$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ee81ec4-e2dd-3355-a27b-ccb0ef1057b2.roa File: 7ee81ec4-e2dd-3355-a27b-ccb0ef1057b2.roa (raw, json) Hash identifier: G3nqLtG2MV4VIX/+qlX6eiH0JG0DufP5ncAYaQWzBw8= Subject key identifier: CA:E3:59:DA:42:80:96:76:62:1A:16:98:C3:1C:A4:2E:08:A7:02:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724C6F9E1F9A80A9280000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ee81ec4-e2dd-3355-a27b-ccb0ef1057b2.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 0 IP address blocks: 2001:500:128::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4c:6f:9e:1f:9a:80:a9:28:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=8d6e517b-c1c7-458d-aabb-88c82efc569a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f3:44:a5:4a:55:f2:ca:a6:9e:7b:73:81:29: 84:2b:36:a6:92:bb:11:a0:5d:d0:32:cf:1e:35:b7: 41:61:69:e4:e8:26:f1:47:f0:51:d2:d8:60:4c:a3: 4e:06:63:53:f0:2d:9c:1c:e8:c5:b4:ee:03:cb:11: 00:88:33:99:6c:8e:62:9c:84:fb:8e:2a:2d:bf:1d: 8b:ae:7e:22:08:44:13:0a:48:4c:00:58:ca:fd:ba: c9:f6:b5:1a:b0:64:6d:89:d2:ed:d3:cf:67:96:64: 5c:83:c4:1e:21:f3:02:86:2a:19:07:78:54:91:09: af:7d:29:52:79:27:f1:53:c0:34:1b:d6:e6:e6:a6: 07:0c:36:3e:98:00:cb:2c:14:58:b4:f3:6e:cc:bd: 92:c3:29:7d:7e:06:88:0b:68:53:18:35:51:af:0b: bb:76:68:0c:c6:d6:84:57:99:a8:a5:6c:1e:a7:16: 1d:42:46:e8:f7:f1:e1:a5:d1:12:e3:8b:ad:20:cc: b0:eb:6a:93:c7:c9:33:2b:91:b0:14:f5:6a:8e:46: 6d:8e:d8:f8:4a:5e:c7:19:3e:79:49:d2:4a:7e:86: 1e:ba:68:20:58:9a:d8:19:70:a1:90:df:5e:0b:35: 94:25:42:ee:36:a9:70:1c:2e:d3:71:ec:c4:e3:86: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:59:DA:42:80:96:76:62:1A:16:98:C3:1C:A4:2E:08:A7:02:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ee81ec4-e2dd-3355-a27b-ccb0ef1057b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:128::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:5a:42:37:1e:d9:5e:1c:bb:5f:0b:c4:00:73:3b:e7:40:d5: db:b0:54:41:27:83:9d:b0:b2:d6:0f:6b:e1:86:1e:af:0a:17: 60:74:86:28:3a:77:7e:70:07:bd:09:23:be:e9:bd:60:04:01: 12:b7:a4:4a:e4:e5:56:48:bb:9c:50:a5:bb:7d:86:f1:ce:d1: 35:50:7a:ea:a7:8f:5e:34:35:85:ea:a3:cc:0b:6e:9a:77:d5: 92:4e:f3:d0:d5:dc:b1:dc:05:d6:0b:57:0e:df:a4:70:74:40: 52:e0:4d:d1:e4:12:4d:38:a8:e4:b9:59:fe:38:39:39:de:a9: 2e:62:2c:52:6b:fe:d8:b5:6a:b5:f8:c0:e2:17:a9:94:16:bd: e0:43:20:ff:74:b8:57:80:09:ea:9a:4e:0c:c7:46:70:e3:24: 9f:6c:a3:9c:74:13:d0:1a:ed:d8:10:de:c3:d1:58:85:41:92: a1:ac:fd:92:f4:09:0c:2d:78:ea:aa:5a:5d:fe:a1:df:ed:47: cd:59:48:73:e2:56:40:cb:50:dc:a4:a3:36:5b:ce:97:65:45: d7:97:d2:d9:01:34:14:4f:83:a1:c4:89:59:93:fd:43:0c:31: 90:53:0b:0c:e3:e7:b8:b7:7e:e1:bd:72:45:6e:4a:52:07:44: bc:a0:1d:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckxvnh+agKkoAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OGQ2ZTUxN2ItYzFjNy00NThkLWFhYmItODhjODJlZmM1NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPNEpUpV8sqmnntzgSmEKzamkrsRoF3QMs8e NbdBYWnk6CbxR/BR0thgTKNOBmNT8C2cHOjFtO4DyxEAiDOZbI5inIT7jiotvx2L rn4iCEQTCkhMAFjK/brJ9rUasGRtidLt089nlmRcg8QeIfMChioZB3hUkQmvfSlS eSfxU8A0G9bm5qYHDDY+mADLLBRYtPNuzL2Swyl9fgaIC2hTGDVRrwu7dmgMxtaE V5mopWwepxYdQkbo9/HhpdES44utIMyw62qTx8kzK5GwFPVqjkZtjtj4Sl7HGT55 SdJKfoYeumggWJrYGXChkN9eCzWUJULuNqlwHC7TcezE44aiZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMrjWdpCgJZ2YhoWmMMcpC4IpwIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2VlODFlYzQtZTJkZC0z MzU1LWEyN2ItY2NiMGVmMTA1N2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDIAEFAAEo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJaQjce2V4cu18LxABzO+dA1duwVEEng52wstYPa+GGHq8KF2B0 hig6d35wB70JI77pvWAEARK3pErk5VZIu5xQpbt9hvHO0TVQeuqnj140NYXqo8wL bpp31ZJO89DV3LHcBdYLVw7fpHB0QFLgTdHkEk04qOS5Wf44OTneqS5iLFJr/ti1 arX4wOIXqZQWveBDIP90uFeACeqaTgzHRnDjJJ9so5x0E9Aa7dgQ3sPRWIVBkqGs /ZL0CQwteOqqWl3+od/tR81ZSHPiVkDLUNykozZbzpdlRdeX0tkBNBRPg6HEiVmT /UMMMZBTCwzj57i3fuG9ckVuSlIHRLygHbU= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:29 2025 by rpki-client