$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff8fb61-50cf-3f79-b308-83f488675825.roa File: aff8fb61-50cf-3f79-b308-83f488675825.roa (raw, json) Hash identifier: N8NlTeAyXfKWSY0qczNjLZWFiYQ8AQb2TIk2YSqa0IQ= Subject key identifier: 37:72:D1:E3:3D:44:D5:2E:2A:5D:3C:03:62:47:F9:AC:C4:95:6B:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA229C6076FA0AC902F5C20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff8fb61-50cf-3f79-b308-83f488675825.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 397204 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:29:c6:07:6f:a0:ac:90:2f:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=4c1f7993-0a01-44a9-b887-d615da15da0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a5:67:1d:10:47:03:90:46:c8:e4:62:ca:ed: 75:5e:f5:cf:94:d0:62:de:6b:05:54:a4:95:a9:41: 47:eb:5b:e2:a9:28:98:c1:9f:46:cf:00:c8:ff:72: 0f:ce:04:db:a0:d5:e7:6e:9a:bc:7b:e3:f1:4f:05: 29:99:d5:21:15:4c:ab:26:3e:75:73:a0:be:e8:56: bf:45:f8:80:58:3c:d5:16:b6:f4:11:7f:60:49:d1: 05:45:84:7b:98:f3:cd:af:d7:a1:af:e9:ff:cd:2d: c3:45:94:6f:62:83:31:1a:e8:81:ef:61:2d:9c:51: f1:ae:91:d0:45:cd:43:62:8d:52:8b:60:1c:5f:8c: 92:6e:0b:38:2d:89:dd:e6:f8:46:8b:f4:7d:b6:db: 36:92:0d:ee:f3:ea:55:18:b3:3c:47:c0:67:d2:f0: 71:47:d4:50:b2:ab:6e:57:a2:d4:c6:e2:af:f0:6b: 0b:04:48:91:ae:c4:57:e3:0f:37:c4:2e:69:18:00: 39:3d:4f:bc:d4:59:8e:25:da:93:97:97:23:59:54: 47:a2:2c:43:7b:cc:0b:1e:20:30:ab:ac:30:48:c6: 58:31:00:3c:ca:05:e0:60:cb:fc:6b:bf:8c:30:07: 7b:a1:ec:2f:f5:69:19:22:f3:44:b6:5d:4b:2b:9e: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:72:D1:E3:3D:44:D5:2E:2A:5D:3C:03:62:47:F9:AC:C4:95:6B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff8fb61-50cf-3f79-b308-83f488675825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d7:80:eb:3b:18:e0:c5:b5:ff:7d:8b:0d:7b:e8:d3:aa:36: d6:eb:66:db:48:ea:ba:ff:7b:eb:32:79:60:4e:f6:01:a1:b0: 9c:fb:8a:65:d7:bc:f5:9c:60:1f:54:6c:5c:f3:21:36:46:b7: 89:eb:3e:2c:46:dc:f4:3c:79:46:49:ba:5e:6a:6f:b4:15:7f: c2:dd:69:cb:39:f9:14:79:33:6d:7e:6b:f4:78:b1:01:75:ed: 82:3e:c8:ed:00:1c:6a:fe:71:a5:6a:1e:0b:e3:99:72:47:be: c7:19:a1:ea:38:9c:bc:f4:36:dc:13:03:4e:49:d5:00:85:94: 24:5a:a0:7c:a6:0d:88:19:ba:b5:1e:c9:94:8f:ee:f5:ff:7b: 1e:75:49:19:92:1f:43:93:d3:05:73:15:c1:0a:9a:1d:be:fe: ba:3f:71:d4:c7:aa:c5:28:bd:14:b2:0f:8d:39:8c:9d:c0:0a: 8d:fe:98:53:dc:5e:da:b9:65:32:fa:6e:8d:56:fd:94:45:18: fe:08:ef:bf:cf:ea:1e:9c:36:11:16:13:f3:22:60:8d:ac:bc: 35:88:f5:aa:ba:ca:d2:6d:31:cd:b6:30:cc:20:be:94:88:61: 90:f5:60:ba:8e:44:46:cc:ba:29:45:12:1e:3f:2e:9a:6b:76: 55:26:d9:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoinGB2+grJAvXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk NGMxZjc5OTMtMGEwMS00NGE5LWI4ODctZDYxNWRhMTVkYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6VnHRBHA5BGyORiyu11XvXPlNBi3msFVKSV qUFH61viqSiYwZ9GzwDI/3IPzgTboNXnbpq8e+PxTwUpmdUhFUyrJj51c6C+6Fa/ RfiAWDzVFrb0EX9gSdEFRYR7mPPNr9ehr+n/zS3DRZRvYoMxGuiB72EtnFHxrpHQ Rc1DYo1Si2AcX4ySbgs4LYnd5vhGi/R9tts2kg3u8+pVGLM8R8Bn0vBxR9RQsqtu V6LUxuKv8GsLBEiRrsRX4w83xC5pGAA5PU+81FmOJdqTl5cjWVRHoixDe8wLHiAw q6wwSMZYMQA8ygXgYMv8a7+MMAd7oewv9WkZIvNEtl1LK57hCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDdy0eM9RNUuKl08A2JH+azElWsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZmOGZiNjEtNTBjZi0z Zjc5LWIzMDgtODNmNDg4Njc1ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfXgOs7GODFtf99iw176NOqNtbrZttI6rr/e+syeWBO9gGhsJz7 imXXvPWcYB9UbFzzITZGt4nrPixG3PQ8eUZJul5qb7QVf8Ldacs5+RR5M21+a/R4 sQF17YI+yO0AHGr+caVqHgvjmXJHvscZoeo4nLz0NtwTA05J1QCFlCRaoHymDYgZ urUeyZSP7vX/ex51SRmSH0OT0wVzFcEKmh2+/ro/cdTHqsUovRSyD405jJ3ACo3+ mFPcXtq5ZTL6bo1W/ZRFGP4I77/P6h6cNhEWE/MiYI2svDWI9aq6ytJtMc22MMwg vpSIYZD1YLqOREbMuilFEh4/LpprdlUm2V8= -----END CERTIFICATE-----Generated at Wed Oct 29 07:06:41 2025 by rpki-client