$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/563e1ce1-37a7-3814-b75e-702566acc492.roa File: 563e1ce1-37a7-3814-b75e-702566acc492.roa (raw, json) Hash identifier: 6c9U3lvbCnQR1DTihyUtaCJrtjeUA7H3SwlSc9G+FZ0= Subject key identifier: E4:95:A5:CD:F7:6A:31:D2:72:17:81:FC:86:EC:81:58:A8:CC:EF:BB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987231E2C49550EE5D703500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/563e1ce1-37a7-3814-b75e-702566acc492.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 397202 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:31:e2:c4:95:50:ee:5d:70:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=30cbd367-059f-4523-a925-80dd7d657aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:1d:53:4a:48:75:f4:f7:02:6c:46:00:24: 23:52:b7:7e:e0:bb:f4:91:5a:cb:8f:8b:19:f2:79: 6b:15:bc:e7:53:8a:c3:ac:70:a4:d9:13:8d:7d:55: a3:53:60:0d:9f:3d:8a:87:b9:8e:ba:a4:93:f6:fa: 5c:8b:75:df:32:6f:f8:8e:50:50:89:e3:7a:6b:79: f5:90:86:dc:fb:60:6b:d6:52:72:88:8a:98:e5:7f: ac:b2:fd:ee:4c:27:cb:67:36:1e:62:a6:09:1e:ad: 23:bb:b2:db:b7:6b:21:f2:d6:01:cf:06:34:b1:6d: 84:74:07:54:24:d6:83:fa:17:65:7f:38:e3:cb:62: 1a:6c:30:21:da:8c:80:bf:93:7f:73:68:d4:42:49: 34:7c:3f:a6:67:c4:8f:53:d6:f1:08:23:26:99:09: c0:f1:4d:1d:67:1a:cf:cd:d0:81:7d:bb:91:29:9e: 4f:12:cd:70:61:cc:cc:28:79:63:6f:8b:6c:38:76: b0:d0:ca:25:ec:7c:8a:6f:e5:b9:34:12:1d:5d:d2: 72:8c:7a:07:40:52:60:22:98:49:de:f0:68:49:d8: 9c:40:17:01:d0:5d:47:9d:2e:68:2a:dc:73:5a:cc: 91:2f:13:81:c0:b4:5c:4c:34:a9:cc:e7:41:65:2a: 23:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:95:A5:CD:F7:6A:31:D2:72:17:81:FC:86:EC:81:58:A8:CC:EF:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/563e1ce1-37a7-3814-b75e-702566acc492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:34:b1:14:b9:5e:b0:b1:5e:37:15:60:95:09:ca:d1:43:55: 3a:d9:ff:36:47:a9:d7:29:2b:90:9b:0c:ac:94:14:88:50:0a: 90:b8:41:de:83:d6:b5:59:ec:7d:5d:a7:f8:0f:6e:9a:e3:9e: 7b:31:6a:68:49:5c:ab:55:15:73:87:eb:97:b8:5a:44:2f:cd: 01:4f:cb:47:00:a4:1e:bc:ea:1c:b8:8e:8d:13:f3:41:68:83: 9d:00:af:14:bc:91:ff:3a:cc:37:84:ff:07:7b:d4:9b:30:a2: 5a:62:b0:23:14:16:f6:45:cb:da:f6:43:c3:7e:eb:9f:46:d4: c3:4f:f3:89:4a:b3:be:66:92:f2:d4:d6:38:51:6d:57:07:53: 34:5a:06:84:a4:0d:02:59:52:4b:59:2e:f1:c6:39:b6:4d:2f: 4b:54:e6:95:ad:82:15:70:bd:fc:66:f2:4c:a5:7a:b1:0e:02: e2:64:73:fb:e2:a5:c8:db:23:33:8e:0d:6f:6e:24:28:b0:74: dc:7a:cf:e8:6f:5d:5f:df:fa:c3:f8:86:8b:2a:03:fb:72:4c: 4d:a0:fe:49:72:ea:bf:d2:6f:6e:10:2d:50:e0:d6:00:43:59: 81:4a:70:60:07:61:29:34:63:99:3e:a5:27:3a:7e:a7:8e:77: d8:2c:36:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjHixJVQ7l1wNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MzBjYmQzNjctMDU5Zi00NTIzLWE5MjUtODBkZDdkNjU3YWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoggdU0pIdfT3AmxGACQjUrd+4Lv0kVrLj4sZ 8nlrFbznU4rDrHCk2RONfVWjU2ANnz2Kh7mOuqST9vpci3XfMm/4jlBQieN6a3n1 kIbc+2Br1lJyiIqY5X+ssv3uTCfLZzYeYqYJHq0ju7Lbt2sh8tYBzwY0sW2EdAdU JNaD+hdlfzjjy2IabDAh2oyAv5N/c2jUQkk0fD+mZ8SPU9bxCCMmmQnA8U0dZxrP zdCBfbuRKZ5PEs1wYczMKHljb4tsOHaw0Mol7HyKb+W5NBIdXdJyjHoHQFJgIphJ 3vBoSdicQBcB0F1HnS5oKtxzWsyRLxOBwLRcTDSpzOdBZSojmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOSVpc33ajHScheB/IbsgViozO+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTYzZTFjZTEtMzdhNy0z ODE0LWI3NWUtNzAyNTY2YWNjNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABY0sRS5XrCxXjcVYJUJytFDVTrZ/zZHqdcpK5CbDKyUFIhQCpC4 Qd6D1rVZ7H1dp/gPbprjnnsxamhJXKtVFXOH65e4WkQvzQFPy0cApB686hy4jo0T 80Fog50ArxS8kf86zDeE/wd71JswolpisCMUFvZFy9r2Q8N+659G1MNP84lKs75m kvLU1jhRbVcHUzRaBoSkDQJZUktZLvHGObZNL0tU5pWtghVwvfxm8kylerEOAuJk c/vipcjbIzOODW9uJCiwdNx6z+hvXV/f+sP4hosqA/tyTE2g/kly6r/Sb24QLVDg 1gBDWYFKcGAHYSk0Y5k+pSc6fqeOd9gsNno= -----END CERTIFICATE-----Generated at Wed Oct 29 07:07:49 2025 by rpki-client