$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c39beaa-4ff5-365c-8d2b-665e20e87dc9.roa File: 8c39beaa-4ff5-365c-8d2b-665e20e87dc9.roa (raw, json) Hash identifier: NKqVW10SCtfIAHe3Uf5LBK/eXkANoffOsg/eYIyCGLM= Subject key identifier: 3E:C9:6A:DB:23:D9:52:77:BD:2D:F6:58:AD:A1:E5:B5:6E:72:15:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9872393F1C62B762173E1B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c39beaa-4ff5-365c-8d2b-665e20e87dc9.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396563 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:39:3f:1c:62:b7:62:17:3e:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=a5b4102d-6d7c-470b-ae69-5d6b5596c871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:d5:ad:e7:3a:ae:bc:c9:81:2d:25:ed:b8: ce:dd:3b:ae:a0:d9:97:5c:ff:b1:b7:eb:4e:6c:ea: ee:e0:33:91:20:42:16:0a:fc:91:0d:55:69:4d:05: f9:d2:f8:3e:52:58:25:c8:8b:95:d7:26:1c:59:54: 3c:cc:b8:9d:e5:14:f1:57:1e:bf:68:ed:4d:e3:cd: 25:9f:e3:69:c2:75:92:97:4a:26:2f:d2:38:ac:1d: b8:07:c9:b5:6e:27:c5:94:a2:7e:97:bb:f0:d7:eb: d5:63:04:94:a7:29:99:94:b4:7b:b2:9b:96:3b:c7: c4:57:3c:7b:1e:33:98:72:61:72:f0:92:58:46:7e: 25:c0:23:69:c6:dc:75:58:85:8b:e7:b6:46:83:a3: 61:38:44:ea:35:d9:19:18:79:a2:c3:98:89:09:be: 7b:94:b8:6e:fa:49:72:3a:c0:e4:f9:ac:7c:ba:2d: 22:18:53:2c:13:74:6d:7d:11:63:96:08:d2:8c:2e: 54:29:b8:be:62:2f:0f:06:bd:2c:44:3f:e6:de:13: 76:bf:58:57:98:bc:8a:10:fe:c7:a6:92:75:71:a7: 8b:fc:47:6f:b3:f4:6e:17:24:28:33:df:0d:fe:b8: b4:fa:52:99:8e:53:01:25:db:c0:2d:85:88:ef:a5: d6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C9:6A:DB:23:D9:52:77:BD:2D:F6:58:AD:A1:E5:B5:6E:72:15:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c39beaa-4ff5-365c-8d2b-665e20e87dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:64:95:ca:9c:a9:e8:55:f5:39:0a:83:8b:8c:bb:10:a5:7e: 8a:e0:de:13:25:08:e9:f5:26:78:ea:69:2b:12:c5:ad:90:9d: a1:6b:52:2a:b2:9b:08:8d:4f:f2:e5:31:ee:49:91:f1:c2:79: c1:59:25:6c:44:3e:72:cf:65:2a:fd:b6:e1:d6:12:76:7a:03: 27:23:c5:7a:59:fa:87:06:ad:f0:67:1b:e7:8a:85:69:54:3a: ae:a1:59:4d:e0:79:c4:8f:72:c1:a3:df:6c:f2:4c:61:0e:fb: 8b:33:9f:12:f2:aa:ba:be:27:e8:5a:d5:7c:16:ae:8e:e9:97: fa:30:3a:86:a3:7f:a6:1b:62:8c:46:0b:90:b9:c3:3f:a0:05: c5:d4:6c:81:06:05:73:7e:89:7f:d8:fc:a7:36:68:0c:29:d7: 36:07:16:b3:e4:4c:42:64:87:4f:38:0f:90:29:0d:ef:0d:69: 8d:db:af:4c:78:7e:7f:60:07:ce:0a:11:71:0c:76:94:a4:f8: 02:23:0e:4d:8d:57:02:69:2e:85:ad:c4:f5:5a:af:8d:6f:09: 23:97:72:7d:0b:79:f4:72:ab:f4:33:ce:6b:ad:ce:51:59:03: 5c:a6:2f:39:46:8d:7c:3b:3e:90:9a:0e:9a:e0:51:95:80:02: 1b:60:a5:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjk/HGK3Yhc+GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YTViNDEwMmQtNmQ3Yy00NzBiLWFlNjktNWQ2YjU1OTZjODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEzVrec6rrzJgS0l7bjO3TuuoNmXXP+xt+tO bOru4DORIEIWCvyRDVVpTQX50vg+UlglyIuV1yYcWVQ8zLid5RTxVx6/aO1N480l n+NpwnWSl0omL9I4rB24B8m1bifFlKJ+l7vw1+vVYwSUpymZlLR7spuWO8fEVzx7 HjOYcmFy8JJYRn4lwCNpxtx1WIWL57ZGg6NhOETqNdkZGHmiw5iJCb57lLhu+kly OsDk+ax8ui0iGFMsE3RtfRFjlgjSjC5UKbi+Yi8PBr0sRD/m3hN2v1hXmLyKEP7H ppJ1caeL/Edvs/RuFyQoM98N/ri0+lKZjlMBJdvALYWI76XWvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD7Jatsj2VJ3vS32WK2h5bVuchVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGMzOWJlYWEtNGZmNS0z NjVjLThkMmItNjY1ZTIwZTg3ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5klcqcqehV9TkKg4uMuxClforg3hMlCOn1JnjqaSsSxa2QnaFr UiqymwiNT/LlMe5JkfHCecFZJWxEPnLPZSr9tuHWEnZ6AycjxXpZ+ocGrfBnG+eK hWlUOq6hWU3gecSPcsGj32zyTGEO+4sznxLyqrq+J+ha1XwWro7pl/owOoajf6Yb YoxGC5C5wz+gBcXUbIEGBXN+iX/Y/Kc2aAwp1zYHFrPkTEJkh084D5ApDe8NaY3b r0x4fn9gB84KEXEMdpSk+AIjDk2NVwJpLoWtxPVar41vCSOXcn0LefRyq/Qzzmut zlFZA1ymLzlGjXw7PpCaDprgUZWAAhtgpXQ= -----END CERTIFICATE-----Generated at Wed Oct 29 07:08:32 2025 by rpki-client