$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa4a3c8-463c-3a24-91ec-0f3b37adc84c.roa File: 7aa4a3c8-463c-3a24-91ec-0f3b37adc84c.roa (raw, json) Hash identifier: QtMhGwOow4gYCtFSrtiilEHKW6UWU1zehjm172c4R4c= Subject key identifier: AA:61:7E:7F:A0:12:79:4D:AF:2A:AF:7C:BE:F9:67:E0:01:08:DF:7F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723DAB9363D79411589C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa4a3c8-463c-3a24-91ec-0f3b37adc84c.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396565 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3d:ab:93:63:d7:94:11:58:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=909df169-54ff-4c37-8450-a91ab1129386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ae:62:c2:d6:30:83:de:0f:a0:84:22:c3:dd: 42:b5:e5:b2:f2:2c:ca:1b:eb:5d:12:07:d2:8a:ee: a2:04:05:e2:0f:f9:21:0a:86:95:97:23:4a:e3:86: be:2d:bf:79:f2:50:fc:11:ad:12:d3:c5:c7:3c:bb: 13:12:a8:b1:e4:96:be:71:4a:07:80:0c:7b:8a:b2: 48:aa:f5:ed:8a:77:d8:98:af:66:03:1f:35:71:d8: 25:c8:cb:a5:67:d9:53:04:bd:31:72:aa:dd:f0:b9: c6:27:d1:bb:e5:88:c2:f4:72:13:1a:e0:0b:76:ec: 49:25:69:66:58:69:9d:9a:ec:50:44:25:15:f7:fc: 99:f7:aa:08:ba:fe:fe:c5:c3:4e:3c:5b:d4:ac:d9: 6d:ba:40:d4:c1:24:97:a7:f9:6d:7a:21:8e:12:6d: 48:9d:a2:67:24:4a:8d:9c:98:2c:dc:f1:cc:6f:97: 1b:fd:db:f9:e2:8c:8e:6f:19:36:d6:59:01:02:56: a6:9c:4b:d4:45:74:42:db:6e:33:63:a4:52:db:4a: 32:ab:86:52:96:2e:de:ee:e4:e9:fb:ed:d0:e0:9f: c4:4b:ec:b1:08:6e:c8:db:c4:2b:75:32:00:b9:ff: d1:71:38:0d:f6:19:73:4d:22:57:79:30:d6:15:3c: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:7E:7F:A0:12:79:4D:AF:2A:AF:7C:BE:F9:67:E0:01:08:DF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7aa4a3c8-463c-3a24-91ec-0f3b37adc84c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:80:ec:bc:d3:cc:10:ae:86:d4:5f:1e:63:94:45:05:b9:ba: 79:25:f3:a6:ef:49:f9:d4:b9:62:67:c7:5e:77:9d:23:30:6b: 85:55:d9:0f:06:f9:16:a0:62:8d:27:95:07:2f:99:dc:25:1d: 33:15:cb:b8:c3:a6:8e:10:e6:ff:6d:9c:5d:f5:94:21:b7:4b: 7b:d9:14:ed:e7:a7:2d:9b:d0:7e:32:01:8e:bc:a4:48:eb:e2: a7:d5:ee:87:44:d0:03:21:2e:48:66:71:5f:db:f5:a3:82:f0: 77:d0:f1:e3:10:5f:2d:16:da:f9:fe:87:b2:e0:c1:95:31:e6: e9:38:2f:78:be:62:74:26:d6:59:0f:54:be:c5:cb:0a:0f:89: 62:71:ef:94:ae:e0:31:8d:fd:6f:76:ab:7f:7c:12:41:1d:60: 89:29:24:01:84:f5:a2:d2:ea:a1:b0:06:37:c5:29:2f:e1:b9: 3c:75:16:6f:a9:22:e2:9f:93:97:82:07:88:b7:a1:df:13:dc: 62:16:69:ef:d0:90:67:19:7d:50:4b:29:53:2c:7b:95:54:9b: 36:01:de:e2:40:e0:80:94:b2:0c:77:95:08:a3:b5:54:ce:6a: 7a:4b:28:62:f4:2b:a6:02:19:e5:e3:80:e5:82:1d:9f:dd:f4: 0b:70:75:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcj2rk2PXlBFYnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OTA5ZGYxNjktNTRmZi00YzM3LTg0NTAtYTkxYWIxMTI5Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi65iwtYwg94PoIQiw91CteWy8izKG+tdEgfS iu6iBAXiD/khCoaVlyNK44a+Lb958lD8Ea0S08XHPLsTEqix5Ja+cUoHgAx7irJI qvXtinfYmK9mAx81cdglyMulZ9lTBL0xcqrd8LnGJ9G75YjC9HITGuALduxJJWlm WGmdmuxQRCUV9/yZ96oIuv7+xcNOPFvUrNltukDUwSSXp/lteiGOEm1InaJnJEqN nJgs3PHMb5cb/dv54oyObxk21lkBAlamnEvURXRC224zY6RS20oyq4ZSli7e7uTp ++3Q4J/ES+yxCG7I28QrdTIAuf/RcTgN9hlzTSJXeTDWFTy4ywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKphfn+gEnlNryqvfL75Z+ABCN9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2FhNGEzYzgtNDYzYy0z YTI0LTkxZWMtMGYzYjM3YWRjODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHaA7LzTzBCuhtRfHmOURQW5unkl86bvSfnUuWJnx153nSMwa4VV 2Q8G+RagYo0nlQcvmdwlHTMVy7jDpo4Q5v9tnF31lCG3S3vZFO3npy2b0H4yAY68 pEjr4qfV7odE0AMhLkhmcV/b9aOC8HfQ8eMQXy0W2vn+h7LgwZUx5uk4L3i+YnQm 1lkPVL7FywoPiWJx75Su4DGN/W92q398EkEdYIkpJAGE9aLS6qGwBjfFKS/huTx1 Fm+pIuKfk5eCB4i3od8T3GIWae/QkGcZfVBLKVMse5VUmzYB3uJA4ICUsgx3lQij tVTOanpLKGL0K6YCGeXjgOWCHZ/d9AtwdbQ= -----END CERTIFICATE-----Generated at Wed Oct 29 09:22:37 2025 by rpki-client