$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688b0251-f7d6-3faf-a975-4b63a643094f.roa File: 688b0251-f7d6-3faf-a975-4b63a643094f.roa (raw, json) Hash identifier: eQ5iM1u/GQROhNIaJvXDYmlJlsbckf8VWTSnh8M+HBA= Subject key identifier: F9:AA:F9:CE:3C:07:AE:09:4F:4F:14:17:90:00:D6:BD:35:03:FA:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA22C0646984B5684876D64 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688b0251-f7d6-3faf-a975-4b63a643094f.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 397210 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2c:06:46:98:4b:56:84:87:6d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=1b0ebf3e-3eda-4efc-9c24-66d85b21b3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:fb:a5:41:c9:20:2a:dc:a2:e8:0f:72:e6: 26:c6:ab:0e:26:ae:44:e8:a0:35:eb:bb:ba:9e:a5: 73:57:9c:6c:18:fd:68:9e:06:7e:02:1f:13:dd:71: 46:01:40:f5:3f:8a:e9:da:0a:06:7c:7f:a5:d9:21: a2:40:a9:1c:f4:64:b1:54:3a:9f:15:98:3a:20:05: 40:af:bc:b3:40:e8:f3:48:a6:5f:8a:4f:cc:67:80: 3d:f1:b0:f9:51:fa:31:1d:fd:2b:2b:b6:d0:2c:35: 9b:af:75:52:51:85:fb:6a:89:5a:8c:83:71:ec:2f: 38:97:27:e4:d8:d4:04:21:11:97:74:03:c2:ff:0b: bf:8d:82:1f:a1:f6:7e:29:7f:58:10:89:8e:07:54: c4:1e:b5:b9:53:c5:b8:52:66:37:d3:75:6e:99:3f: 12:f7:7b:48:3c:13:51:e2:97:f8:4c:cb:54:63:ce: 9b:7a:63:a0:2d:77:1f:ed:ea:8f:d7:86:22:a3:c2: ed:51:cd:11:ce:e6:a3:91:16:36:52:39:0e:f9:67: 36:0f:0d:1a:b6:c0:1a:37:d0:c0:df:ac:f4:20:30: d2:1e:89:55:c5:44:11:84:aa:10:c9:b4:20:f0:7d: 9f:f3:b2:ae:b2:88:22:1d:a1:b3:b7:9d:d9:01:3f: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AA:F9:CE:3C:07:AE:09:4F:4F:14:17:90:00:D6:BD:35:03:FA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688b0251-f7d6-3faf-a975-4b63a643094f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ea:2e:88:b0:e4:53:b6:2f:76:f8:ff:f5:32:87:72:6a:d2: 60:de:28:26:c9:72:bf:f4:f2:3d:99:a6:f6:cc:06:66:9d:9e: b7:27:0e:33:e2:b0:e3:43:87:11:81:30:75:d9:88:70:ca:17: 6a:28:3c:32:d3:df:5d:07:05:25:8e:53:9e:1c:9a:dc:d1:cf: 78:19:df:3f:e4:73:38:67:d2:6d:39:42:78:15:8d:c7:ed:9f: 6a:ff:66:76:1e:9a:ad:f2:6e:7e:7c:f6:63:b1:95:95:cd:a6: 7b:be:bd:70:72:0b:ab:b5:cd:be:d1:b7:8f:fc:60:89:aa:ff: 2a:6d:ff:30:9f:7a:c6:6d:58:05:76:50:2f:de:f7:8a:f5:b9: 44:da:08:35:2d:ee:ec:20:d9:ba:a5:b3:45:d4:80:bc:aa:e1: 30:de:48:58:be:23:14:f3:14:88:c5:e2:a8:50:61:1d:97:15: df:6a:06:e0:20:b6:a2:67:8a:c4:71:b0:3a:fc:8a:08:b6:84: e6:f2:41:0c:02:0e:ed:59:40:99:4d:68:df:02:d2:85:2a:b4: c4:64:4a:3f:62:11:9e:d9:ed:c3:60:0c:c9:04:66:bf:a9:f0: da:d6:e2:74:84:e5:97:7d:1f:5d:11:6c:03:53:74:96:de:80: 60:1e:84:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoiwGRphLVoSHbWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MWIwZWJmM2UtM2VkYS00ZWZjLTljMjQtNjZkODViMjFiM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutr7pUHJICrcougPcuYmxqsOJq5E6KA167u6 nqVzV5xsGP1ongZ+Ah8T3XFGAUD1P4rp2goGfH+l2SGiQKkc9GSxVDqfFZg6IAVA r7yzQOjzSKZfik/MZ4A98bD5UfoxHf0rK7bQLDWbr3VSUYX7aolajINx7C84lyfk 2NQEIRGXdAPC/wu/jYIfofZ+KX9YEImOB1TEHrW5U8W4UmY303VumT8S93tIPBNR 4pf4TMtUY86bemOgLXcf7eqP14Yio8LtUc0RzuajkRY2UjkO+Wc2Dw0atsAaN9DA 36z0IDDSHolVxUQRhKoQybQg8H2f87KusogiHaGzt53ZAT9K5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPmq+c48B64JT08UF5AA1r01A/pPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg4YjAyNTEtZjdkNi0z ZmFmLWE5NzUtNGI2M2E2NDMwOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPqLoiw5FO2L3b4//Uyh3Jq0mDeKCbJcr/08j2ZpvbMBmadnrcn DjPisONDhxGBMHXZiHDKF2ooPDLT310HBSWOU54cmtzRz3gZ3z/kczhn0m05QngV jcftn2r/ZnYemq3ybn589mOxlZXNpnu+vXByC6u1zb7Rt4/8YImq/ypt/zCfesZt WAV2UC/e94r1uUTaCDUt7uwg2bqls0XUgLyq4TDeSFi+IxTzFIjF4qhQYR2XFd9q BuAgtqJnisRxsDr8igi2hObyQQwCDu1ZQJlNaN8C0oUqtMRkSj9iEZ7Z7cNgDMkE Zr+p8NrW4nSE5Zd9H10RbANTdJbegGAehEg= -----END CERTIFICATE-----Generated at Wed Oct 29 07:09:34 2025 by rpki-client