$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b23d1f1b-29fc-3143-a38a-47c3dad622da.roa File: b23d1f1b-29fc-3143-a38a-47c3dad622da.roa (raw, json) Hash identifier: 4FLLHBqfKWLKRlKuDzMy9zTF4aB3A//EQlnA2N5i+MU= Subject key identifier: 24:09:E8:5B:E5:B7:FA:A0:F5:87:0F:07:CD:91:12:C9:C8:8D:3B:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA2277357510FD8C624BBD0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b23d1f1b-29fc-3143-a38a-47c3dad622da.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396549 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:27:73:57:51:0f:d8:c6:24:bb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=8ff3d0c0-9a4f-4f8b-9749-e2a000e14475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:b6:0d:e0:ee:9c:b9:ec:42:ee:a8:f5:af: 04:98:cd:17:ea:95:a6:b0:95:19:08:de:d8:3b:dc: a4:00:d6:bb:bc:08:75:ed:77:06:06:08:d1:ad:d5: c8:c4:6c:34:de:bd:60:40:27:40:35:6b:6f:1e:6a: 13:86:aa:37:08:e1:92:dd:ec:e1:29:a8:15:b0:46: 3f:26:27:09:74:0e:0a:d9:06:9b:e4:ff:e1:b5:95: 7f:66:ed:04:b4:22:17:e6:00:78:2f:cc:a9:df:8c: 34:a4:ee:b8:4c:46:cd:cd:e9:78:9a:4a:22:35:9e: 14:db:f2:38:2f:0f:7b:e4:84:36:e5:06:1c:04:24: 59:7f:49:5c:74:79:8e:1a:21:a0:93:06:bd:4e:64: 5f:fb:fe:23:14:9f:e0:03:dd:62:52:12:e9:22:73: ec:06:ae:b3:31:d5:cd:46:1f:01:14:f7:9d:e4:21: 6b:ce:ab:ed:f1:cc:e3:61:21:6a:14:ff:c3:e5:2d: 23:ab:85:2e:04:d5:d8:c6:ea:be:f2:c0:cd:5e:9a: 21:cc:a7:f3:e2:b0:e7:10:9b:86:27:2a:9e:15:48: f4:84:6a:0c:88:d8:ef:51:9a:c9:f1:ec:06:26:ca: 54:67:cb:b5:a6:c5:ab:a6:9d:5b:86:91:55:63:6a: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:09:E8:5B:E5:B7:FA:A0:F5:87:0F:07:CD:91:12:C9:C8:8D:3B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b23d1f1b-29fc-3143-a38a-47c3dad622da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ef:b9:fa:70:8d:b3:7a:12:23:c5:e0:a5:e7:74:db:cd:13: ca:15:d9:a9:04:af:e3:24:eb:24:80:ea:24:aa:1c:58:0d:58: eb:6a:29:49:6c:d9:0b:1a:e7:63:f6:ba:df:64:71:45:39:73: f3:cd:36:02:a8:62:0c:22:e2:65:87:20:c5:21:80:8d:0f:73: de:b7:da:4e:80:af:d2:32:24:a1:ac:da:e1:d9:35:7d:2c:06: b7:dd:d6:5a:b7:eb:a1:00:f9:58:ba:d8:4f:70:cc:92:ea:d5: a5:e5:f6:0f:cd:0d:f5:f5:91:cf:51:c3:cc:90:a5:cd:0e:8d: 9d:a5:68:53:8f:21:a9:ed:34:a8:79:37:b4:21:00:74:96:7d: 24:78:9c:b3:e6:64:1c:04:56:a2:77:46:bb:ac:c3:fb:4c:94: e8:75:d2:c3:a5:4a:e3:ca:dc:15:18:45:9a:a3:80:94:df:e3: 58:96:9a:a1:1d:4e:78:1a:e8:c9:e8:df:6b:09:ad:fc:2d:9e: 17:c4:e3:9c:96:a7:fb:f0:84:bf:90:94:f1:5b:ff:33:0b:03: 98:80:49:b8:c9:ba:9b:7b:72:d1:b1:63:d6:1a:47:c1:44:a2: 6c:cb:8d:75:69:d5:6a:b8:7a:45:9e:c2:ec:f0:12:cc:de:6e: 65:9e:74:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoidzV1EP2MYku9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk OGZmM2QwYzAtOWE0Zi00ZjhiLTk3NDktZTJhMDAwZTE0NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsji2DeDunLnsQu6o9a8EmM0X6pWmsJUZCN7Y O9ykANa7vAh17XcGBgjRrdXIxGw03r1gQCdANWtvHmoThqo3COGS3ezhKagVsEY/ JicJdA4K2Qab5P/htZV/Zu0EtCIX5gB4L8yp34w0pO64TEbNzel4mkoiNZ4U2/I4 Lw975IQ25QYcBCRZf0lcdHmOGiGgkwa9TmRf+/4jFJ/gA91iUhLpInPsBq6zMdXN Rh8BFPed5CFrzqvt8czjYSFqFP/D5S0jq4UuBNXYxuq+8sDNXpohzKfz4rDnEJuG JyqeFUj0hGoMiNjvUZrJ8ewGJspUZ8u1psWrpp1bhpFVY2rOowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQJ6Fvlt/qg9YcPB82REsnIjTvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIzZDFmMWItMjlmYy0z MTQzLWEzOGEtNDdjM2RhZDYyMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF7vufpwjbN6EiPF4KXndNvNE8oV2akEr+Mk6ySA6iSqHFgNWOtq KUls2Qsa52P2ut9kcUU5c/PNNgKoYgwi4mWHIMUhgI0Pc9632k6Ar9IyJKGs2uHZ NX0sBrfd1lq366EA+Vi62E9wzJLq1aXl9g/NDfX1kc9Rw8yQpc0OjZ2laFOPIant NKh5N7QhAHSWfSR4nLPmZBwEVqJ3Rrusw/tMlOh10sOlSuPK3BUYRZqjgJTf41iW mqEdTnga6Mno32sJrfwtnhfE45yWp/vwhL+QlPFb/zMLA5iASbjJupt7ctGxY9Ya R8FEomzLjXVp1Wq4ekWewuzwEszebmWedAE= -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:52 2025 by rpki-client