$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a33e9329-e50c-3b74-aae3-b69b9b9558d9.roa File: a33e9329-e50c-3b74-aae3-b69b9b9558d9.roa (raw, json) Hash identifier: IRQfFYjCt4R3g2tfS/RE7qU6hIoNQLibxTukg8hYmgA= Subject key identifier: 31:23:E8:F5:40:38:54:A7:A8:E4:EE:CF:3D:37:B9:45:BA:60:E2:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA22E3EFA19AE3E2DBDF880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a33e9329-e50c-3b74-aae3-b69b9b9558d9.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396611 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2e:3e:fa:19:ae:3e:2d:bd:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=e8d2c134-a160-4b01-8051-9b710494e805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1c:16:54:4d:67:df:1d:58:47:48:f6:6d:f8: 7c:79:8a:a7:bd:f6:a5:5d:95:4c:60:cf:27:d6:61: 82:17:a3:70:97:fd:89:67:ed:7c:ae:73:7b:95:b6: 57:c4:8a:27:4b:2e:50:71:5c:68:18:87:65:66:9b: 34:a3:bb:fb:1a:3e:32:99:36:ba:39:d2:3a:48:93: 6b:d9:a0:cf:51:fe:e9:f8:e7:a0:95:a8:3b:5e:06: 7c:39:ef:61:c5:a5:45:19:e6:fe:c5:a7:4c:97:6c: 9c:9d:ad:a3:5d:4b:9a:cb:36:79:ce:3e:65:a1:55: 16:c7:32:58:d2:a0:89:df:4a:4a:1e:cd:e7:75:51: 8d:9b:91:db:af:a7:1e:53:17:bb:68:57:15:b7:be: 70:a1:ac:33:58:1e:e7:fa:15:56:2a:54:d2:97:c5: eb:3d:66:72:ca:79:8f:22:03:9d:e4:3a:2d:12:e5: 60:0b:35:66:69:86:5c:ae:db:0f:c8:f8:51:b8:69: c9:87:b5:cf:31:75:5d:d0:3b:fe:a5:6a:41:bb:0a: 55:bf:13:a0:db:2e:40:06:93:35:9b:cd:ed:6b:12: 41:22:61:d5:a8:3b:df:e6:91:8d:54:12:04:22:62: 1c:06:39:e7:ba:b4:2f:0f:b3:c2:75:e0:e2:44:8e: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:23:E8:F5:40:38:54:A7:A8:E4:EE:CF:3D:37:B9:45:BA:60:E2:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a33e9329-e50c-3b74-aae3-b69b9b9558d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:46:33:2d:9d:ef:86:c8:75:22:3f:2c:ae:9e:f0:62:4b:a2: f4:e8:ff:9c:1f:41:32:ba:1e:29:1f:f7:89:d0:bb:63:b2:02: d4:96:ff:c2:c8:59:ff:bc:62:c3:9b:bc:fc:7b:43:bf:3a:87: 2b:c1:a5:6f:c2:5e:dd:9c:6a:ff:e9:b7:39:ae:dc:b3:03:b5: c3:9f:8e:08:7e:8c:1f:68:a7:4c:02:24:b9:9c:ac:fe:1a:ac: 3b:64:ea:93:f0:6e:53:73:c9:da:ff:09:40:8c:a6:41:29:72: d5:e4:2c:20:1b:3b:70:c8:4d:4f:48:3e:69:c1:0d:6b:38:bc: d9:04:6e:6e:69:7e:26:2d:2e:c3:01:c9:a6:e5:24:33:93:37: 6d:14:17:69:4f:46:68:d8:72:a4:b1:8a:c4:d1:92:b2:00:3f: 0e:98:ee:e4:a3:57:55:8b:29:ba:0f:36:89:08:9e:67:b6:5b: cc:0a:1e:50:01:34:0a:77:b8:d3:85:20:38:81:0e:b7:45:ba: 59:93:dd:36:52:1b:5d:84:d1:1d:7e:36:55:21:d9:59:de:b0: 3c:fa:32:32:ba:ae:44:6a:dc:96:1a:ae:25:58:3a:e9:13:4c: b5:d0:97:c6:29:44:d7:9a:08:71:82:ae:9e:86:3a:01:c3:6c: 34:17:4f:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoi4++hmuPi29+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZThkMmMxMzQtYTE2MC00YjAxLTgwNTEtOWI3MTA0OTRlODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBwWVE1n3x1YR0j2bfh8eYqnvfalXZVMYM8n 1mGCF6Nwl/2JZ+18rnN7lbZXxIonSy5QcVxoGIdlZps0o7v7Gj4ymTa6OdI6SJNr 2aDPUf7p+Oeglag7XgZ8Oe9hxaVFGeb+xadMl2ycna2jXUuayzZ5zj5loVUWxzJY 0qCJ30pKHs3ndVGNm5Hbr6ceUxe7aFcVt75woawzWB7n+hVWKlTSl8XrPWZyynmP IgOd5DotEuVgCzVmaYZcrtsPyPhRuGnJh7XPMXVd0Dv+pWpBuwpVvxOg2y5ABpM1 m83taxJBImHVqDvf5pGNVBIEImIcBjnnurQvD7PCdeDiRI7SSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDEj6PVAOFSnqOTuzz03uUW6YOK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTMzZTkzMjktZTUwYy0z Yjc0LWFhZTMtYjY5YjliOTU1OGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ9GMy2d74bIdSI/LK6e8GJLovTo/5wfQTK6Hikf94nQu2OyAtSW /8LIWf+8YsObvPx7Q786hyvBpW/CXt2cav/ptzmu3LMDtcOfjgh+jB9op0wCJLmc rP4arDtk6pPwblNzydr/CUCMpkEpctXkLCAbO3DITU9IPmnBDWs4vNkEbm5pfiYt LsMByablJDOTN20UF2lPRmjYcqSxisTRkrIAPw6Y7uSjV1WLKboPNokInme2W8wK HlABNAp3uNOFIDiBDrdFulmT3TZSG12E0R1+NlUh2VnesDz6MjK6rkRq3JYariVY OukTTLXQl8YpRNeaCHGCrp6GOgHDbDQXT4M= -----END CERTIFICATE-----Generated at Wed Oct 29 11:23:19 2025 by rpki-client