$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8233b40-0e85-3f77-b93f-d52f6919f2f3.roa File: b8233b40-0e85-3f77-b93f-d52f6919f2f3.roa (raw, json) Hash identifier: EtbhIhBZdxA75EDjL5Pn7tgAlfvC3oWMF4mvO+RecDo= Subject key identifier: 5A:C8:3B:7D:06:86:9A:C6:45:27:D4:27:85:99:70:AD:F4:AA:43:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724A49F56F6F09E36D3800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8233b40-0e85-3f77-b93f-d52f6919f2f3.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396614 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4a:49:f5:6f:6f:09:e3:6d:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=d7341109-3b8d-4e18-9e2d-79ab5799a020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:a5:74:41:c0:3f:91:ae:71:3f:36:2a:f4: 6e:cd:cc:e7:89:a0:a7:a6:f3:9a:ae:25:a1:b2:d7: d3:34:b6:8b:52:4f:45:b3:99:28:68:26:ff:29:65: 07:19:f4:e3:5d:f7:bb:35:dc:64:79:50:d3:12:b4: 61:2e:4f:0a:4a:27:f1:8b:c8:18:02:67:b6:eb:b3: d2:78:ca:55:28:54:71:45:e2:07:43:79:ba:cc:bf: 38:c4:67:98:a1:30:39:e6:6c:37:34:b4:86:59:6b: 2f:1a:6e:6d:c7:ef:41:c7:7b:be:0a:2b:66:d7:24: 0a:5a:59:cf:90:40:e2:a0:79:74:78:30:e5:62:62: d4:36:8e:3f:d7:2d:85:55:06:2d:e2:83:3e:8a:56: 39:b7:82:90:1d:75:a1:e3:a9:b9:93:ce:bf:c9:60: 74:fd:62:a2:38:61:db:fd:2c:b5:3b:e1:80:b6:30: 5d:ab:53:0b:21:b1:02:2d:df:6d:1a:a7:e8:18:ae: 91:17:94:10:1a:58:0b:7d:99:06:9b:7c:ea:ad:e5: f1:97:56:4a:a9:e9:e0:01:11:b1:b3:aa:39:3e:29: c3:5d:33:10:b2:95:05:83:2e:57:d3:02:8e:1e:a8: 3c:ea:e6:7a:99:36:3e:5f:e4:ed:63:2a:9b:ac:21: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C8:3B:7D:06:86:9A:C6:45:27:D4:27:85:99:70:AD:F4:AA:43:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8233b40-0e85-3f77-b93f-d52f6919f2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:66:82:56:10:6f:8d:bc:75:f7:46:06:95:b5:f6:4b:da:da: 15:1c:67:4c:4f:6d:20:3f:52:cb:b6:04:88:8f:89:55:aa:32: 88:c3:37:77:fa:d5:a9:3b:fe:aa:5a:6c:a9:20:e8:eb:fd:ac: e5:76:77:28:33:5b:c2:af:52:63:29:f9:81:c3:7d:c4:5f:9d: 15:92:6e:70:54:40:b8:55:27:ed:30:09:6a:6e:bd:eb:3e:7e: 9f:f7:c7:b0:cd:28:55:84:30:e3:7e:6e:b1:96:b5:16:48:75: 40:01:59:e5:52:d0:da:18:22:60:58:ab:4c:fe:a2:cf:ae:ca: db:53:9d:51:3b:88:ef:75:64:71:7b:e1:de:2b:37:bb:b1:5d: 76:38:5f:f7:8e:5c:a1:8c:aa:65:ee:ca:5b:4a:43:41:ff:a9: 50:04:d3:b6:b0:09:b3:90:09:5a:70:f5:d8:a5:3a:7c:8b:9f: 31:01:1d:b0:8c:1d:98:01:44:a0:ef:4a:56:52:64:25:84:68: 27:a7:66:f7:1b:5b:84:27:43:77:6b:92:37:ad:0e:52:31:f6: f5:53:43:9b:42:10:90:74:a6:73:56:04:7a:59:e3:f0:dd:f3: 31:93:0a:69:01:aa:b9:2b:47:1f:21:cb:7a:01:f0:a4:ab:ab: e4:29:f3:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckpJ9W9vCeNtOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk ZDczNDExMDktM2I4ZC00ZTE4LTllMmQtNzlhYjU3OTlhMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpmldEHAP5GucT82KvRuzczniaCnpvOariWh stfTNLaLUk9Fs5koaCb/KWUHGfTjXfe7NdxkeVDTErRhLk8KSifxi8gYAme267PS eMpVKFRxReIHQ3m6zL84xGeYoTA55mw3NLSGWWsvGm5tx+9Bx3u+Citm1yQKWlnP kEDioHl0eDDlYmLUNo4/1y2FVQYt4oM+ilY5t4KQHXWh46m5k86/yWB0/WKiOGHb /Sy1O+GAtjBdq1MLIbECLd9tGqfoGK6RF5QQGlgLfZkGm3zqreXxl1ZKqengARGx s6o5PinDXTMQspUFgy5X0wKOHqg86uZ6mTY+X+TtYyqbrCEsvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFrIO30GhprGRSfUJ4WZcK30qkNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjgyMzNiNDAtMGU4NS0z Zjc3LWI5M2YtZDUyZjY5MTlmMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKxmglYQb428dfdGBpW19kva2hUcZ0xPbSA/Usu2BIiPiVWqMojD N3f61ak7/qpabKkg6Ov9rOV2dygzW8KvUmMp+YHDfcRfnRWSbnBUQLhVJ+0wCWpu ves+fp/3x7DNKFWEMON+brGWtRZIdUABWeVS0NoYImBYq0z+os+uyttTnVE7iO91 ZHF74d4rN7uxXXY4X/eOXKGMqmXuyltKQ0H/qVAE07awCbOQCVpw9dilOnyLnzEB HbCMHZgBRKDvSlZSZCWEaCenZvcbW4QnQ3drkjetDlIx9vVTQ5tCEJB0pnNWBHpZ 4/Dd8zGTCmkBqrkrRx8hy3oB8KSrq+Qp81c= -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:12 2025 by rpki-client