$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d069c-59a1-3312-978e-5a0822587bbe.roa File: 955d069c-59a1-3312-978e-5a0822587bbe.roa (raw, json) Hash identifier: THe9Ew09Rh3Zda+83fdSLVAeREjmjxHZfmd/GJ0ER4Y= Subject key identifier: B3:30:5E:C2:61:22:72:D7:1D:54:41:23:66:D9:24:80:89:FC:CC:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23C4BCF3B13C4F55DF980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d069c-59a1-3312-978e-5a0822587bbe.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396567 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3c:4b:cf:3b:13:c4:f5:5d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=949c87a8-2936-4d69-ad16-fa7a9f65bc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:e7:d4:b4:f5:9d:4d:d0:c4:63:21:60:8b: d8:0f:28:b2:93:22:da:97:ff:32:7b:9e:91:1a:1b: eb:e6:86:f0:d7:9c:6a:db:55:79:9a:2f:bc:ea:fc: c0:d1:99:ea:8a:44:9a:df:b8:73:e5:b9:31:a8:25: 1b:e0:1e:b5:df:0c:d2:23:b2:44:ca:3f:e2:95:84: 8d:7b:60:99:30:03:06:00:eb:ab:27:79:e8:85:75: 7a:82:c6:07:29:58:95:44:e8:25:cb:dc:32:44:60: 37:01:fb:3e:5c:62:14:c7:d6:b3:d4:99:9e:f1:5d: 3d:cf:8f:f8:c5:6b:b6:db:13:03:0e:db:f7:7a:8a: 88:be:e7:81:3c:64:b3:0f:96:42:93:48:c9:84:a9: 14:55:09:43:6e:12:de:b6:90:c4:c8:87:23:eb:19: 55:fd:7b:44:00:6e:8c:fb:bb:fa:35:65:fa:ec:39: a7:e3:f9:0a:3e:13:b3:0a:67:b9:6c:3e:5e:45:86: da:94:fc:cc:10:3f:ee:ef:71:2b:48:d4:7f:e0:17: 5a:4e:9e:e6:64:e0:27:e5:3f:c8:9b:12:fc:e4:c4: c1:c3:81:31:b5:91:8e:7e:18:e8:db:17:fa:ae:1c: b7:76:0f:94:06:99:79:c1:92:1b:0e:b3:85:1d:7b: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:30:5E:C2:61:22:72:D7:1D:54:41:23:66:D9:24:80:89:FC:CC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d069c-59a1-3312-978e-5a0822587bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:12:97:1a:04:b0:e9:3c:18:fc:74:79:d5:99:fa:a6:88:f6: 14:f0:14:2a:ff:62:ad:80:3f:0e:9a:6b:ad:3a:d3:66:e6:56: 31:39:78:9c:94:84:a1:7f:45:c6:a8:77:a8:a2:bf:72:40:b6: 6d:83:e9:11:35:ff:6a:1a:c3:58:80:84:a1:2b:85:f2:f8:71: 80:d1:2e:42:14:9c:7f:52:3a:7c:de:e9:c0:c6:c9:06:09:22: f8:19:50:99:c6:a5:12:d0:39:b1:7c:81:b3:c0:d7:38:f0:3a: 21:fe:9d:e8:b5:cd:23:6a:1e:75:8c:1f:f2:05:26:89:90:bb: a0:70:f2:8e:dc:cd:0d:a1:62:44:33:59:bf:2d:3a:03:1e:03: 72:1c:ae:d3:4f:40:9c:8f:59:8f:29:83:fb:4d:45:da:64:24: b9:5d:b5:96:31:63:33:13:97:46:1c:c9:65:8c:b2:c6:28:d8: 1c:b1:d2:e6:79:cd:ce:91:48:c9:53:b9:96:48:f7:cd:dd:b4: c7:64:cb:92:1b:cd:09:86:3d:69:0a:9a:5f:c0:b6:ea:2a:77: 14:11:82:23:7b:5e:39:c4:eb:53:18:43:01:c7:2d:9f:24:0e: 26:09:29:6c:da:32:37:71:d0:77:37:67:58:b5:64:61:64:e7: 01:00:9d:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucojxLzzsTxPVd+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk OTQ5Yzg3YTgtMjkzNi00ZDY5LWFkMTYtZmE3YTlmNjViYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqnn1LT1nU3QxGMhYIvYDyiykyLal/8ye56R Ghvr5obw15xq21V5mi+86vzA0ZnqikSa37hz5bkxqCUb4B613wzSI7JEyj/ilYSN e2CZMAMGAOurJ3nohXV6gsYHKViVROgly9wyRGA3Afs+XGIUx9az1Jme8V09z4/4 xWu22xMDDtv3eoqIvueBPGSzD5ZCk0jJhKkUVQlDbhLetpDEyIcj6xlV/XtEAG6M +7v6NWX67Dmn4/kKPhOzCme5bD5eRYbalPzMED/u73ErSNR/4BdaTp7mZOAn5T/I mxL85MTBw4ExtZGOfhjo2xf6rhy3dg+UBpl5wZIbDrOFHXuf3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLMwXsJhInLXHVRBI2bZJICJ/MwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU1ZDA2OWMtNTlhMS0z MzEyLTk3OGUtNWEwODIyNTg3YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8SlxoEsOk8GPx0edWZ+qaI9hTwFCr/Yq2APw6aa60602bmVjE5 eJyUhKF/Rcaod6iiv3JAtm2D6RE1/2oaw1iAhKErhfL4cYDRLkIUnH9SOnze6cDG yQYJIvgZUJnGpRLQObF8gbPA1zjwOiH+nei1zSNqHnWMH/IFJomQu6Bw8o7czQ2h YkQzWb8tOgMeA3IcrtNPQJyPWY8pg/tNRdpkJLldtZYxYzMTl0YcyWWMssYo2Byx 0uZ5zc6RSMlTuZZI983dtMdky5IbzQmGPWkKml/AtuoqdxQRgiN7XjnE61MYQwHH LZ8kDiYJKWzaMjdx0Hc3Z1i1ZGFk5wEAnUs= -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:00 2025 by rpki-client