$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c857f696-0012-3d78-b619-2e0307525423.roa File: c857f696-0012-3d78-b619-2e0307525423.roa (raw, json) Hash identifier: OYUBERMA7n3e1JLdAuhSc1rszN3S9BYW1Kaz8rv8UvQ= Subject key identifier: 85:C8:CD:4C:0A:F2:3B:25:96:13:67:DE:B5:2B:26:E3:CD:DA:C3:A3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723AAB65FE0ACEC20BEA40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c857f696-0012-3d78-b619-2e0307525423.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396587 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3a:ab:65:fe:0a:ce:c2:0b:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=a2d046b6-02c5-4f49-96e5-6ecd1f5594fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:fe:e5:98:8a:33:f5:a3:0d:82:9c:66:77: d2:f3:89:3f:a5:e8:81:2a:02:43:92:6b:3b:95:99: 94:e6:12:69:9f:b1:bd:9d:76:7d:ad:a0:0e:85:2b: 83:6f:24:ed:9c:d3:71:76:3e:73:53:cf:8c:db:85: 3d:23:51:3d:da:c3:9f:45:3c:25:63:d3:7f:0c:9e: 04:8a:48:68:41:ae:1b:ea:19:5f:5f:ed:7d:72:8e: 13:d6:c9:c1:81:06:74:04:b1:65:6b:30:06:e4:bf: d3:78:14:0f:44:fa:01:f2:1a:c9:fd:bc:bd:85:98: e7:b8:f9:bb:7b:c5:5e:c8:28:40:fa:7a:7a:9f:1e: 41:85:a3:63:3a:1c:2f:a7:2e:d6:9e:01:87:4e:e1: ea:7a:7c:51:e1:06:81:b1:fd:0d:5d:b1:02:02:a9: d3:1c:2c:5e:8e:88:f9:44:4c:2e:93:27:51:7d:b6: 9e:dc:d4:9f:65:66:16:28:d8:31:d2:36:17:48:3a: 5a:e6:7a:40:01:bf:98:2e:47:8c:a8:d2:af:e8:f9: c7:8d:af:ac:fd:90:8c:4f:86:8f:61:8e:21:93:e9: 99:af:c9:a6:51:ab:35:a4:89:b0:23:cd:4c:c6:1d: 78:63:4b:7b:62:4b:33:1e:36:99:28:c1:26:92:99: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C8:CD:4C:0A:F2:3B:25:96:13:67:DE:B5:2B:26:E3:CD:DA:C3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c857f696-0012-3d78-b619-2e0307525423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:9b:a2:2b:b9:26:bb:6c:a5:96:b6:a1:6f:5b:fe:08:1d:40: 16:d8:c8:cc:c5:54:1f:a7:98:db:ab:bd:be:be:5a:2b:4d:05: bc:4c:11:36:59:03:d2:1a:fe:37:f6:fe:14:20:30:c8:1c:da: ef:a0:65:62:1a:60:94:9b:64:2e:49:08:96:f7:ef:bd:e8:64: ac:cd:7b:23:78:67:58:07:00:1a:e4:b4:8c:4c:a1:85:15:46: 8f:a5:d1:fc:f8:bb:c2:10:84:da:6e:2c:1b:d3:c1:5a:f6:9b: 08:a7:93:9e:b9:ad:60:96:a8:44:4d:aa:e2:6e:37:b3:d7:7f: 5c:9b:71:23:ef:d2:96:14:4a:f1:2d:7b:01:1d:5f:d6:3d:a3: de:c3:03:95:04:c0:d9:21:88:55:24:89:3c:e4:64:21:95:3a: c8:73:6a:9c:3b:38:03:d5:e7:92:54:01:f8:eb:c3:9e:9c:86: 46:27:d6:25:99:9a:34:e3:70:f0:c5:91:70:60:0e:a1:9d:dd: 1a:fc:dc:e2:01:38:91:ac:96:5c:68:70:f9:c0:4f:d3:d2:47: bb:4e:f2:96:e9:42:50:8a:03:9a:ed:2a:50:51:b0:5d:83:98: 7d:9b:d3:c9:80:d2:b7:4c:f4:6b:df:f7:2c:3b:b6:4e:95:a2: a9:e4:44:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjqrZf4KzsIL6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YTJkMDQ2YjYtMDJjNS00ZjQ5LTk2ZTUtNmVjZDFmNTU5NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8z+5ZiKM/WjDYKcZnfS84k/peiBKgJDkms7 lZmU5hJpn7G9nXZ9raAOhSuDbyTtnNNxdj5zU8+M24U9I1E92sOfRTwlY9N/DJ4E ikhoQa4b6hlfX+19co4T1snBgQZ0BLFlazAG5L/TeBQPRPoB8hrJ/by9hZjnuPm7 e8VeyChA+np6nx5BhaNjOhwvpy7WngGHTuHqenxR4QaBsf0NXbECAqnTHCxejoj5 REwukydRfbae3NSfZWYWKNgx0jYXSDpa5npAAb+YLkeMqNKv6PnHja+s/ZCMT4aP YY4hk+mZr8mmUas1pImwI81Mxh14Y0t7YkszHjaZKMEmkpmUIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIXIzUwK8jsllhNn3rUrJuPN2sOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg1N2Y2OTYtMDAxMi0z ZDc4LWI2MTktMmUwMzA3NTI1NDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJuboiu5JrtspZa2oW9b/ggdQBbYyMzFVB+nmNurvb6+WitNBbxM ETZZA9Ia/jf2/hQgMMgc2u+gZWIaYJSbZC5JCJb3773oZKzNeyN4Z1gHABrktIxM oYUVRo+l0fz4u8IQhNpuLBvTwVr2mwink565rWCWqERNquJuN7PXf1ybcSPv0pYU SvEtewEdX9Y9o97DA5UEwNkhiFUkiTzkZCGVOshzapw7OAPV55JUAfjrw56chkYn 1iWZmjTjcPDFkXBgDqGd3Rr83OIBOJGsllxocPnAT9PSR7tO8pbpQlCKA5rtKlBR sF2DmH2b08mA0rdM9Gvf9yw7tk6VoqnkRG4= -----END CERTIFICATE-----Generated at Wed Oct 29 11:24:16 2025 by rpki-client