$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b04d5-afa3-3844-a94e-6e948b29ee12.roa File: bf0b04d5-afa3-3844-a94e-6e948b29ee12.roa (raw, json) Hash identifier: 770Yo3iyIbv1j3UhGY52GxYtqxEvB2/tl/TSrz/CGB8= Subject key identifier: A9:F3:EA:32:A3:1F:C3:2C:74:4F:50:B9:B5:18:A0:F0:03:CF:C6:A4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723B0334AC60C422DA7900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b04d5-afa3-3844-a94e-6e948b29ee12.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 27544 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3b:03:34:ac:60:c4:22:da:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=2725ec3e-dabf-4620-ba8b-268f78b86598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:7d:df:d8:b4:1a:1d:4b:1d:ab:64:ed:b9: 6e:65:57:25:47:6e:93:4d:89:47:42:02:e8:97:3a: 0e:0b:dd:53:2f:5d:5c:fd:8c:fd:81:1e:43:96:5d: 31:9f:27:34:23:30:8e:61:1e:3f:c7:d6:f2:5d:c0: 1c:69:33:84:99:24:41:55:b4:49:08:84:42:d5:f9: 2a:d3:3b:c7:6c:f0:98:26:ed:1b:05:01:1c:d5:f3: 43:f9:80:75:67:d2:f4:c3:15:37:b9:1c:25:42:a2: 4a:1c:4e:eb:ee:7b:e5:b4:73:1c:6d:cf:c3:ab:d7: 70:0e:83:03:e3:48:76:ca:04:4d:ec:d5:12:76:82: b1:f0:3d:b2:70:79:36:98:c8:ba:e3:e8:a9:06:14: 8a:4a:18:0c:2a:9b:2b:8b:27:8c:96:94:33:b5:f3: 71:60:87:6e:d3:83:83:f1:26:85:16:d6:fa:f7:c9: c6:27:cb:5b:10:d5:ca:fa:b6:83:4f:a4:0e:3f:de: 67:9c:37:e6:0f:7c:21:ab:24:14:4f:ca:38:2c:03: 5b:dd:1d:c6:45:70:80:08:96:38:09:9a:2d:d5:ed: cc:be:3e:0b:58:af:82:f9:8a:26:35:ef:d5:89:e3: 57:dc:f8:db:9b:25:dd:5b:67:42:11:3f:df:63:74: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F3:EA:32:A3:1F:C3:2C:74:4F:50:B9:B5:18:A0:F0:03:CF:C6:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b04d5-afa3-3844-a94e-6e948b29ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:32:76:0a:09:30:40:fe:5a:08:03:15:90:24:3e:04:6b:0e: 24:71:7f:58:ad:6c:64:b9:cd:51:b8:a1:f6:ff:47:ac:b8:9c: 78:7c:71:d0:2a:26:a7:e2:6a:0d:e0:d4:43:10:2a:0c:52:a2: b1:bc:52:5a:81:d5:9a:36:78:15:e8:e1:a1:af:5e:2b:e6:77: 18:c3:eb:3c:1e:f7:80:a1:bc:57:7a:d9:53:7e:b3:cc:9a:c2: 28:b9:23:c1:56:c3:a6:fd:69:fb:06:1c:25:32:a1:69:d1:68: 06:38:eb:38:bb:f6:f9:a8:a0:93:50:fa:b6:3b:b6:89:07:b5: dc:ff:2e:e6:40:18:f8:f1:8a:9a:12:1f:90:45:32:36:a4:8b: 65:91:e2:51:e8:b4:4e:29:03:14:9e:2e:00:99:04:9c:d4:b0: 86:16:c0:fd:8d:d8:36:0f:8e:11:94:cd:f9:47:b4:1b:a6:e5: 00:62:cf:7d:f8:75:29:83:29:68:ea:7e:9f:2d:97:6f:a9:ba: 95:c0:76:ea:33:87:34:ce:25:8a:13:ee:54:2f:ef:cc:4b:c8: 11:a8:f4:53:05:c7:d8:bf:47:5c:c2:99:c7:70:8c:74:c5:0a: bb:ce:da:c0:8d:21:1d:fd:c0:c6:e5:1d:60:32:a1:de:02:2b: 85:d6:da:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjsDNKxgxCLaeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MjcyNWVjM2UtZGFiZi00NjIwLWJhOGItMjY4Zjc4Yjg2NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg9939i0Gh1LHatk7bluZVclR26TTYlHQgLo lzoOC91TL11c/Yz9gR5Dll0xnyc0IzCOYR4/x9byXcAcaTOEmSRBVbRJCIRC1fkq 0zvHbPCYJu0bBQEc1fND+YB1Z9L0wxU3uRwlQqJKHE7r7nvltHMcbc/Dq9dwDoMD 40h2ygRN7NUSdoKx8D2ycHk2mMi64+ipBhSKShgMKpsriyeMlpQztfNxYIdu04OD 8SaFFtb698nGJ8tbENXK+raDT6QOP95nnDfmD3whqyQUT8o4LANb3R3GRXCACJY4 CZot1e3Mvj4LWK+C+YomNe/VieNX3PjbmyXdW2dCET/fY3RiQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKnz6jKjH8MsdE9QubUYoPADz8akMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYwYjA0ZDUtYWZhMy0z ODQ0LWE5NGUtNmU5NDhiMjllZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8ydgoJMED+WggDFZAkPgRrDiRxf1itbGS5zVG4ofb/R6y4nHh8 cdAqJqfiag3g1EMQKgxSorG8UlqB1Zo2eBXo4aGvXivmdxjD6zwe94ChvFd62VN+ s8yawii5I8FWw6b9afsGHCUyoWnRaAY46zi79vmooJNQ+rY7tokHtdz/LuZAGPjx ipoSH5BFMjaki2WR4lHotE4pAxSeLgCZBJzUsIYWwP2N2DYPjhGUzflHtBum5QBi z334dSmDKWjqfp8tl2+pupXAduozhzTOJYoT7lQv78xLyBGo9FMFx9i/R1zCmcdw jHTFCrvO2sCNIR39wMblHWAyod4CK4XW2so= -----END CERTIFICATE-----Generated at Wed Oct 29 09:00:28 2025 by rpki-client