$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1e0df7-7bc8-33d1-b707-9b3f461a413a.roa File: ac1e0df7-7bc8-33d1-b707-9b3f461a413a.roa (raw, json) Hash identifier: o5AC709kCqaHrR6/fx9nDXTkH6uOsJKFf9OJlb9WHTg= Subject key identifier: 01:E7:FC:95:2B:78:A5:53:99:93:87:BE:3C:E0:78:C1:B8:1A:B9:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23DF927FE22A008EA3C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1e0df7-7bc8-33d1-b707-9b3f461a413a.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 397208 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3d:f9:27:fe:22:a0:08:ea:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=8513c924-a188-40cd-a378-ff2999cad901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:96:62:cb:8d:64:91:f5:28:c0:43:c3:45: 23:29:30:e8:b7:f2:ac:7d:9b:2a:72:96:37:4c:96: a2:0f:fe:23:e0:92:68:26:47:cb:59:54:56:dc:c8: 6a:69:de:60:1c:2d:cc:2b:50:46:4d:b7:f1:b4:3c: be:1b:32:3e:a9:3a:dd:c9:16:5a:e7:77:0c:75:50: 58:48:9a:85:bf:1b:c2:8f:e1:67:9c:de:ea:6a:ca: 70:45:61:e4:77:86:35:8e:57:ad:23:1b:f0:77:24: 4c:7f:f9:f9:a5:ac:4f:29:b2:39:05:8a:8a:c0:95: 71:98:ef:4c:64:d4:69:14:14:cb:b6:1c:54:18:96: e9:8b:1f:87:a6:a6:ca:ec:2b:c9:65:ff:cf:b6:5a: e8:48:88:0a:1f:a5:84:47:61:f6:83:48:b8:f7:1b: 8b:83:5d:aa:07:de:11:ca:c1:94:d3:c7:c9:83:31: 5a:67:49:91:7a:ee:37:15:e9:d4:8d:bd:49:4a:cb: 7d:c0:9c:15:16:da:57:e6:3f:d0:7f:ee:e9:da:25: f8:82:a4:de:fe:ed:ef:14:e7:eb:aa:d5:20:51:f8: 83:7e:57:d6:e1:eb:8e:2c:d2:32:00:c2:59:47:bd: 7e:30:31:5e:d4:98:3b:d8:27:3a:6a:a8:ea:e8:41: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E7:FC:95:2B:78:A5:53:99:93:87:BE:3C:E0:78:C1:B8:1A:B9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1e0df7-7bc8-33d1-b707-9b3f461a413a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:8c:72:92:6f:20:30:3f:88:f5:a0:ba:c8:99:40:1c:c0:41: dd:d8:c8:02:33:e1:5e:99:81:c1:d1:eb:2f:0b:f8:c2:82:92: 4b:b2:8f:66:05:5f:d0:1e:e2:22:ae:e9:e9:16:dc:a8:92:82: 50:b6:e1:30:e1:c6:90:d0:ff:0c:51:73:1b:ae:13:30:99:1d: d0:1f:3c:8d:e1:9d:2b:59:6b:32:27:41:aa:4e:07:13:59:97: 37:eb:78:cf:4d:24:15:d2:74:ff:8c:ce:12:0d:b8:7c:b4:c7: a6:0a:26:58:ee:9f:b3:f0:56:e8:9d:a5:fc:4c:34:25:37:12: a3:0c:90:22:fc:6d:d6:8d:d4:68:4f:65:a6:1c:7f:09:af:34: 23:5f:c7:b7:a6:d0:a8:44:2f:70:aa:4c:57:82:6f:54:ea:7e: 2e:28:55:96:77:94:d3:ef:8b:48:5a:74:75:ef:d6:60:ca:4c: e9:81:50:7f:02:2d:3a:2f:43:18:d5:10:0b:76:34:d4:7a:35: a7:c2:4d:19:8e:da:14:c1:cc:d6:92:66:1e:8d:a6:7d:d4:cb: 8d:fb:48:e6:49:68:2a:d8:02:48:82:0a:a4:bc:e0:bc:12:bc: 74:a4:6b:b3:5e:af:7c:d2:cf:59:85:34:9d:4d:8b:47:0f:9e: 45:3d:e2:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoj35J/4ioAjqPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ODUxM2M5MjQtYTE4OC00MGNkLWEzNzgtZmYyOTk5Y2FkOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr26WYsuNZJH1KMBDw0UjKTDot/KsfZsqcpY3 TJaiD/4j4JJoJkfLWVRW3Mhqad5gHC3MK1BGTbfxtDy+GzI+qTrdyRZa53cMdVBY SJqFvxvCj+FnnN7qaspwRWHkd4Y1jletIxvwdyRMf/n5paxPKbI5BYqKwJVxmO9M ZNRpFBTLthxUGJbpix+HpqbK7CvJZf/PtlroSIgKH6WER2H2g0i49xuLg12qB94R ysGU08fJgzFaZ0mReu43FenUjb1JSst9wJwVFtpX5j/Qf+7p2iX4gqTe/u3vFOfr qtUgUfiDflfW4euOLNIyAMJZR71+MDFe1Jg72Cc6aqjq6EEahQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHn/JUreKVTmZOHvjzgeMG4GrlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWMxZTBkZjctN2JjOC0z M2QxLWI3MDctOWIzZjQ2MWE0MTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyMcpJvIDA/iPWgusiZQBzAQd3YyAIz4V6ZgcHR6y8L+MKCkkuy j2YFX9Ae4iKu6ekW3KiSglC24TDhxpDQ/wxRcxuuEzCZHdAfPI3hnStZazInQapO BxNZlzfreM9NJBXSdP+MzhINuHy0x6YKJljun7PwVuidpfxMNCU3EqMMkCL8bdaN 1GhPZaYcfwmvNCNfx7em0KhEL3CqTFeCb1Tqfi4oVZZ3lNPvi0hadHXv1mDKTOmB UH8CLTovQxjVEAt2NNR6NafCTRmO2hTBzNaSZh6Npn3Uy437SOZJaCrYAkiCCqS8 4LwSvHSka7Ner3zSz1mFNJ1Ni0cPnkU94oI= -----END CERTIFICATE-----Generated at Wed Oct 29 09:21:01 2025 by rpki-client