c6:ce:f5:b7:67:be:8c:28:da:ac:c2:35:33: 79:23:c9:76:a6:2f:b2:82:36:20:65:c3:7f:24:ec: 1e:67:26:b6:35:a1:de:5e:39:09:54:9c:50:75:66: a5:e8:b0:6e:a9:f4:06:89:28:41:c7:98:0d:a6:c4: 5b:c6:bb:28:cc:88:65:5b:a0:ee:8f:61:70:36:0c: b5:90:54:e9:26:7b:00:f5:64:33:b9:17:d7:5f:1c: f1:74:71:fe:86:4e:76:db:6a:eb:8f:29:e7:c8:d8: 23:78:a9:92:75:99:bd:3f:a3:27:e6:68:0c:6e:29: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:94:39:B9:1B:EA:51:0E:23:F5:0D:7D:3C:AB:62:5B:33:97:F8:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9fa854-9697-3e91-a1d2-b34e6534adb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7e:52:9b:3f:39:06:6d:fe:3f:0f:ce:d8:80:c2:d7:07:d2: e7:76:4a:61:44:83:ff:4f:c3:ca:7f:f0:eb:65:d1:1e:41:b8: f2:17:7c:75:47:3d:8a:57:eb:52:98:5d:b5:ce:82:3f:68:5a: be:69:e6:4e:d7:5f:cd:1f:fd:e4:f4:78:bc:5b:37:9d:b5:88: 0b:60:be:c5:40:99:d5:a3:ec:d8:14:90:2c:2c:d4:e6:82:95: 34:e0:81:bc:19:16:e6:44:93:24:65:fa:25:8c:06:66:91:90: e4:b7:32:6e:d8:20:86:b8:cb:5c:ca:3f:4b:93:03:30:95:05: 0a:c3:79:9e:dc:44:c9:d4:d2:ef:5a:30:13:9c:bf:ce:10:21: d0:a2:f5:ab:64:24:dc:40:5c:5a:9c:b9:cf:b7:ed:80:2b:0c: d0:31:fc:2b:80:09:55:db:9b:ad:08:e4:db:74:58:8b:1b:94: 43:1b:d9:2b:71:e0:b6:bf:a4:d3:e2:05:08:35:68:3e:1d:47: ed:49:6d:27:a4:f5:05:3c:5a:78:79:fd:3a:da:5d:08:8a:c5: 51:e1:28:2d:12:e4:c3:d2:dd:e2:78:a3:a9:f9:31:cc:5b:df: 56:74:1d:b3:45:d5:9c:99:15:07:bd:09:75:1b:5d:31:73:23: 40:c3:f3:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoj260l1qCcry44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk YmMzNDc4Y2UtN2VhNi00ODNiLTlkMDctMjg1NzNlMTViYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHq4ivT+cnzAWtsQVQk9bq7l/5//ckzOuZgB CPcH605Xk+hXgC1KRd9i4jB8jSZymAUC0egInVJwm3O6nyxXQo0h0BALptRZEITZ fqXl4YnX2Bz3qz32jQBYbqXM5tKdkru+mh9hdC0AZvkUu4zmNPGH4ErnI3mT84bL /yClAZmUpnLxkEhbTMbO9bdnvowo2qzCNTN5I8l2pi+ygjYgZcN/JOweZya2NaHe XjkJVJxQdWal6LBuqfQGiShBx5gNpsRbxrsozIhlW6Duj2FwNgy1kFTpJnsA9WQz uRfXXxzxdHH+hk5222rrjynnyNgjeKmSdZm9P6Mn5mgMbinUTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA6UObkb6lEOI/UNfTyrYlszl/gOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY5ZmE4NTQtOTY5Ny0z ZTkxLWExZDItYjM0ZTY1MzRhZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJ+Ups/OQZt/j8PztiAwtcH0ud2SmFEg/9Pw8p/8Otl0R5BuPIX fHVHPYpX61KYXbXOgj9oWr5p5k7XX80f/eT0eLxbN521iAtgvsVAmdWj7NgUkCws 1OaClTTggbwZFuZEkyRl+iWMBmaRkOS3Mm7YIIa4y1zKP0uTAzCVBQrDeZ7cRMnU 0u9aMBOcv84QIdCi9atkJNxAXFqcuc+37YArDNAx/CuACVXbm60I5Nt0WIsblEMb 2Stx4La/pNPiBQg1aD4dR+1JbSek9QU8Wnh5/TraXQiKxVHhKC0S5MPS3eJ4o6n5 Mcxb31Z0HbNF1ZyZFQe9CXUbXTFzI0DD83s= -----END CERTIFICATE-----Generated at Wed Oct 29 07:19:52 2025 by rpki-client