$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a01b422b-ee70-36a3-b8a7-20521f799718.roa File: a01b422b-ee70-36a3-b8a7-20521f799718.roa (raw, json) Hash identifier: EgYeBQFZ/vwvUTOVSRHHIsnVRZ7JKrvnWYS6TnNJGhY= Subject key identifier: 00:90:C0:69:32:DB:F6:D2:6F:C3:A7:4B:77:F8:21:0E:A4:C7:A6:24 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987249DE9B356925117FAF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a01b422b-ee70-36a3-b8a7-20521f799718.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 397200 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:49:de:9b:35:69:25:11:7f:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=654dba11-012c-437c-a68a-2c67fd303971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:7c:18:aa:92:7b:a0:fc:df:de:26:30:7c: 15:a5:71:c2:2a:79:40:2b:13:81:c2:34:b6:0d:7c: 91:f7:d6:c9:f6:1c:03:05:ca:9c:b3:8e:36:d5:1c: 6a:ed:32:1f:5e:74:c8:30:9c:39:26:ec:bc:ee:65: fb:bb:c2:5a:33:55:4d:a4:bb:47:7a:33:1a:5b:90: a8:18:e9:5b:f7:23:38:7f:cc:4f:41:e9:95:ae:98: 17:4b:58:9c:44:7f:3d:f0:b4:ae:55:93:ad:07:94: 4e:00:b2:29:7e:81:13:58:a6:69:e2:61:53:da:35: 8e:1f:6e:73:82:dd:e3:84:7a:ab:c8:d6:f9:ac:09: c4:c7:0e:47:6d:7a:ac:c4:cd:a3:78:51:a8:3f:d6: 9b:28:a4:d0:81:2e:87:79:fe:44:a2:fd:9e:55:94: b1:d4:5b:7b:20:ca:6c:0c:db:0a:8a:4f:df:20:d6: 7d:e3:da:b9:f6:22:20:d1:b9:bb:a3:82:9a:87:77: 63:3d:2e:f5:e7:c2:49:79:84:85:a1:f0:4a:3b:28: bc:7c:94:b5:e2:03:70:a5:7c:f6:c5:35:f5:87:1a: 53:03:bd:6b:9d:a7:f7:56:97:31:91:bf:49:db:9c: 43:df:9e:a4:6f:c8:99:08:a1:2a:2c:20:86:13:0a: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:90:C0:69:32:DB:F6:D2:6F:C3:A7:4B:77:F8:21:0E:A4:C7:A6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a01b422b-ee70-36a3-b8a7-20521f799718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:fb:03:00:43:27:52:89:a2:e0:3d:49:b1:31:c8:bb:be:22: c7:10:e7:cc:79:01:59:9b:45:a3:46:44:c1:f6:34:cc:cd:c5: 82:7d:a2:49:83:15:7e:1b:07:8e:cb:f8:b7:30:1f:60:3d:92: 39:ea:e2:a7:41:19:fc:89:6a:67:b7:ae:e2:ed:80:b4:16:f1: 36:07:3d:38:ea:36:01:34:bb:5a:db:7c:9c:a0:b9:c2:a2:97: 4f:44:30:ef:d9:fd:62:87:d2:40:d3:4e:0d:87:cc:27:c6:93: 60:26:ff:c2:df:cb:e5:a2:43:78:41:9d:09:a4:af:4b:b2:82: 4d:56:5a:e6:a3:b8:d9:44:c6:c1:1e:7b:01:78:94:07:89:54: 83:e5:79:65:63:5e:ac:8b:76:91:71:5b:07:4d:5d:32:d2:bc: 8e:da:23:70:56:ba:3a:0e:94:08:f5:58:63:88:57:3e:90:21: 0f:58:3f:97:d5:8b:fb:4b:f4:ef:96:cc:d0:f1:ba:e4:b0:40: 50:70:73:e2:97:4b:2d:d8:61:82:96:aa:d2:1c:47:54:b9:74: 40:58:bc:7a:fc:63:e1:11:5c:b8:26:06:25:46:a1:80:00:19: 81:a4:b0:8f:af:f7:83:61:17:8e:16:c3:87:1d:13:eb:92:b4: 98:f5:8e:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcknemzVpJRF/rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NjU0ZGJhMTEtMDEyYy00MzdjLWE2OGEtMmM2N2ZkMzAzOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls18GKqSe6D8394mMHwVpXHCKnlAKxOBwjS2 DXyR99bJ9hwDBcqcs4421Rxq7TIfXnTIMJw5Juy87mX7u8JaM1VNpLtHejMaW5Co GOlb9yM4f8xPQemVrpgXS1icRH898LSuVZOtB5ROALIpfoETWKZp4mFT2jWOH25z gt3jhHqryNb5rAnExw5HbXqsxM2jeFGoP9abKKTQgS6Hef5Eov2eVZSx1Ft7IMps DNsKik/fINZ949q59iIg0bm7o4Kah3djPS7158JJeYSFofBKOyi8fJS14gNwpXz2 xTX1hxpTA71rnaf3Vpcxkb9J25xD356kb8iZCKEqLCCGEwqyYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFACQwGky2/bSb8OnS3f4IQ6kx6YkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTAxYjQyMmItZWU3MC0z NmEzLWI4YTctMjA1MjFmNzk5NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKD7AwBDJ1KJouA9SbExyLu+IscQ58x5AVmbRaNGRMH2NMzNxYJ9 okmDFX4bB47L+LcwH2A9kjnq4qdBGfyJame3ruLtgLQW8TYHPTjqNgE0u1rbfJyg ucKil09EMO/Z/WKH0kDTTg2HzCfGk2Am/8Lfy+WiQ3hBnQmkr0uygk1WWuajuNlE xsEeewF4lAeJVIPleWVjXqyLdpFxWwdNXTLSvI7aI3BWujoOlAj1WGOIVz6QIQ9Y P5fVi/tL9O+WzNDxuuSwQFBwc+KXSy3YYYKWqtIcR1S5dEBYvHr8Y+ERXLgmBiVG oYAAGYGksI+v94NhF44Ww4cdE+uStJj1jh8= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:07 2025 by rpki-client