$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52c6f7f1-7542-3e09-80fa-886395e34633.roa File: 52c6f7f1-7542-3e09-80fa-886395e34633.roa (raw, json) Hash identifier: cM8TzEpaj/I5+WioYVE9v4bDaJtAxfDpgb4cZVRdhvc= Subject key identifier: 48:91:93:E6:19:6A:08:B3:7A:76:99:F3:D9:4F:68:B3:02:4F:3E:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23A07C37454556F122F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52c6f7f1-7542-3e09-80fa-886395e34633.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396609 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3a:07:c3:74:54:55:6f:12:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=d786cf6f-a2ee-48a0-afda-0db1da5dfa4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:8f:b3:30:57:30:84:04:af:d2:6c:e0:1d: 9a:23:02:4c:9b:d2:a3:62:bd:0b:6a:8e:51:94:28: 8f:a9:2d:c9:3d:69:57:42:bb:7d:1b:21:38:12:4a: 3b:2a:30:12:25:e9:09:89:41:f1:12:f7:07:1f:71: ba:f4:db:b5:6b:9c:3c:cd:c6:ee:f6:7d:b3:da:72: 65:9e:a1:07:3c:bc:39:eb:74:47:37:e4:94:53:2a: 14:70:0c:65:9c:00:08:d1:d0:2a:67:a2:11:f8:18: c9:70:70:58:7f:26:9e:29:04:6d:07:ac:48:5c:bd: 47:d9:6f:ad:12:32:c8:72:e3:2e:20:7b:14:7e:2e: 4a:ce:73:83:c7:ba:21:e3:b3:89:ce:3f:b5:50:83: 06:b6:ff:96:e1:7f:9e:d1:28:0f:7a:71:86:5b:2b: 30:7e:c1:a1:a2:8d:30:e8:73:94:2f:34:b9:b1:65: a1:98:33:1d:ae:25:9b:a5:86:10:a8:85:25:9f:0d: c1:c8:33:18:35:dd:5f:33:6d:79:3b:07:66:77:b2: 87:0e:e4:28:67:61:a1:b3:ee:da:ea:7f:ba:d3:06: 87:12:ed:d0:53:4c:37:03:27:3e:6e:98:b9:9d:37: 93:eb:ff:7f:4c:10:c6:d8:d1:b3:42:7f:0e:2f:b3: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:91:93:E6:19:6A:08:B3:7A:76:99:F3:D9:4F:68:B3:02:4F:3E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52c6f7f1-7542-3e09-80fa-886395e34633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7d:14:0e:d4:c5:97:c2:4f:be:b1:ac:53:c7:3a:23:09:9c: d0:4a:67:e3:ef:41:54:0a:1b:69:41:c1:39:15:67:cf:e7:04: 27:20:29:95:ed:f5:8c:54:5d:2f:60:f5:c8:56:bd:ed:ed:f1: b7:d5:f3:e3:86:58:cb:46:3f:05:99:32:6c:03:1b:fd:34:1e: d5:8d:30:c8:6d:36:94:5f:73:aa:8d:11:04:8c:db:1e:2c:00: e4:ce:61:95:b7:c9:10:e0:72:d3:12:7b:74:fe:df:2b:f4:ec: 65:39:53:a8:41:d1:c9:a9:ac:39:dd:c9:c4:94:9e:02:e5:39: 02:c1:d5:d5:29:0d:fa:64:f5:1e:cb:0b:6f:92:da:d8:10:e7: a7:2b:4a:14:03:33:ea:d4:04:55:e3:fd:34:1e:8b:ec:7e:94: 98:59:86:b6:bb:58:58:cb:f8:32:6d:ec:4d:ed:a0:3d:a5:6e: 8c:d7:16:b1:9a:2e:02:6f:33:27:48:8e:d6:2c:7b:98:d9:28: 3b:c1:f2:29:11:0f:55:29:00:8d:42:29:6d:96:34:ca:de:72: 37:79:e0:3e:81:23:88:a7:46:bd:be:1f:e7:d5:05:75:87:46: a0:14:25:1f:e5:01:64:51:7d:5f:9c:2e:a6:22:7f:69:cc:ea: 0d:39:03:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucojoHw3RUVW8SL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDc4NmNmNmYtYTJlZS00OGEwLWFmZGEtMGRiMWRhNWRmYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCmPszBXMIQEr9Js4B2aIwJMm9KjYr0Lao5R lCiPqS3JPWlXQrt9GyE4Eko7KjASJekJiUHxEvcHH3G69Nu1a5w8zcbu9n2z2nJl nqEHPLw563RHN+SUUyoUcAxlnAAI0dAqZ6IR+BjJcHBYfyaeKQRtB6xIXL1H2W+t EjLIcuMuIHsUfi5KznODx7oh47OJzj+1UIMGtv+W4X+e0SgPenGGWyswfsGhoo0w 6HOULzS5sWWhmDMdriWbpYYQqIUlnw3ByDMYNd1fM215Owdmd7KHDuQoZ2Ghs+7a 6n+60waHEu3QU0w3Ayc+bpi5nTeT6/9/TBDG2NGzQn8OL7MTvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEiRk+YZagizenaZ89lPaLMCTz6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTJjNmY3ZjEtNzU0Mi0z ZTA5LTgwZmEtODg2Mzk1ZTM0NjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAF9FA7UxZfCT76xrFPHOiMJnNBKZ+PvQVQKG2lBwTkVZ8/nBCcg KZXt9YxUXS9g9chWve3t8bfV8+OGWMtGPwWZMmwDG/00HtWNMMhtNpRfc6qNEQSM 2x4sAOTOYZW3yRDgctMSe3T+3yv07GU5U6hB0cmprDndycSUngLlOQLB1dUpDfpk 9R7LC2+S2tgQ56crShQDM+rUBFXj/TQei+x+lJhZhra7WFjL+DJt7E3toD2lbozX FrGaLgJvMydIjtYse5jZKDvB8ikRD1UpAI1CKW2WNMrecjd54D6BI4inRr2+H+fV BXWHRqAUJR/lAWRRfV+cLqYif2nM6g05A2w= -----END CERTIFICATE-----Generated at Wed Oct 29 09:18:34 2025 by rpki-client