$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce43fdaa-bf15-3a29-822a-c977c8a4f2b0.roa File: ce43fdaa-bf15-3a29-822a-c977c8a4f2b0.roa (raw, json) Hash identifier: 6rXbWTCMfrXvm78CnnQzoPhIefAuB0eGPxHd0aqpCH0= Subject key identifier: E8:56:7E:85:40:F3:A4:F1:E7:CF:BB:48:1B:5A:3E:64:1B:0D:5F:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23DCB11EF390C960C52C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce43fdaa-bf15-3a29-822a-c977c8a4f2b0.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396600 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3d:cb:11:ef:39:0c:96:0c:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=511fa2c1-af4d-45b8-83d0-3e4cac11a18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:36:ef:85:db:40:d0:3d:ef:2b:b8:87:f5: 23:00:6c:b7:ca:69:f3:23:02:37:01:3e:03:5b:12: 50:da:69:83:c7:d7:7e:c0:2e:a2:f8:b5:41:c4:2f: 39:1a:61:0d:b3:40:b2:ba:8b:70:75:c5:04:dd:9e: 66:3f:07:36:f5:4b:4d:5e:a9:ca:47:e0:bc:13:0f: 35:1b:0d:73:a8:00:15:70:b6:9a:30:ad:9f:09:c6: 7f:34:0b:36:2a:4d:de:ee:92:94:a5:b1:28:bc:80: 12:b0:c1:58:2d:29:33:68:66:da:26:8a:77:44:72: 8c:8a:6a:86:89:bc:0e:fd:ba:d5:bb:39:92:97:4d: 2c:54:82:b6:13:1f:70:ac:0a:f2:2f:15:22:6f:f6: df:4f:bb:f9:c0:1e:13:e1:58:fb:a7:24:73:1c:39: 1c:85:7f:c5:13:7e:97:42:1d:aa:b8:60:a8:55:14: 42:41:52:b0:96:10:36:9b:b9:54:00:ca:d2:0a:4c: 43:29:c5:9f:37:2e:ca:83:dd:87:18:ab:bd:c5:5b: 89:c7:93:57:11:81:a0:8e:8b:4b:b5:d2:67:64:6c: 64:69:33:9d:14:ab:20:d9:a6:a7:e4:b9:25:3c:7a: 64:9a:dc:75:04:fa:d8:e2:28:e8:dd:1d:f0:79:77: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:7E:85:40:F3:A4:F1:E7:CF:BB:48:1B:5A:3E:64:1B:0D:5F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce43fdaa-bf15-3a29-822a-c977c8a4f2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c4:b2:04:91:e0:1f:0d:07:cb:93:96:7b:41:3a:b4:e2:b6: 82:95:00:b4:9d:a5:ae:b4:50:3f:19:d8:e2:b2:06:c1:31:a9: e0:0e:e9:32:5d:9b:b6:c5:0f:7a:03:40:07:f5:19:8b:41:74: d4:32:c4:b6:6f:8f:ed:a0:03:df:37:54:37:72:af:cf:49:17: b5:53:5f:86:6b:62:da:aa:bc:00:dc:07:00:97:75:7c:44:63: 10:19:29:f1:b0:12:15:43:20:4b:2d:3c:55:f3:7c:a9:7d:4a: 4c:53:ff:3f:67:11:fa:0c:e3:44:38:3d:f4:81:ae:01:06:07: f5:ec:85:15:08:5f:20:75:1a:5d:85:c0:4a:e2:31:3f:88:44: a2:15:e6:fd:58:16:63:2d:57:51:49:ae:1a:61:d7:19:68:c3: 45:2c:18:26:eb:42:ad:47:44:94:3e:ac:35:8d:71:16:2f:6b: c6:f4:31:29:44:51:53:3d:26:2d:55:74:e6:f9:ab:30:56:0d: b4:88:ec:ab:51:fd:2b:f5:55:ed:92:61:63:d2:54:8f:82:c8: 40:34:93:20:8e:04:0d:bf:ed:a2:cb:f5:16:72:1b:73:96:46: 0b:1f:2d:87:5d:7b:6c:f7:f2:b6:17:41:d0:91:a3:3f:99:1f: 1c:36:a1:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoj3LEe85DJYMUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk NTExZmEyYzEtYWY0ZC00NWI4LTgzZDAtM2U0Y2FjMTFhMThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgA274XbQNA97yu4h/UjAGy3ymnzIwI3AT4D WxJQ2mmDx9d+wC6i+LVBxC85GmENs0CyuotwdcUE3Z5mPwc29UtNXqnKR+C8Ew81 Gw1zqAAVcLaaMK2fCcZ/NAs2Kk3e7pKUpbEovIASsMFYLSkzaGbaJop3RHKMimqG ibwO/brVuzmSl00sVIK2Ex9wrAryLxUib/bfT7v5wB4T4Vj7pyRzHDkchX/FE36X Qh2quGCoVRRCQVKwlhA2m7lUAMrSCkxDKcWfNy7Kg92HGKu9xVuJx5NXEYGgjotL tdJnZGxkaTOdFKsg2aan5LklPHpkmtx1BPrY4ijo3R3weXfU6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOhWfoVA86Tx58+7SBtaPmQbDV/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2U0M2ZkYWEtYmYxNS0z YTI5LTgyMmEtYzk3N2M4YTRmMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIDEsgSR4B8NB8uTlntBOrTitoKVALSdpa60UD8Z2OKyBsExqeAO 6TJdm7bFD3oDQAf1GYtBdNQyxLZvj+2gA983VDdyr89JF7VTX4ZrYtqqvADcBwCX dXxEYxAZKfGwEhVDIEstPFXzfKl9SkxT/z9nEfoM40Q4PfSBrgEGB/XshRUIXyB1 Gl2FwEriMT+IRKIV5v1YFmMtV1FJrhph1xlow0UsGCbrQq1HRJQ+rDWNcRYva8b0 MSlEUVM9Ji1VdOb5qzBWDbSI7KtR/Sv1Ve2SYWPSVI+CyEA0kyCOBA2/7aLL9RZy G3OWRgsfLYdde2z38rYXQdCRoz+ZHxw2odw= -----END CERTIFICATE-----Generated at Wed Oct 29 09:00:35 2025 by rpki-client