$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ca14795-c9d7-312d-8e48-78aaeca59e94.roa File: 6ca14795-c9d7-312d-8e48-78aaeca59e94.roa (raw, json) Hash identifier: unNE7D4KmEDtVPvf6UmAoFBuZPcr8As4bI1nOyrxHXE= Subject key identifier: 71:E2:F8:19:2D:F4:37:97:79:98:07:AD:4C:EC:88:83:51:98:93:29 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723CD680A6148E3F075D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ca14795-c9d7-312d-8e48-78aaeca59e94.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396592 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3c:d6:80:a6:14:8e:3f:07:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=788bec24-dcee-403e-b4ce-1c8c4f0d9537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:6c:7a:09:03:62:6c:30:13:80:ae:4c:de: fb:77:12:1a:11:29:2a:eb:e8:78:e2:6d:13:d7:c7: 9a:33:b9:a1:6f:52:7a:29:4f:a2:71:b3:d7:61:66: db:60:7a:8d:0f:9c:e9:6f:48:24:00:b8:15:63:7e: 69:06:7a:a8:6a:0a:33:0a:d0:16:9d:f9:59:91:a5: 4b:7d:a7:82:5a:9c:31:24:ff:4d:4e:27:fc:ad:f1: 74:42:89:30:61:7e:5b:b2:67:b9:7c:81:43:be:94: 9e:2b:2a:80:76:4f:ca:5b:d0:f9:3c:1a:66:62:c1: 33:e7:d1:db:a0:d1:0c:6c:e2:43:0b:16:8c:6f:66: 7a:bc:97:ca:9e:79:ee:2d:1b:8d:36:0d:6c:dc:0d: c9:dd:ee:a7:bd:1b:78:0b:35:05:8b:4d:35:5b:e1: 87:75:74:a0:a2:60:3f:83:39:df:3d:9e:f4:c4:6c: a9:28:1a:bd:ad:1a:c0:fe:5f:e5:db:f9:90:0b:9c: 57:80:67:0a:79:56:fb:73:40:1b:27:54:6b:51:36: f1:44:a4:24:a5:63:7a:03:45:98:73:26:67:1f:f4: 75:76:07:5f:ea:44:78:8b:d1:b1:1f:e7:2a:03:2c: 99:d8:7c:1a:6f:00:04:ec:4e:cb:05:6a:ab:95:a7: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E2:F8:19:2D:F4:37:97:79:98:07:AD:4C:EC:88:83:51:98:93:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ca14795-c9d7-312d-8e48-78aaeca59e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b7:f6:56:d1:e8:4d:e7:f9:af:94:9a:f4:46:b4:b2:65:05: 6a:4b:61:41:a8:c2:e6:83:57:9a:00:da:f9:b7:06:be:13:1b: 56:82:1b:3a:c2:e3:a8:4c:cd:57:fe:54:88:ea:96:8b:58:c7: da:43:69:b4:8b:01:26:c7:f3:30:07:9b:53:9f:cf:e8:97:37: 86:6a:a5:14:34:fb:99:ac:cb:fd:ab:df:f7:e9:c1:92:ef:0d: 64:12:7e:ad:2c:8d:df:24:bc:8f:e2:24:2e:a2:80:87:54:3e: 6e:aa:77:1e:f8:e6:67:12:f4:9b:a0:f6:39:be:f6:cf:e0:1f: 9a:71:0e:7d:ba:4f:32:8e:e9:24:c4:9e:38:3d:ac:60:f3:14: b2:22:49:dd:60:c4:68:1a:de:91:67:95:4c:f3:15:cb:c3:c3: 93:05:70:90:17:0a:cb:7c:50:76:c9:0d:f6:41:7c:f6:90:e9: 5f:04:9c:0a:be:2d:1e:ba:fc:a9:30:cc:ad:a0:cb:fe:61:36: b9:e8:63:e0:a8:e1:d7:53:3c:22:0f:b7:a0:fa:c5:1f:63:57: 13:78:63:47:67:32:26:d3:fa:d7:ea:2a:90:bd:55:dc:50:c8: bd:a7:2d:3b:1f:da:33:4a:c9:61:d2:bc:6e:81:7f:45:08:e4: 9f:be:f8:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjzWgKYUjj8HXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk Nzg4YmVjMjQtZGNlZS00MDNlLWI0Y2UtMWM4YzRmMGQ5NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3tsegkDYmwwE4CuTN77dxIaESkq6+h44m0T 18eaM7mhb1J6KU+icbPXYWbbYHqND5zpb0gkALgVY35pBnqoagozCtAWnflZkaVL faeCWpwxJP9NTif8rfF0QokwYX5bsme5fIFDvpSeKyqAdk/KW9D5PBpmYsEz59Hb oNEMbOJDCxaMb2Z6vJfKnnnuLRuNNg1s3A3J3e6nvRt4CzUFi001W+GHdXSgomA/ gznfPZ70xGypKBq9rRrA/l/l2/mQC5xXgGcKeVb7c0AbJ1RrUTbxRKQkpWN6A0WY cyZnH/R1dgdf6kR4i9GxH+cqAyyZ2HwabwAE7E7LBWqrlac3UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHHi+Bkt9DeXeZgHrUzsiINRmJMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmNhMTQ3OTUtYzlkNy0z MTJkLThlNDgtNzhhYWVjYTU5ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGu39lbR6E3n+a+UmvRGtLJlBWpLYUGowuaDV5oA2vm3Br4TG1aC GzrC46hMzVf+VIjqlotYx9pDabSLASbH8zAHm1Ofz+iXN4ZqpRQ0+5msy/2r3/fp wZLvDWQSfq0sjd8kvI/iJC6igIdUPm6qdx745mcS9Jug9jm+9s/gH5pxDn26TzKO 6STEnjg9rGDzFLIiSd1gxGga3pFnlUzzFcvDw5MFcJAXCst8UHbJDfZBfPaQ6V8E nAq+LR66/KkwzK2gy/5hNrnoY+Co4ddTPCIPt6D6xR9jVxN4Y0dnMibT+tfqKpC9 VdxQyL2nLTsf2jNKyWHSvG6Bf0UI5J+++FY= -----END CERTIFICATE-----Generated at Wed Oct 29 07:09:34 2025 by rpki-client