$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645cc667-1b37-33b2-a170-11b1a45919c2.roa File: 645cc667-1b37-33b2-a170-11b1a45919c2.roa (raw, json) Hash identifier: D1fjwP/kcYv9osKsGHrY087UL5tGtHAo1wfE9hkhMQ8= Subject key identifier: E0:16:1A:E6:62:DA:85:01:5B:56:82:91:D7:49:1A:A5:CA:EF:12:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987236A819B89FE20B2A9F20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645cc667-1b37-33b2-a170-11b1a45919c2.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396575 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:36:a8:19:b8:9f:e2:0b:2a:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=16cafb3f-ba62-49a6-b9fd-0fb32a95dacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:80:2b:e3:65:41:99:9c:cb:dc:cf:41:8c: 4c:62:d6:74:72:73:a6:05:77:23:d4:32:87:60:c1: 8c:99:40:4c:6d:0e:be:1d:52:6e:29:7a:17:e9:7b: 24:58:d2:47:dc:43:14:44:eb:a7:5a:c1:0a:23:03: f1:e8:d1:ef:85:a7:1a:55:f0:45:dc:df:05:cb:77: 6c:1d:6a:0e:d3:b3:cf:34:b0:42:81:36:a5:97:bc: f4:c3:8c:f9:2e:85:0d:5c:dd:9f:d5:0d:5d:c2:5b: ea:b3:a0:64:31:15:bb:1c:47:90:65:0e:0e:7a:3e: 5c:f8:34:11:ab:29:6c:66:ac:d1:10:8b:81:51:b0: 43:a8:a5:81:da:98:f0:fa:ca:17:5a:8e:68:47:21: 6d:9a:6d:17:b1:5b:79:ee:69:12:47:1d:e7:53:00: 10:13:fb:19:62:83:69:49:cd:fe:fd:87:f0:bc:95: 64:d8:a0:e1:f1:58:3a:17:a9:d0:a1:33:5d:f2:1b: 83:ca:62:fc:95:6e:e8:68:a5:2e:19:56:eb:62:d9: 6e:cf:5d:de:f7:3a:f4:b6:0e:89:4e:23:39:28:e9: d9:85:5b:6d:c7:f0:30:80:b0:43:fe:dd:ba:5d:ea: ed:7d:20:74:83:83:42:6d:60:91:d6:fa:3b:a4:a9: 47:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:16:1A:E6:62:DA:85:01:5B:56:82:91:D7:49:1A:A5:CA:EF:12:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645cc667-1b37-33b2-a170-11b1a45919c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:75:6e:d3:52:0a:ad:9e:ef:79:11:bb:87:1e:82:ca:87:73: 72:09:39:ca:85:2e:0c:a5:26:ca:76:0a:17:29:9f:c6:ee:67: 57:ca:97:98:49:43:de:8e:f8:34:24:f3:1d:f9:69:33:0b:d0: f6:12:a4:29:1c:13:1f:bf:65:2a:14:9b:ac:40:02:09:b9:f6: 17:90:61:bf:fa:b5:e4:6f:65:3f:7e:9b:a2:16:e7:35:83:be: d2:25:a4:e4:6a:a2:70:c5:70:5a:a3:12:28:75:4f:e4:16:24: fa:05:80:db:a5:28:0c:59:c8:57:1a:66:ae:6b:6b:a0:0e:ff: 8f:0c:00:a8:b3:fe:db:82:6a:c2:82:4e:1e:5e:6d:97:ed:8f: 57:af:e3:cd:82:18:39:30:a9:62:38:1a:df:2f:d0:36:9a:be: 98:61:63:c1:22:d7:a8:90:2c:18:39:ba:87:94:90:f7:5d:9b: a3:05:b6:38:0e:eb:8f:e6:ed:7c:b9:48:66:65:b8:1b:17:99: 3d:b1:c3:10:7d:65:b4:b6:ad:19:81:06:45:be:10:c7:fe:d6: 4a:ee:a7:02:df:73:c0:29:e8:b9:4f:ef:b8:64:52:3a:43:b8: f1:4e:6b:54:42:2d:fb:bd:f8:01:ea:2b:5b:63:a0:09:9b:71: 58:21:a3:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjaoGbif4gsqnyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MTZjYWZiM2YtYmE2Mi00OWE2LWI5ZmQtMGZiMzJhOTVkYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AeAK+NlQZmcy9zPQYxMYtZ0cnOmBXcj1DKH YMGMmUBMbQ6+HVJuKXoX6XskWNJH3EMUROunWsEKIwPx6NHvhacaVfBF3N8Fy3ds HWoO07PPNLBCgTall7z0w4z5LoUNXN2f1Q1dwlvqs6BkMRW7HEeQZQ4Oej5c+DQR qylsZqzREIuBUbBDqKWB2pjw+soXWo5oRyFtmm0XsVt57mkSRx3nUwAQE/sZYoNp Sc3+/YfwvJVk2KDh8Vg6F6nQoTNd8huDymL8lW7oaKUuGVbrYtluz13e9zr0tg6J TiM5KOnZhVttx/AwgLBD/t26XertfSB0g4NCbWCR1vo7pKlHgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOAWGuZi2oUBW1aCkddJGqXK7xL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ1Y2M2NjctMWIzNy0z M2IyLWExNzAtMTFiMWE0NTkxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB51btNSCq2e73kRu4cegsqHc3IJOcqFLgylJsp2Chcpn8buZ1fK l5hJQ96O+DQk8x35aTML0PYSpCkcEx+/ZSoUm6xAAgm59heQYb/6teRvZT9+m6IW 5zWDvtIlpORqonDFcFqjEih1T+QWJPoFgNulKAxZyFcaZq5ra6AO/48MAKiz/tuC asKCTh5ebZftj1ev482CGDkwqWI4Gt8v0DaavphhY8Ei16iQLBg5uoeUkPddm6MF tjgO64/m7Xy5SGZluBsXmT2xwxB9ZbS2rRmBBkW+EMf+1krupwLfc8Ap6LlP77hk UjpDuPFOa1RCLfu9+AHqK1tjoAmbcVghowk= -----END CERTIFICATE-----Generated at Wed Oct 29 07:09:32 2025 by rpki-client