$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e2f1fc5-a216-3c58-a1cb-98e0e1d29fb0.roa File: 5e2f1fc5-a216-3c58-a1cb-98e0e1d29fb0.roa (raw, json) Hash identifier: QuaUVUP33zt2ulbUHUy1TQhxgd1DCrBfCCTpCqmOpu0= Subject key identifier: E7:6B:C9:E1:3D:5F:FF:C8:B3:53:D3:D4:39:EC:0B:D2:50:7A:6E:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA229166722883AF98EBA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e2f1fc5-a216-3c58-a1cb-98e0e1d29fb0.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 19836 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:29:16:67:22:88:3a:f9:8e:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=40c7bb41-c498-4e9d-a8e9-5a52acfca063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:e0:89:60:41:83:0c:dd:4e:a9:61:18:1c: d7:94:34:c6:39:19:58:3e:b9:ab:5f:bc:31:2d:f1: 56:20:3b:f1:54:6f:7e:62:4d:6b:65:60:1d:f5:d1: 2e:e1:25:8c:62:1f:07:83:eb:4b:1c:0c:31:37:54: 6b:10:6c:77:06:68:98:e5:10:5a:ef:d5:ae:cc:6c: de:30:03:94:c1:74:55:85:31:c9:75:ec:46:3c:dd: 1c:35:41:e2:24:c2:25:b8:c6:b8:1e:3d:7a:ec:bf: 30:06:71:cf:be:83:c1:68:ef:92:4f:b5:ba:52:ed: f3:c7:a2:3b:bc:d0:0d:c4:6e:a4:86:92:5c:b1:7b: 6c:0e:f9:9a:de:5c:9c:60:7d:1b:3f:7d:02:53:ed: f7:76:0d:ba:86:66:41:58:ce:f3:2d:b2:4e:90:e4: 5c:b6:4e:ad:87:ca:1b:c7:19:f8:2b:c2:2c:a8:7b: d4:a8:7f:58:2e:ab:51:90:b3:9d:85:01:cc:bc:bc: a4:c7:01:81:56:77:c2:ce:bd:f2:ed:74:a4:18:f6: ca:aa:55:df:31:61:8f:1c:5c:d7:cf:ad:a1:44:d8: 72:4c:b8:51:c7:84:08:fb:40:bb:c4:7d:69:7c:84: 02:c8:b0:f4:f9:2d:55:e1:c1:95:e6:df:c5:3f:2a: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6B:C9:E1:3D:5F:FF:C8:B3:53:D3:D4:39:EC:0B:D2:50:7A:6E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e2f1fc5-a216-3c58-a1cb-98e0e1d29fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:60:af:e0:0d:d6:12:03:e8:7a:2b:1d:04:b2:9f:f7:b7:f3: cc:3b:51:2d:2a:b7:ad:2a:72:f9:9b:56:19:83:62:77:b3:e2: 6d:cb:db:9e:d8:43:70:62:9d:7c:0d:46:57:ce:68:8d:da:98: f6:c3:74:a7:40:92:3c:ca:66:18:fd:72:e6:02:6a:ab:f3:24: 24:ef:23:b5:53:3d:cc:46:5a:70:cb:9e:be:4b:ad:46:61:5d: 4d:39:a2:ed:32:99:56:2c:00:4d:77:5c:ae:e2:73:6f:c7:57: e3:63:30:88:26:36:7f:0b:73:ce:1e:50:c3:d3:40:7d:ae:68: 29:26:ef:a0:5a:3a:eb:42:34:ef:35:09:2d:4f:2e:4b:8d:44: 5d:d2:52:5c:86:90:ef:fb:5e:5b:0a:fe:97:9d:92:88:9d:fc: 09:8f:36:ca:ed:91:26:2f:1a:5f:a4:7a:fc:a7:7e:ff:51:9f: 7c:bc:92:db:d8:cf:86:e4:e1:04:e2:d0:6d:a5:4f:3c:e4:91: 55:a0:03:bc:e4:89:b6:0b:c4:ad:76:25:d1:57:ff:cc:88:19: 4c:7a:bb:0f:34:bc:25:61:61:f8:90:79:66:8c:a6:a5:41:66: 25:f3:55:e2:47:32:68:19:fd:2d:00:fb:d3:02:d5:6c:41:a0: b9:be:cd:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoikWZyKIOvmOuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk NDBjN2JiNDEtYzQ5OC00ZTlkLWE4ZTktNWE1MmFjZmNhMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3/giWBBgwzdTqlhGBzXlDTGORlYPrmrX7wx LfFWIDvxVG9+Yk1rZWAd9dEu4SWMYh8Hg+tLHAwxN1RrEGx3BmiY5RBa79WuzGze MAOUwXRVhTHJdexGPN0cNUHiJMIluMa4Hj167L8wBnHPvoPBaO+ST7W6Uu3zx6I7 vNANxG6khpJcsXtsDvma3lycYH0bP30CU+33dg26hmZBWM7zLbJOkORctk6th8ob xxn4K8IsqHvUqH9YLqtRkLOdhQHMvLykxwGBVnfCzr3y7XSkGPbKqlXfMWGPHFzX z62hRNhyTLhRx4QI+0C7xH1pfIQCyLD0+S1V4cGV5t/FPyqspQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOdryeE9X//Is1PT1DnsC9JQem5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWUyZjFmYzUtYTIxNi0z YzU4LWExY2ItOThlMGUxZDI5ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALxgr+AN1hID6HorHQSyn/e388w7US0qt60qcvmbVhmDYnez4m3L 257YQ3BinXwNRlfOaI3amPbDdKdAkjzKZhj9cuYCaqvzJCTvI7VTPcxGWnDLnr5L rUZhXU05ou0ymVYsAE13XK7ic2/HV+NjMIgmNn8Lc84eUMPTQH2uaCkm76BaOutC NO81CS1PLkuNRF3SUlyGkO/7XlsK/pedkoid/AmPNsrtkSYvGl+kevynfv9Rn3y8 ktvYz4bk4QTi0G2lTzzkkVWgA7zkibYLxK12JdFX/8yIGUx6uw80vCVhYfiQeWaM pqVBZiXzVeJHMmgZ/S0A+9MC1WxBoLm+zSI= -----END CERTIFICATE-----Generated at Wed Oct 29 09:02:41 2025 by rpki-client