$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/954196e8-fe1e-3f03-bc77-c6d4763f52c3.roa File: 954196e8-fe1e-3f03-bc77-c6d4763f52c3.roa (raw, json) Hash identifier: ZaJrE5FRO/s3s6MeNFJaDKJO1HV9c49wWcmSXHvM4ao= Subject key identifier: F5:8C:8F:B9:B9:CA:88:46:F5:5E:36:F6:37:A7:FC:72:28:E2:5F:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987248DA629EDD9AF8606500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/954196e8-fe1e-3f03-bc77-c6d4763f52c3.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396603 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:48:da:62:9e:dd:9a:f8:60:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=a867d675-76cf-45eb-ae8c-4bc2d70adf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:ce:74:f4:e4:e7:90:4e:f6:e5:e8:80:7b: 54:6d:b8:6e:51:e2:d5:65:41:2c:dd:51:a0:ac:b4: ff:1e:cf:6d:e9:52:09:d9:62:81:d7:10:ec:ea:aa: 54:82:fd:28:c1:c2:71:28:d3:00:70:40:4a:bb:7f: 9d:59:4d:0c:28:ab:1f:37:02:6c:cd:af:9a:84:93: ea:bc:49:89:3a:b3:4f:02:31:a5:f2:6f:d9:7e:cb: 33:90:73:d3:d9:7c:74:fd:16:e3:4e:32:23:0e:a0: f7:d1:81:65:4d:71:7e:f7:b9:32:a0:c1:ef:1d:cc: e8:59:8c:10:43:91:b5:5c:58:25:08:d7:24:6c:5d: a1:64:06:d8:e8:31:b5:ab:4a:c7:0c:d3:a9:01:52: e2:29:16:d2:d1:d7:8b:b9:af:69:d4:43:4b:23:36: a6:78:77:d8:31:0e:6b:7b:35:88:76:65:1c:e2:f5: 76:5c:7e:6c:58:d2:41:92:a3:1b:28:b9:52:52:fa: 05:1f:9e:11:b8:1a:53:8a:73:26:a7:13:45:ea:12: 09:dd:e7:40:7f:b4:b8:93:33:40:49:53:25:6f:e1: 26:be:4b:85:5b:89:2e:0a:07:25:63:23:56:d9:97: 0b:ba:ac:c1:9e:a5:47:e8:f8:4f:31:b8:c7:b9:0c: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8C:8F:B9:B9:CA:88:46:F5:5E:36:F6:37:A7:FC:72:28:E2:5F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/954196e8-fe1e-3f03-bc77-c6d4763f52c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:2e:db:cf:09:58:b7:1a:6e:c6:0d:5b:04:2d:94:91:56:d1: bb:01:75:f0:71:d2:6d:3a:0f:95:f9:f9:dc:5e:49:06:38:10: 14:9e:47:61:04:03:c6:da:11:7f:0a:16:8f:89:fd:b8:c2:e3: f9:fb:42:fb:6d:91:fb:1d:ab:25:ce:34:8d:83:0a:af:d4:58: 8b:ef:5e:4f:0e:1d:40:e0:71:d2:da:f8:2a:56:df:f4:f5:9e: 4d:f8:3c:08:4c:51:6b:41:cb:7d:bf:02:37:ad:99:85:9b:2e: 9b:b5:fd:fb:58:68:65:3c:df:bd:5b:5b:38:a2:9f:05:53:14: a5:f6:07:11:10:b7:e6:67:27:84:82:85:1b:2c:ba:49:b1:04: 79:15:de:37:e9:62:39:66:03:42:ea:b8:a9:59:ad:14:5a:05: 02:14:7d:db:18:37:40:2a:00:76:7b:81:d1:77:ab:f8:0b:ba: 0b:34:09:9d:24:6c:27:da:a0:ef:37:5b:d1:e5:63:eb:67:80: 8b:d7:d1:0a:59:20:a2:de:e4:48:40:57:b9:27:17:0f:9f:49: c1:b7:ba:ea:55:f3:f0:02:b5:96:b6:15:2c:7c:9c:12:30:0a: 7c:99:2e:bc:66:04:9c:a7:59:e6:1f:0b:f6:c8:1f:4d:04:09: cc:b2:c0:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckjaYp7dmvhgZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YTg2N2Q2NzUtNzZjZi00NWViLWFlOGMtNGJjMmQ3MGFkZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoTOdPTk55BO9uXogHtUbbhuUeLVZUEs3VGg rLT/Hs9t6VIJ2WKB1xDs6qpUgv0owcJxKNMAcEBKu3+dWU0MKKsfNwJsza+ahJPq vEmJOrNPAjGl8m/ZfsszkHPT2Xx0/RbjTjIjDqD30YFlTXF+97kyoMHvHczoWYwQ Q5G1XFglCNckbF2hZAbY6DG1q0rHDNOpAVLiKRbS0deLua9p1ENLIzameHfYMQ5r ezWIdmUc4vV2XH5sWNJBkqMbKLlSUvoFH54RuBpTinMmpxNF6hIJ3edAf7S4kzNA SVMlb+EmvkuFW4kuCgclYyNW2ZcLuqzBnqVH6PhPMbjHuQxZzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPWMj7m5yohG9V429jen/HIo4l+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU0MTk2ZTgtZmUxZS0z ZjAzLWJjNzctYzZkNDc2M2Y1MmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALEu288JWLcabsYNWwQtlJFW0bsBdfBx0m06D5X5+dxeSQY4EBSe R2EEA8baEX8KFo+J/bjC4/n7QvttkfsdqyXONI2DCq/UWIvvXk8OHUDgcdLa+CpW 3/T1nk34PAhMUWtBy32/AjetmYWbLpu1/ftYaGU8371bWziinwVTFKX2BxEQt+Zn J4SChRssukmxBHkV3jfpYjlmA0LquKlZrRRaBQIUfdsYN0AqAHZ7gdF3q/gLugs0 CZ0kbCfaoO83W9HlY+tngIvX0QpZIKLe5EhAV7knFw+fScG3uupV8/ACtZa2FSx8 nBIwCnyZLrxmBJynWeYfC/bIH00ECcyywOM= -----END CERTIFICATE-----Generated at Wed Oct 29 09:08:05 2025 by rpki-client