$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa File: a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa (raw, json) Hash identifier: YPm2Agasx5XgL6HjDCUOEySNNeNl/Ayagj+pIpnYysQ= Subject key identifier: F9:4E:D2:B7:D0:42:D4:95:46:A0:75:00:17:64:2A:0C:48:44:AE:ED Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA22E5DE16D0E4ADCA58E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396615 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2e:5d:e1:6d:0e:4a:dc:a5:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=85a08c46-4de0-4c1b-ad19-3fb494395f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:08:33:5c:22:94:cc:15:08:e6:8d:14:6c: dd:de:15:5d:af:23:98:0f:bd:9a:34:5c:1e:7f:32: 99:88:da:b1:33:8d:75:b4:3b:07:e0:65:b9:3c:3a: 3e:6a:ec:8d:c3:83:bb:02:9a:0a:cf:df:e2:33:b2: 0e:43:d4:a8:26:be:59:93:57:52:2b:3f:e7:47:eb: 1c:a1:02:9c:8f:86:d1:2f:66:9d:d7:d4:56:10:02: b0:3e:6e:0b:d2:1f:10:80:4d:74:bf:5f:2c:f3:45: a1:1f:f4:4e:fa:0d:f9:f5:f8:8d:37:2c:bf:24:d2: 62:7d:82:2d:4a:d3:55:eb:44:4e:27:96:3c:58:b8: 6f:cd:66:37:5d:db:8b:df:f3:4d:48:51:5c:aa:e2: 1a:4f:19:6a:db:b1:9a:4a:8f:e1:06:4b:82:5f:ec: b2:c1:9e:f5:50:c9:73:13:ab:0e:bd:bc:fb:b0:54: 8d:1c:d4:85:86:d4:fa:aa:2b:74:11:13:d3:f9:7d: 46:14:da:e4:55:a4:f9:6b:72:00:21:36:e4:3d:af: 83:f4:cc:36:0b:68:b9:60:cf:db:bf:41:cc:05:5c: b6:57:ad:41:c9:00:dc:14:4f:14:a0:f7:8d:9b:5d: 3e:6b:ce:05:06:e8:87:f0:8d:ae:4f:9c:82:ea:c0: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4E:D2:B7:D0:42:D4:95:46:A0:75:00:17:64:2A:0C:48:44:AE:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:6b:fe:5a:30:a9:b1:99:a6:e0:4b:5b:26:57:11:dc:ed:35: d5:d3:15:70:85:13:e4:52:d4:6a:6d:5a:c6:54:36:07:e0:3b: 40:6f:eb:5f:09:80:bd:1b:23:17:0d:85:39:a6:ae:7c:f0:68: 66:3f:c6:fa:97:db:f6:ea:f5:2f:c9:b0:ae:9f:db:bd:6c:68: e9:5e:c0:b7:eb:7e:89:45:8e:9e:03:80:e7:60:c8:8f:96:e4: ae:60:13:00:63:3b:d2:2d:2d:f5:6e:98:91:5f:58:3c:21:e3: 94:a7:2e:5b:12:f2:d1:b6:50:52:c3:ae:12:f6:d2:ea:f2:5c: e3:99:cd:83:f4:ca:ce:a7:21:fc:73:12:68:d6:f3:ac:2c:d0: 5e:52:dc:55:c0:e9:b1:cb:cd:f5:18:45:02:79:eb:15:8f:ae: b8:d0:7c:05:9d:9c:5b:96:5b:24:48:88:6a:cf:57:ae:77:07: ba:1b:19:7e:36:f3:83:05:d0:1c:05:1d:79:05:a9:04:d7:37: 3d:ab:a0:75:4d:fc:a4:b9:6a:19:91:fc:1e:1b:5b:81:84:1b: 6a:0b:cc:c4:96:a3:33:c6:13:60:a3:b2:73:20:1e:e6:2a:e9: 7d:60:b8:52:bf:91:19:bf:61:f6:d7:0f:bb:4e:b9:c7:19:a4: d2:7c:d7:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoi5d4W0OStyljgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ODVhMDhjNDYtNGRlMC00YzFiLWFkMTktM2ZiNDk0Mzk1ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdYIM1wilMwVCOaNFGzd3hVdryOYD72aNFwe fzKZiNqxM411tDsH4GW5PDo+auyNw4O7ApoKz9/iM7IOQ9SoJr5Zk1dSKz/nR+sc oQKcj4bRL2ad19RWEAKwPm4L0h8QgE10v18s80WhH/RO+g359fiNNyy/JNJifYIt StNV60ROJ5Y8WLhvzWY3XduL3/NNSFFcquIaTxlq27GaSo/hBkuCX+yywZ71UMlz E6sOvbz7sFSNHNSFhtT6qit0ERPT+X1GFNrkVaT5a3IAITbkPa+D9Mw2C2i5YM/b v0HMBVy2V61ByQDcFE8UoPeNm10+a84FBuiH8I2uT5yC6sC7twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPlO0rfQQtSVRqB1ABdkKgxIRK7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTJlZmU0YzctZDExZS0z OTYxLWI2YTItMGFhOGJmZGZlYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALJr/lowqbGZpuBLWyZXEdztNdXTFXCFE+RS1GptWsZUNgfgO0Bv 618JgL0bIxcNhTmmrnzwaGY/xvqX2/bq9S/JsK6f271saOlewLfrfolFjp4DgOdg yI+W5K5gEwBjO9ItLfVumJFfWDwh45SnLlsS8tG2UFLDrhL20uryXOOZzYP0ys6n IfxzEmjW86ws0F5S3FXA6bHLzfUYRQJ56xWPrrjQfAWdnFuWWyRIiGrPV653B7ob GX4284MF0BwFHXkFqQTXNz2roHVN/KS5ahmR/B4bW4GEG2oLzMSWozPGE2CjsnMg HuYq6X1guFK/kRm/YfbXD7tOuccZpNJ810Q= -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:02 2025 by rpki-client