$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6aee883-29fa-33b8-8472-a4fd3ed80820.roa File: c6aee883-29fa-33b8-8472-a4fd3ed80820.roa (raw, json) Hash identifier: hcRnNq3h07im6fG564TIx4y17TOpFe2+3Dr/B+3u29E= Subject key identifier: 4F:81:61:AF:62:FC:6C:A3:40:E2:C6:29:7F:BC:DF:69:CB:9C:06:C5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23A424C93EAA4AC0CB380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6aee883-29fa-33b8-8472-a4fd3ed80820.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 20172 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3a:42:4c:93:ea:a4:ac:0c:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=f154e9bf-b0c0-47fa-ab11-a176dbe7af61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:12:d9:7e:5c:98:0d:23:ee:84:15:fc:6b:8e: 88:b2:16:91:af:fb:48:1f:a9:e1:33:e2:d5:a0:aa: 2a:27:e0:50:21:40:5f:3d:0e:fa:48:37:51:b9:cc: a2:c8:05:f3:88:c8:5e:0c:87:ca:ad:4f:48:89:f6: e6:02:f8:e3:46:7b:dc:55:59:d0:48:cc:fc:84:d9: bd:cc:75:8e:5a:67:e2:f2:94:0d:a2:37:41:0d:0d: b8:48:85:4b:92:33:cd:81:26:d0:97:9e:5d:bb:4a: 44:9d:d3:51:85:4d:23:bc:f1:09:f1:c6:89:65:72: 37:63:0d:ff:93:fd:65:b7:e0:2e:fc:ad:21:1a:7b: de:37:80:a4:a7:e8:71:f3:62:1d:ef:e0:8e:e4:e6: f5:f1:8b:e7:e1:42:a1:4d:68:15:f2:07:58:bc:7f: 26:e3:e9:f0:04:86:46:51:63:64:69:71:71:cf:19: 69:c5:5c:15:dd:b5:fe:a8:cc:4b:ec:40:33:fd:46: 7a:5a:2b:fe:81:49:1a:d4:9f:e7:0b:28:36:1c:96: 4e:72:2d:66:ba:ed:6b:62:87:5f:9f:c8:95:85:f9: d9:73:86:9d:03:51:fc:69:4a:67:87:93:83:8e:50: f4:2e:f7:fa:45:35:a0:7f:87:45:03:67:e4:bc:71: 6a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:61:AF:62:FC:6C:A3:40:E2:C6:29:7F:BC:DF:69:CB:9C:06:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6aee883-29fa-33b8-8472-a4fd3ed80820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:99:72:23:91:1c:07:dd:49:c8:a3:f3:5d:83:08:7c:7c:1d: 22:f7:91:ea:87:3f:a0:5a:eb:d3:a8:a9:de:2d:93:c0:00:a5: f4:63:c5:9b:ff:02:8b:45:9d:5b:e4:c6:b7:54:19:5f:8e:70: 10:27:fb:61:66:5d:5d:0f:08:34:5c:43:4d:24:ce:4c:b3:94: 0a:b7:10:ba:05:5b:bb:2c:40:d6:1d:4a:57:ed:d2:ec:ef:3d: 58:39:73:99:46:f8:ab:2b:73:64:b8:e5:c3:0c:3a:ec:78:13: 0c:c5:fb:2a:a1:d3:b9:72:af:16:1f:44:6f:99:91:30:df:b9: 64:f1:c3:8d:dc:0e:3b:0e:eb:b4:1c:f4:f2:ba:82:40:83:13: f5:4c:11:98:b5:52:12:d5:25:c2:6c:57:46:53:18:2e:6d:07: 0f:9e:bb:5b:eb:0a:7b:87:d6:74:e4:ae:51:12:ef:f9:18:a7: b5:51:74:40:79:70:2b:96:90:67:0d:61:87:59:d6:6c:a4:9c: 4d:d8:8c:eb:80:b2:ab:3a:89:8c:12:a7:a1:9e:48:8d:a5:b7: 00:48:52:92:59:67:70:ba:ac:70:8c:99:9d:9d:1a:bb:03:ea: a8:d2:23:c3:84:da:b3:fa:77:5e:c9:6e:0c:fb:2e:e0:11:d4: 8c:ed:2e:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucojpCTJPqpKwMs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjE1NGU5YmYtYjBjMC00N2ZhLWFiMTEtYTE3NmRiZTdhZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hLZflyYDSPuhBX8a46IshaRr/tIH6nhM+LV oKoqJ+BQIUBfPQ76SDdRucyiyAXziMheDIfKrU9IifbmAvjjRnvcVVnQSMz8hNm9 zHWOWmfi8pQNojdBDQ24SIVLkjPNgSbQl55du0pEndNRhU0jvPEJ8caJZXI3Yw3/ k/1lt+Au/K0hGnveN4Ckp+hx82Id7+CO5Ob18Yvn4UKhTWgV8gdYvH8m4+nwBIZG UWNkaXFxzxlpxVwV3bX+qMxL7EAz/UZ6Wiv+gUka1J/nCyg2HJZOci1muu1rYodf n8iVhfnZc4adA1H8aUpnh5ODjlD0Lvf6RTWgf4dFA2fkvHFqgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+BYa9i/GyjQOLGKX+832nLnAbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzZhZWU4ODMtMjlmYS0z M2I4LTg0NzItYTRmZDNlZDgwODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHeZciORHAfdScij812DCHx8HSL3keqHP6Ba69Ooqd4tk8AApfRj xZv/AotFnVvkxrdUGV+OcBAn+2FmXV0PCDRcQ00kzkyzlAq3ELoFW7ssQNYdSlft 0uzvPVg5c5lG+Ksrc2S45cMMOux4EwzF+yqh07lyrxYfRG+ZkTDfuWTxw43cDjsO 67Qc9PK6gkCDE/VMEZi1UhLVJcJsV0ZTGC5tBw+eu1vrCnuH1nTkrlES7/kYp7VR dEB5cCuWkGcNYYdZ1myknE3YjOuAsqs6iYwSp6GeSI2ltwBIUpJZZ3C6rHCMmZ2d GrsD6qjSI8OE2rP6d17Jbgz7LuAR1IztLug= -----END CERTIFICATE-----Generated at Wed Oct 29 09:15:08 2025 by rpki-client