$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc1df382-7239-33b4-b04a-0ca116718f6b.roa File: cc1df382-7239-33b4-b04a-0ca116718f6b.roa (raw, json) Hash identifier: ezxVVjhu7av7urvit3h+9/pdHKPm4vPQacFvTtcDogA= Subject key identifier: 71:96:EA:9D:29:BF:A3:B7:C1:32:83:26:D1:7A:73:45:4C:C3:6B:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723488F4CAB3CF7F384780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc1df382-7239-33b4-b04a-0ca116718f6b.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 22547 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:34:88:f4:ca:b3:cf:7f:38:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=1322e225-98a5-41c0-8b42-5fb7dea5e3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:e9:64:da:00:8c:7d:61:67:64:b6:e5:86: 4a:7e:c5:84:28:fa:fc:4d:61:9b:59:20:a6:de:f4: 7e:fc:44:6e:66:69:9a:42:8f:cf:72:64:b8:c0:7c: 3b:01:45:c6:7b:e7:82:f5:bf:cd:b6:37:2e:80:26: 17:98:29:32:a9:fa:2f:1e:2c:9f:0a:3d:c5:6a:28: a3:d4:90:1f:ee:6a:72:68:f5:05:3a:17:83:4c:14: 69:be:95:af:ee:f8:15:3e:a1:8c:2a:ec:7a:6a:d3: 8e:3b:16:60:df:99:eb:c4:0d:91:5c:7d:f9:02:b5: df:8a:d3:2c:31:24:ac:f9:eb:30:d1:e5:67:13:a7: bb:d3:b9:4c:a3:37:39:7d:8a:c0:25:d3:55:11:37: 28:5f:62:52:e4:a0:71:9d:5a:04:a0:ea:78:ed:e7: e6:0e:c4:f6:1b:76:c0:87:79:31:b6:36:d2:42:d9: 61:a9:37:2e:54:30:e3:1d:53:0d:c2:0d:29:9a:21: a3:1e:69:02:21:7a:e7:f2:8b:1a:ec:2f:fc:5a:ec: ee:ad:e3:2f:51:4f:17:d5:8e:82:1d:9b:ff:a0:d1: 0c:9d:3f:1b:25:ac:fc:a4:ba:88:a3:bd:32:b0:7a: ce:66:48:79:9f:6f:38:f5:ba:9d:b1:17:6a:01:53: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:96:EA:9D:29:BF:A3:B7:C1:32:83:26:D1:7A:73:45:4C:C3:6B:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc1df382-7239-33b4-b04a-0ca116718f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:63:26:e3:18:83:69:76:22:f9:d1:f3:01:19:48:b7:5d:18: d1:1c:63:e7:ae:00:7a:fa:39:d9:cd:92:4d:5c:82:bc:8f:32: ee:3b:82:f8:b8:eb:5f:f1:41:0f:79:17:39:be:d4:2d:15:5b: 0d:2c:00:65:af:b0:28:16:c0:90:8b:c8:6e:89:09:d2:5f:eb: 27:9f:8c:c7:6a:9f:8f:ea:17:4d:0a:9e:2f:18:66:a9:0a:86: fe:27:60:46:b0:3c:05:e7:9d:23:34:07:97:c7:31:d0:c5:ea: f4:ca:84:44:1f:6f:1d:87:ac:ba:66:75:65:c0:de:25:a1:12: 38:52:c6:a8:8c:a0:bf:4d:b7:e7:a5:88:71:ee:4c:e0:e6:94: d1:3f:a4:4e:e5:c9:53:d9:63:b5:4d:19:65:84:56:ba:a2:0c: fc:1b:5e:70:c0:06:e8:ef:76:c2:c3:f3:21:a3:30:c3:fa:70: b1:2e:2c:7b:2e:42:61:bf:b6:4f:85:d6:bb:c9:73:4f:74:a8: 50:5e:cc:d0:82:eb:9c:9a:cb:c9:dd:e5:28:89:ab:76:0a:78: f6:9a:4a:51:49:05:80:e3:58:71:fe:29:c3:17:a4:0a:24:70: 93:1f:70:38:e0:18:37:6d:b0:15:a7:f7:fe:40:5d:7f:c3:69: 98:56:e6:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjSI9Mqzz384R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MTMyMmUyMjUtOThhNS00MWMwLThiNDItNWZiN2RlYTVlM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycfpZNoAjH1hZ2S25YZKfsWEKPr8TWGbWSCm 3vR+/ERuZmmaQo/PcmS4wHw7AUXGe+eC9b/NtjcugCYXmCkyqfovHiyfCj3Faiij 1JAf7mpyaPUFOheDTBRpvpWv7vgVPqGMKux6atOOOxZg35nrxA2RXH35ArXfitMs MSSs+esw0eVnE6e707lMozc5fYrAJdNVETcoX2JS5KBxnVoEoOp47efmDsT2G3bA h3kxtjbSQtlhqTcuVDDjHVMNwg0pmiGjHmkCIXrn8osa7C/8WuzureMvUU8X1Y6C HZv/oNEMnT8bJaz8pLqIo70ysHrOZkh5n2849bqdsRdqAVPIEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHGW6p0pv6O3wTKDJtF6c0VMw2vqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2MxZGYzODItNzIzOS0z M2I0LWIwNGEtMGNhMTE2NzE4ZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVjJuMYg2l2IvnR8wEZSLddGNEcY+euAHr6OdnNkk1cgryPMu47 gvi461/xQQ95Fzm+1C0VWw0sAGWvsCgWwJCLyG6JCdJf6yefjMdqn4/qF00Kni8Y ZqkKhv4nYEawPAXnnSM0B5fHMdDF6vTKhEQfbx2HrLpmdWXA3iWhEjhSxqiMoL9N t+eliHHuTODmlNE/pE7lyVPZY7VNGWWEVrqiDPwbXnDABujvdsLD8yGjMMP6cLEu LHsuQmG/tk+F1rvJc090qFBezNCC65yay8nd5SiJq3YKePaaSlFJBYDjWHH+KcMX pAokcJMfcDjgGDdtsBWn9/5AXX/DaZhW5o4= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:02 2025 by rpki-client