$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68151d75-90a6-3c49-9e44-b49e1f4d2be5.roa File: 68151d75-90a6-3c49-9e44-b49e1f4d2be5.roa (raw, json) Hash identifier: kg9m+xXZ4nG6nAKwKnHNQo0n2W4wcWADoonw22l2E1Y= Subject key identifier: 4C:1C:73:F5:D3:99:38:5C:83:7F:9B:E6:93:F5:B7:83:DE:21:A0:28 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA22D88450409476ABEFFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68151d75-90a6-3c49-9e44-b49e1f4d2be5.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 20362 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2d:88:45:04:09:47:6a:be:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=abbcb212-5a53-4f2b-8888-74a0c6acbf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:a7:98:c6:fd:2a:e6:99:2f:0e:ca:51:be: f7:fa:1f:03:6f:4b:31:43:97:e9:05:1f:38:ad:c0: 76:c2:92:a1:13:c7:d7:d6:45:3a:e7:3b:88:b5:7a: 17:3a:37:68:71:98:b0:a9:92:c3:e6:36:25:5b:39: aa:2f:49:8e:94:b2:89:28:80:f7:ac:ea:fe:c1:5a: 64:4a:02:30:9a:da:97:4c:4a:f1:80:96:15:3d:97: 12:59:3a:b5:6c:52:a1:cd:66:96:6d:a0:55:3a:ad: 63:1f:c7:65:0a:44:17:9f:b0:5b:3b:01:2e:e8:d2: 61:13:c0:fa:4d:21:63:08:8d:92:0f:02:3a:20:ef: 1f:ff:f6:73:23:04:86:42:ba:cf:69:56:46:01:03: 86:3a:b8:3c:8c:d5:33:34:29:26:f1:22:33:5d:e2: 68:82:14:5f:89:b2:40:7f:71:9f:26:f7:33:75:c8: e2:f5:ca:54:27:85:e0:97:3a:dd:d7:dd:8e:10:c0: 00:e3:e5:78:14:0d:da:7b:41:9c:4e:2c:da:38:6e: 9c:4b:4f:31:6d:57:92:28:fa:5f:c8:72:98:b3:10: 5b:bd:0e:01:09:85:fd:ed:dd:c3:f0:0e:d5:a6:59: 27:0c:80:5b:cc:c8:96:f7:96:b2:34:2f:8f:75:9e: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1C:73:F5:D3:99:38:5C:83:7F:9B:E6:93:F5:B7:83:DE:21:A0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68151d75-90a6-3c49-9e44-b49e1f4d2be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:10:28:b6:22:49:cc:ec:27:c4:eb:96:cb:2e:ef:bf:4c:e1: 15:75:3a:e4:9f:79:cc:ed:44:aa:f6:fe:60:c6:87:88:24:2b: a7:ea:c0:db:98:64:60:d3:10:f7:5e:89:0c:fb:f7:d9:5b:d5: 4a:98:b0:82:4d:a6:83:0c:72:4a:c6:76:c5:0f:8f:13:2d:2c: bf:8f:d5:b6:95:96:75:d0:51:bf:61:42:9a:ac:0c:d1:ae:1c: 8c:65:94:7f:2a:e1:2c:4c:5b:7f:69:2b:8d:fb:51:f1:2f:0e: b7:de:50:c0:d5:3b:ab:d9:cb:22:d0:26:b8:a2:38:ae:4e:d6: 08:b4:03:f9:81:fc:64:59:c8:d7:2c:5d:44:7d:74:d6:16:05: e9:ab:9b:50:66:54:69:a9:20:43:1f:89:81:24:60:42:7c:51: f2:f2:2a:e8:8b:1d:23:a5:8b:08:15:bf:2f:e4:62:f0:62:73: ad:70:87:c0:50:3d:ca:be:2e:e6:4a:99:5e:4c:2a:3e:8c:8f: 8f:39:b0:64:df:15:8f:ce:95:51:36:31:1e:9b:7d:c7:59:a7: 14:26:72:36:52:85:a6:50:0c:f6:6e:ba:93:ed:9b:70:c5:08: 41:10:00:9c:63:e9:23:0e:86:42:c4:da:66:0a:b5:e2:77:1c: bd:43:1d:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoi2IRQQJR2q+/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk YWJiY2IyMTItNWE1My00ZjJiLTg4ODgtNzRhMGM2YWNiZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA2nmMb9KuaZLw7KUb73+h8Db0sxQ5fpBR84 rcB2wpKhE8fX1kU65zuItXoXOjdocZiwqZLD5jYlWzmqL0mOlLKJKID3rOr+wVpk SgIwmtqXTErxgJYVPZcSWTq1bFKhzWaWbaBVOq1jH8dlCkQXn7BbOwEu6NJhE8D6 TSFjCI2SDwI6IO8f//ZzIwSGQrrPaVZGAQOGOrg8jNUzNCkm8SIzXeJoghRfibJA f3GfJvczdcji9cpUJ4Xglzrd192OEMAA4+V4FA3ae0GcTizaOG6cS08xbVeSKPpf yHKYsxBbvQ4BCYX97d3D8A7VplknDIBbzMiW95ayNC+PdZ5CVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEwcc/XTmThcg3+b5pP1t4PeIaAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgxNTFkNzUtOTBhNi0z YzQ5LTllNDQtYjQ5ZTFmNGQyYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALMQKLYiSczsJ8Trlssu779M4RV1OuSfecztRKr2/mDGh4gkK6fq wNuYZGDTEPdeiQz799lb1UqYsIJNpoMMckrGdsUPjxMtLL+P1baVlnXQUb9hQpqs DNGuHIxllH8q4SxMW39pK437UfEvDrfeUMDVO6vZyyLQJriiOK5O1gi0A/mB/GRZ yNcsXUR9dNYWBemrm1BmVGmpIEMfiYEkYEJ8UfLyKuiLHSOliwgVvy/kYvBic61w h8BQPcq+LuZKmV5MKj6Mj485sGTfFY/OlVE2MR6bfcdZpxQmcjZShaZQDPZuupPt m3DFCEEQAJxj6SMOhkLE2mYKteJ3HL1DHdQ= -----END CERTIFICATE-----Generated at Wed Oct 29 07:08:21 2025 by rpki-client