$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9df0d1f-f7fa-3bfc-9848-5b9f39f96072.roa File: c9df0d1f-f7fa-3bfc-9848-5b9f39f96072.roa (raw, json) Hash identifier: 4sjeMLL8nWKgwSdz2+4eiH6sWv5tC+pWYl39VoooH5c= Subject key identifier: 55:5B:FF:CF:E8:B8:30:32:76:2D:93:D8:32:59:A1:47:E5:1A:5D:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA238CAA54D0B5A8CB14880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9df0d1f-f7fa-3bfc-9848-5b9f39f96072.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396578 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:38:ca:a5:4d:0b:5a:8c:b1:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=a48698af-40dc-4596-a7fb-9411527ca870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:42:b9:17:89:cf:6d:9b:39:8b:9f:b3:c7: 94:17:ad:d8:cb:7a:5b:08:68:0f:1e:5d:36:3c:c7: 04:37:88:27:6f:12:0a:46:1e:32:64:69:31:34:d5: 78:4b:3d:40:61:55:7d:a7:5e:f0:29:15:a3:1d:6c: 62:c2:c3:17:70:cb:00:bf:d5:ef:95:92:27:a6:53: 6f:18:49:70:c6:f1:7e:db:44:7c:69:2c:3c:63:5c: 00:ba:4f:03:9c:74:4e:ce:73:de:d9:4b:b9:16:bd: d5:46:c5:e2:50:42:51:1b:d6:ae:8a:c7:d8:69:3c: 51:d4:3b:f8:d3:f7:89:cf:c5:2c:bc:a7:4a:17:30: e8:84:e3:1c:11:79:bf:41:f5:e2:c9:48:85:32:9c: c8:2e:ac:8d:5f:90:c5:74:8a:2d:12:a1:77:17:f1: 6b:6e:04:09:05:fd:19:4d:10:ec:cf:2f:74:3b:d4: a6:5f:56:ef:08:75:6c:72:f2:53:07:39:07:70:72: d3:93:67:4e:e6:7f:81:a1:88:1d:09:b3:91:6a:a7: 5b:c4:f5:a4:9f:03:75:d3:9f:01:83:12:2e:e9:6b: c9:a2:1f:a7:ec:cb:5d:a9:89:8d:f9:ed:ba:a0:ed: 06:63:aa:48:68:80:2c:74:c1:60:f5:50:19:1a:0c: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5B:FF:CF:E8:B8:30:32:76:2D:93:D8:32:59:A1:47:E5:1A:5D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9df0d1f-f7fa-3bfc-9848-5b9f39f96072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:97:fb:7c:cc:ef:fd:a3:13:2b:a9:f9:d0:b2:33:55:00:ed: 80:e1:36:cd:3c:a0:81:07:ff:8c:c9:5c:4a:81:c1:23:25:a5: 4b:1a:84:00:cc:f0:88:9b:44:47:f3:86:50:91:1a:90:13:d4: 6d:33:b8:f6:8e:13:02:46:65:e4:a1:c6:71:d4:f3:fa:de:ec: 00:41:82:8e:72:19:23:c0:73:39:37:b4:01:f8:91:6a:2b:f8: e5:28:0c:f6:2c:fd:dc:86:99:02:32:61:e0:fc:1b:8d:c7:b0: b8:72:42:c0:ab:b8:77:b1:7d:0f:b4:50:05:73:fe:98:3c:dd: 46:69:24:c5:71:12:12:b7:09:af:c5:00:b1:3e:a1:6a:11:55: 2f:72:52:a4:cb:59:e7:5f:17:fb:fe:9e:20:7a:88:a4:26:b5: 96:6f:1e:f7:f1:bd:74:fd:53:29:cd:9a:27:c5:3a:8d:d0:6c: 95:a1:b4:5d:04:1b:9d:72:d3:44:a5:ba:2b:ff:f7:37:a7:b8: 1d:1c:b2:bf:ea:85:d4:97:b7:90:fa:78:49:96:7e:00:be:25: f8:ef:2b:28:9f:22:2e:9f:07:c2:31:68:f0:b4:b0:8a:8c:a7: 88:5b:18:95:15:9f:93:0e:36:a8:48:75:8c:71:3e:0e:87:e5: 4f:1d:20:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucojjKpU0LWoyxSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk YTQ4Njk4YWYtNDBkYy00NTk2LWE3ZmItOTQxMTUyN2NhODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRVCuReJz22bOYufs8eUF63Yy3pbCGgPHl02 PMcEN4gnbxIKRh4yZGkxNNV4Sz1AYVV9p17wKRWjHWxiwsMXcMsAv9XvlZInplNv GElwxvF+20R8aSw8Y1wAuk8DnHROznPe2Uu5Fr3VRsXiUEJRG9auisfYaTxR1Dv4 0/eJz8UsvKdKFzDohOMcEXm/QfXiyUiFMpzILqyNX5DFdIotEqF3F/FrbgQJBf0Z TRDszy90O9SmX1bvCHVscvJTBzkHcHLTk2dO5n+BoYgdCbORaqdbxPWknwN1058B gxIu6WvJoh+n7MtdqYmN+e26oO0GY6pIaIAsdMFg9VAZGgxpZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFVb/8/ouDAydi2T2DJZoUflGl2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzlkZjBkMWYtZjdmYS0z YmZjLTk4NDgtNWI5ZjM5Zjk2MDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiX+3zM7/2jEyup+dCyM1UA7YDhNs08oIEH/4zJXEqBwSMlpUsa hADM8IibREfzhlCRGpAT1G0zuPaOEwJGZeShxnHU8/re7ABBgo5yGSPAczk3tAH4 kWor+OUoDPYs/dyGmQIyYeD8G43HsLhyQsCruHexfQ+0UAVz/pg83UZpJMVxEhK3 Ca/FALE+oWoRVS9yUqTLWedfF/v+niB6iKQmtZZvHvfxvXT9UynNmifFOo3QbJWh tF0EG51y00Sluiv/9zenuB0csr/qhdSXt5D6eEmWfgC+JfjvKyifIi6fB8IxaPC0 sIqMp4hbGJUVn5MONqhIdYxxPg6H5U8dIMc= -----END CERTIFICATE-----Generated at Wed Oct 29 07:00:22 2025 by rpki-client