$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7693173a-08fa-355f-a87b-83de5c8bba6e.roa File: 7693173a-08fa-355f-a87b-83de5c8bba6e.roa (raw, json) Hash identifier: GTantan7sc6PxjZu73uxlfaR2ubjggb1/En1U+5e6rw= Subject key identifier: 10:7C:E9:FF:FC:01:99:0E:FB:49:65:42:B9:EF:66:76:F5:7A:31:9E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23C147DDB871DC6B7B620 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7693173a-08fa-355f-a87b-83de5c8bba6e.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 10515 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3c:14:7d:db:87:1d:c6:b7:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=43af74f5-3295-481e-a783-653fd55b3c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:6c:5d:5e:53:f8:f1:da:fc:0f:86:2c:28: 7a:f1:6b:c8:67:4d:71:aa:14:98:24:f4:1d:f8:6c: 48:82:f0:cd:72:67:8c:27:55:68:a4:b8:30:5f:3e: e1:54:24:c8:2e:ca:0b:4c:2f:98:56:38:ff:3e:2f: de:1a:5e:70:d0:60:08:b3:9f:66:03:0f:ba:52:c2: 22:ab:eb:3a:82:0c:4e:e4:28:e1:80:10:df:28:33: 10:e7:d7:86:09:af:fb:e5:5c:16:34:82:3b:fa:01: 42:cd:b2:03:73:d7:59:4c:cf:3e:07:7d:5c:39:88: 0c:1b:bf:e9:65:73:d2:cf:09:54:53:5a:9a:26:58: ab:0b:8a:a7:fd:33:f8:b0:61:fe:b6:5e:49:67:85: 14:68:21:4a:90:c9:20:15:26:2e:3a:7c:61:c5:64: a8:ea:0b:7a:4f:3a:0c:cb:64:ac:64:aa:97:e1:5c: 04:ed:46:32:39:9e:4e:3b:5a:0e:69:b1:5f:9a:9a: 00:71:aa:71:f7:1d:da:0b:61:e1:e6:fd:a2:a0:89: 78:5d:ae:84:9c:97:86:df:0a:f1:9b:c1:4f:f5:30: 69:4b:b8:a7:65:44:6f:ab:fe:f2:6b:8f:b3:04:47: ee:6b:38:18:7d:c1:62:e2:ab:20:68:a4:dc:0b:f8: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7C:E9:FF:FC:01:99:0E:FB:49:65:42:B9:EF:66:76:F5:7A:31:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7693173a-08fa-355f-a87b-83de5c8bba6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:03:32:0c:cf:90:43:b0:0a:71:90:9b:19:ac:60:fb:5a:03: 59:b2:b0:86:13:d0:f6:de:be:10:d3:78:4f:ca:64:db:eb:67: 27:39:db:69:58:29:8a:cd:11:49:c0:50:9a:ac:66:8b:ea:c8: 89:75:44:16:82:b7:50:65:e6:b2:58:7e:95:80:0c:56:98:d3: a8:0b:a3:7a:22:7d:38:50:dd:fe:b3:5a:ff:c9:4c:65:6d:9b: 20:f7:4b:8d:ac:9e:4f:d3:60:fb:f6:01:d4:7f:66:ce:98:0d: 74:85:8a:fc:0e:91:b7:15:7f:8d:0a:6a:60:64:96:b1:6d:ca: 35:29:74:58:c8:2e:c2:7f:03:64:6f:b6:f7:a5:a4:d4:1a:44: ae:0d:0e:92:7b:7c:8c:23:ba:57:97:4e:4a:f9:ef:d1:88:d5: 79:26:c7:d3:13:4e:2a:ce:68:5d:0a:3a:b7:35:b9:1e:fc:ca: b5:47:d3:ac:d0:a5:26:d9:95:a9:b5:68:a1:ce:c8:e1:c6:86: 28:57:74:55:b2:4b:00:24:61:3f:2e:07:0c:3a:dd:6a:0d:8b: 54:48:6e:d3:69:f5:88:fa:36:c6:9e:9a:da:da:46:a0:68:4e: 43:9b:a5:a1:d7:e7:be:4a:d3:e1:83:74:83:9c:b9:54:84:1a: 31:a0:10:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucojwUfduHHca3tiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk NDNhZjc0ZjUtMzI5NS00ODFlLWE3ODMtNjUzZmQ1NWIzYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyJsXV5T+PHa/A+GLCh68WvIZ01xqhSYJPQd +GxIgvDNcmeMJ1VopLgwXz7hVCTILsoLTC+YVjj/Pi/eGl5w0GAIs59mAw+6UsIi q+s6ggxO5CjhgBDfKDMQ59eGCa/75VwWNII7+gFCzbIDc9dZTM8+B31cOYgMG7/p ZXPSzwlUU1qaJlirC4qn/TP4sGH+tl5JZ4UUaCFKkMkgFSYuOnxhxWSo6gt6TzoM y2SsZKqX4VwE7UYyOZ5OO1oOabFfmpoAcapx9x3aC2Hh5v2ioIl4Xa6EnJeG3wrx m8FP9TBpS7inZURvq/7ya4+zBEfuazgYfcFi4qsgaKTcC/jmRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBB86f/8AZkO+0llQrnvZnb1ejGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzY5MzE3M2EtMDhmYS0z NTVmLWE4N2ItODNkZTVjOGJiYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgDMgzPkEOwCnGQmxmsYPtaA1mysIYT0PbevhDTeE/KZNvrZyc5 22lYKYrNEUnAUJqsZovqyIl1RBaCt1Bl5rJYfpWADFaY06gLo3oifThQ3f6zWv/J TGVtmyD3S42snk/TYPv2AdR/Zs6YDXSFivwOkbcVf40KamBklrFtyjUpdFjILsJ/ A2RvtvelpNQaRK4NDpJ7fIwjuleXTkr579GI1Xkmx9MTTirOaF0KOrc1uR78yrVH 06zQpSbZlam1aKHOyOHGhihXdFWySwAkYT8uBww63WoNi1RIbtNp9Yj6Nsaemtra RqBoTkObpaHX575K0+GDdIOcuVSEGjGgEBM= -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:51 2025 by rpki-client