$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf968c81-6128-3915-b3dc-cd9e515e1298.roa File: cf968c81-6128-3915-b3dc-cd9e515e1298.roa (raw, json) Hash identifier: Rn6cO5SFbkXDI7f0r0jr9eW9zEXsQccrEyMQSTLiITs= Subject key identifier: 4C:D2:00:73:E1:24:12:DE:8B:9E:2B:D2:DA:4F:30:78:6A:D6:07:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526D8EBA39552DAAE22880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf968c81-6128-3915-b3dc-cd9e515e1298.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397195 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6d:8e:ba:39:55:2d:aa:e2:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=07293a17-5979-44bf-8f67-7b59a0a5f474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:98:ee:30:8b:ee:27:6a:60:37:49:99:7f:7b: 8f:cc:e5:e9:e3:b3:59:1c:e7:49:34:74:7e:8c:88: c9:04:f7:a6:dd:cc:fb:3d:c4:e4:62:5c:26:0f:a9: 3a:a0:d3:7c:c7:75:18:44:22:8c:e2:95:de:dd:49: b7:ef:6a:09:1d:ab:21:8c:b8:48:7b:19:43:7d:95: 81:48:56:bd:3a:7c:c2:79:d1:28:5c:49:56:43:0e: c5:59:50:eb:35:a8:d1:fc:50:0f:ca:38:8a:40:b2: ca:a4:90:97:76:f4:50:b6:6d:22:20:e5:dd:b0:dd: 6d:d0:e1:a7:31:11:a0:4e:16:a0:5a:67:44:53:a7: 6b:87:79:3b:f2:50:fd:65:13:fc:39:89:e5:df:a2: 4e:2b:31:42:6b:fb:8d:76:7f:4a:90:e2:42:6e:fc: 15:ab:b3:41:36:4b:99:6f:36:97:28:dc:85:02:af: 4e:d3:1a:a6:a8:64:61:fa:39:ef:b6:d9:a4:5b:96: 7a:68:2c:78:18:34:38:1c:c5:07:ae:ff:01:b9:59: 2e:78:33:4f:6c:f5:a3:30:58:57:6e:6f:1a:cd:1b: 68:aa:ec:f5:b6:4c:52:c1:44:70:8d:02:ac:a8:b4: f5:d3:3a:36:90:b9:a4:05:ab:17:e1:bb:cd:66:11: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D2:00:73:E1:24:12:DE:8B:9E:2B:D2:DA:4F:30:78:6A:D6:07:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf968c81-6128-3915-b3dc-cd9e515e1298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:90:e9:bf:05:ed:2a:08:75:b1:d5:16:37:ba:e8:ec:04:90: 64:e0:10:40:86:ec:30:a4:2f:47:cf:d6:3a:c6:cb:c9:a4:77: 25:a9:d2:c2:c1:98:db:f5:02:d7:d0:24:60:38:d9:2b:8a:2a: e8:c4:e4:b4:2a:bb:26:a4:4a:11:49:dc:0f:ce:0b:a9:88:4a: 9a:a7:44:24:d6:33:b7:08:da:cb:18:01:a5:c7:73:5b:79:77: d5:d8:38:4e:fb:42:eb:e5:9d:f6:24:c4:1d:dd:79:49:38:70: a6:a3:a9:06:0b:f7:58:a0:6d:a4:75:ef:f7:0c:5a:8d:ae:11: 75:50:1c:e8:39:c8:fe:11:3a:19:f5:35:54:34:f2:1e:6e:af: e6:aa:45:c7:b7:6e:86:6c:83:60:12:d0:e6:2e:c0:b4:74:1a: 19:3e:45:f7:c9:51:5a:5f:3b:c1:52:b5:07:c4:55:de:2c:56: 1b:7f:41:2e:2b:65:30:44:21:0f:97:c6:19:14:5c:14:34:61: 45:22:56:ba:4f:85:4b:3a:88:5c:10:eb:9f:03:16:fe:d3:4f: d1:01:37:d1:2b:31:ad:62:46:95:54:a0:55:75:cb:5e:a8:47: 18:64:4d:5a:80:b4:f9:43:99:40:10:ce:3c:96:53:17:ad:ab: 17:a0:64:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Um2OujlVLariKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MDcyOTNhMTctNTk3OS00NGJmLThmNjctN2I1OWEwYTVmNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZjuMIvuJ2pgN0mZf3uPzOXp47NZHOdJNHR+ jIjJBPem3cz7PcTkYlwmD6k6oNN8x3UYRCKM4pXe3Um372oJHashjLhIexlDfZWB SFa9OnzCedEoXElWQw7FWVDrNajR/FAPyjiKQLLKpJCXdvRQtm0iIOXdsN1t0OGn MRGgThagWmdEU6drh3k78lD9ZRP8OYnl36JOKzFCa/uNdn9KkOJCbvwVq7NBNkuZ bzaXKNyFAq9O0xqmqGRh+jnvttmkW5Z6aCx4GDQ4HMUHrv8BuVkueDNPbPWjMFhX bm8azRtoquz1tkxSwURwjQKsqLT10zo2kLmkBasX4bvNZhFeNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEzSAHPhJBLei54r0tpPMHhq1gdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y5NjhjODEtNjEyOC0z OTE1LWIzZGMtY2Q5ZTUxNWUxMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6Q6b8F7SoIdbHVFje66OwEkGTgEECG7DCkL0fP1jrGy8mkdyWp 0sLBmNv1AtfQJGA42SuKKujE5LQquyakShFJ3A/OC6mISpqnRCTWM7cI2ssYAaXH c1t5d9XYOE77QuvlnfYkxB3deUk4cKajqQYL91igbaR17/cMWo2uEXVQHOg5yP4R Ohn1NVQ08h5ur+aqRce3boZsg2AS0OYuwLR0Ghk+RffJUVpfO8FStQfEVd4sVht/ QS4rZTBEIQ+XxhkUXBQ0YUUiVrpPhUs6iFwQ658DFv7TT9EBN9ErMa1iRpVUoFV1 y16oRxhkTVqAtPlDmUAQzjyWUxetqxegZBI= -----END CERTIFICATE-----Generated at Wed Oct 29 07:09:36 2025 by rpki-client