$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55590022-bddb-3f25-b282-9e7dfdc8ff1d.roa File: 55590022-bddb-3f25-b282-9e7dfdc8ff1d.roa (raw, json) Hash identifier: dYq9JdBQ2LFbQatX2hBbtZlvLiKYhRsjGYlZ9l1Rm7g= Subject key identifier: 9B:D2:6A:FB:0A:76:92:BE:47:D2:EC:FA:83:41:A4:B4:99:CC:37:B6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA239F555C03FD5BE572100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55590022-bddb-3f25-b282-9e7dfdc8ff1d.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396605 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:39:f5:55:c0:3f:d5:be:57:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=778b7fb9-3297-401a-8694-71f71b620c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:80:f8:17:c5:ed:bf:e1:50:26:69:7c:d5: 03:50:25:19:50:56:88:c8:65:c8:be:31:a7:81:92: 5c:0d:8f:90:4b:1f:2a:7d:d0:52:2f:da:3c:bb:4b: 48:12:93:ea:66:8a:f5:86:51:ce:f8:ed:23:c6:72: 87:55:6c:29:80:2d:26:f8:14:69:fd:00:49:2e:98: 34:75:84:a2:0f:ce:73:01:04:a3:93:3f:71:d3:d5: 9f:56:18:e9:02:51:2b:b6:f9:98:6c:2e:1a:30:2e: 4b:19:52:51:15:5b:f2:21:07:1c:a4:c5:54:9b:58: 7b:69:5c:56:b0:e1:8e:ba:fa:3c:dd:bd:85:72:e0: 95:99:17:95:09:3f:80:d6:a4:00:4b:30:51:b5:c2: 0d:cb:e4:2b:86:0b:d4:66:3b:1d:a3:4e:a2:80:16: ed:d8:12:97:aa:50:f5:1a:4f:48:48:ba:7b:5d:d7: 57:5b:4e:0c:a6:19:53:bf:ad:3d:7c:d5:5a:94:de: dc:a9:95:c9:fb:09:aa:11:cf:20:83:6c:0d:3c:f7: 15:c6:4a:81:98:e4:0e:cd:0d:3a:eb:5c:d5:e2:fc: 65:4d:7e:9d:8e:65:4e:f1:b8:df:2a:50:04:57:4a: ae:94:c6:4e:03:4f:84:ff:75:51:f3:27:97:de:7e: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D2:6A:FB:0A:76:92:BE:47:D2:EC:FA:83:41:A4:B4:99:CC:37:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55590022-bddb-3f25-b282-9e7dfdc8ff1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:55:38:2f:26:20:bf:50:2c:b7:1a:10:13:82:c6:e9:1b:bf: ac:b9:45:31:a9:01:f1:13:30:b0:ff:54:78:fb:83:0b:64:7b: ce:79:39:1b:1c:c2:3b:2c:7c:73:2e:d8:77:7c:e1:af:8d:42: 37:15:d1:87:d4:bd:2c:50:bc:43:d1:c6:6c:4d:5f:70:1a:70: ce:93:fc:72:23:01:cc:83:e0:99:19:b0:48:3e:6e:68:f0:98: 92:de:4a:e9:70:a6:36:3d:ec:ae:de:01:a5:db:5c:39:72:3f: 47:00:05:37:1a:1a:d6:6b:e2:3a:ab:9c:9b:32:bc:c9:7d:55: 0f:f0:29:46:2f:85:86:7d:2c:bf:87:b4:60:5a:23:5c:af:25: 72:d1:06:ca:e7:48:32:f3:2a:8d:99:0b:54:f1:29:96:81:46: 7a:1b:a6:aa:97:1d:4a:9e:d3:34:98:99:25:bf:96:4a:7b:28: e6:a2:a8:e8:07:2a:46:7f:17:3b:4d:92:ef:91:35:62:6c:d9: 30:9a:d7:42:ab:b1:f8:6b:85:fc:f3:4d:e6:7d:11:71:2b:46: 66:6b:7f:03:7c:a1:fd:56:e2:ed:ab:6f:63:43:88:c3:42:ea: d5:b4:16:e2:eb:1c:f2:5a:d7:0b:5b:9c:7e:15:db:04:7c:44: c5:e6:9c:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucojn1VcA/1b5XIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk Nzc4YjdmYjktMzI5Ny00MDFhLTg2OTQtNzFmNzFiNjIwYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6uA+BfF7b/hUCZpfNUDUCUZUFaIyGXIvjGn gZJcDY+QSx8qfdBSL9o8u0tIEpPqZor1hlHO+O0jxnKHVWwpgC0m+BRp/QBJLpg0 dYSiD85zAQSjkz9x09WfVhjpAlErtvmYbC4aMC5LGVJRFVvyIQccpMVUm1h7aVxW sOGOuvo83b2FcuCVmReVCT+A1qQASzBRtcINy+QrhgvUZjsdo06igBbt2BKXqlD1 Gk9ISLp7XddXW04MphlTv609fNValN7cqZXJ+wmqEc8gg2wNPPcVxkqBmOQOzQ06 61zV4vxlTX6djmVO8bjfKlAEV0qulMZOA0+E/3VR8yeX3n7p6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJvSavsKdpK+R9Ls+oNBpLSZzDe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTU1OTAwMjItYmRkYi0z ZjI1LWIyODItOWU3ZGZkYzhmZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJlVOC8mIL9QLLcaEBOCxukbv6y5RTGpAfETMLD/VHj7gwtke855 ORscwjssfHMu2Hd84a+NQjcV0YfUvSxQvEPRxmxNX3AacM6T/HIjAcyD4JkZsEg+ bmjwmJLeSulwpjY97K7eAaXbXDlyP0cABTcaGtZr4jqrnJsyvMl9VQ/wKUYvhYZ9 LL+HtGBaI1yvJXLRBsrnSDLzKo2ZC1TxKZaBRnobpqqXHUqe0zSYmSW/lkp7KOai qOgHKkZ/FztNku+RNWJs2TCa10KrsfhrhfzzTeZ9EXErRmZrfwN8of1W4u2rb2ND iMNC6tW0FuLrHPJa1wtbnH4V2wR8RMXmnLc= -----END CERTIFICATE-----Generated at Wed Oct 29 09:17:33 2025 by rpki-client