$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa File: b20df32c-7816-3e41-bf02-fd513a7ac378.roa (raw, json) Hash identifier: zMz7QXDspge8HqYKfycyUiwLpTpDzr836N/x9LOtQPY= Subject key identifier: 8E:81:DA:5B:13:27:29:41:CF:DF:E4:A1:B1:29:82:0A:5D:73:6C:BC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526BB23C62FF0582FFFB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36624 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6b:b2:3c:62:ff:05:82:ff:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=da40381f-2098-45ba-8285-c36469752157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:e6:04:32:7b:cc:a5:83:72:ca:33:13:9e: 57:1f:77:e1:4c:be:f3:77:91:2c:08:2d:61:76:5d: 96:f6:de:a6:45:50:27:53:00:62:36:ad:4a:31:af: a7:36:68:1c:56:25:1f:6f:8e:76:3f:3e:03:71:07: 40:48:74:bd:1f:d2:5b:4c:b6:f7:be:7e:c5:e9:01: 57:8a:7b:20:3e:63:66:a7:84:f8:0b:82:4f:b9:45: 32:f5:d1:20:cd:fb:94:94:cc:74:f8:44:9c:b8:6c: 6b:72:68:a0:75:17:77:ab:88:8f:80:7a:7e:76:b2: 84:10:56:28:42:56:dd:fa:53:a5:60:85:45:d9:40: e7:16:20:e4:0f:95:6b:06:38:5b:73:bd:e9:56:4f: c7:49:83:12:d9:54:ce:1a:ab:b1:25:9f:fa:4b:f5: d6:a2:ba:56:23:51:71:05:af:6f:31:7e:12:c1:b2: 12:73:a6:f8:eb:86:3e:e9:42:36:48:5d:5c:7e:7f: 3f:8f:8b:c2:40:e0:d5:32:84:04:f3:6e:d0:76:4e: 70:92:a3:1b:7f:9a:68:29:3f:2d:41:95:c6:02:7b: b5:9c:ca:e6:94:15:d6:a5:e2:37:bc:b7:70:17:f9: 3f:75:ac:a3:22:51:4a:c5:73:bb:c3:05:4f:1f:bb: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:81:DA:5B:13:27:29:41:CF:DF:E4:A1:B1:29:82:0A:5D:73:6C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:38:78:a1:19:ab:58:de:01:8a:8f:4e:e8:35:10:dc:d4:6b: e5:ff:d7:96:be:75:62:fe:65:4b:6f:78:60:f7:9e:62:06:8a: f5:ff:bf:d4:6e:b7:1c:34:7d:79:15:64:3b:e6:a3:36:21:53: 73:58:a2:f5:67:e4:7b:88:c1:80:d1:4d:d0:cf:5a:42:99:34: 53:65:6a:f5:af:64:a4:b2:22:88:93:c8:5f:20:aa:58:c2:07: 66:91:8f:1b:b3:38:6b:79:50:62:4a:e8:b8:b2:54:2e:f2:9b: 38:47:a7:5a:10:ff:d1:82:e6:0b:b0:0f:9e:aa:8a:77:32:4d: 40:22:c5:86:0f:9f:8d:a6:56:49:3b:f5:ad:99:66:9b:37:76: 53:64:24:78:46:af:17:52:13:43:4e:e2:56:6a:d7:99:dc:8c: 2e:bc:76:44:a0:23:9d:ec:ba:03:93:58:3d:e5:03:87:de:f2: f5:d0:b3:8c:30:7e:58:9b:a5:ba:85:90:51:78:35:f3:5b:8f: e7:ef:02:56:8e:71:83:c2:7b:ae:34:fe:7d:b5:32:49:33:30: 02:a8:3a:b3:17:11:00:f6:0b:be:78:69:9f:16:1a:86:e6:f7: 5f:f8:f2:4a:e8:27:66:9f:a1:64:d7:1e:84:f3:cd:8a:bd:41: 0e:8f:e2:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UmuyPGL/BYL/+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZGE0MDM4MWYtMjA5OC00NWJhLTgyODUtYzM2NDY5NzUyMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj/mBDJ7zKWDcsozE55XH3fhTL7zd5EsCC1h dl2W9t6mRVAnUwBiNq1KMa+nNmgcViUfb452Pz4DcQdASHS9H9JbTLb3vn7F6QFX insgPmNmp4T4C4JPuUUy9dEgzfuUlMx0+EScuGxrcmigdRd3q4iPgHp+drKEEFYo Qlbd+lOlYIVF2UDnFiDkD5VrBjhbc73pVk/HSYMS2VTOGquxJZ/6S/XWorpWI1Fx Ba9vMX4SwbISc6b464Y+6UI2SF1cfn8/j4vCQODVMoQE827Qdk5wkqMbf5poKT8t QZXGAnu1nMrmlBXWpeI3vLdwF/k/dayjIlFKxXO7wwVPH7t3UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI6B2lsTJylBz9/kobEpggpdc2y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIwZGYzMmMtNzgxNi0z ZTQxLWJmMDItZmQ1MTNhN2FjMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABo4eKEZq1jeAYqPTug1ENzUa+X/15a+dWL+ZUtveGD3nmIGivX/ v9Rutxw0fXkVZDvmozYhU3NYovVn5HuIwYDRTdDPWkKZNFNlavWvZKSyIoiTyF8g qljCB2aRjxuzOGt5UGJK6LiyVC7ymzhHp1oQ/9GC5guwD56qincyTUAixYYPn42m Vkk79a2ZZps3dlNkJHhGrxdSE0NO4lZq15ncjC68dkSgI53sugOTWD3lA4fe8vXQ s4wwflibpbqFkFF4NfNbj+fvAlaOcYPCe640/n21MkkzMAKoOrMXEQD2C754aZ8W Gobm91/48kroJ2afoWTXHoTzzYq9QQ6P4u8= -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:13 2025 by rpki-client