$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa8e3e-6a52-3719-a06a-9d3bc6657fe3.roa File: cfaa8e3e-6a52-3719-a06a-9d3bc6657fe3.roa (raw, json) Hash identifier: s5CDf4ZLP4re0PcyHqgjmvI4/E/eP5lO0hD97ZDhzkg= Subject key identifier: 28:11:7C:70:9C:A8:07:F4:2C:E0:61:BA:DA:94:34:F9:B8:01:03:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723E2698F1459A31E888C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa8e3e-6a52-3719-a06a-9d3bc6657fe3.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396591 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3e:26:98:f1:45:9a:31:e8:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=5391ceef-336c-42f4-9849-60ba08dcb2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:f9:31:d6:a3:b6:34:19:d0:9a:f2:69:3c: f3:e9:77:63:6c:a0:29:b5:12:72:72:89:4c:e1:42: 7c:cf:a9:80:73:65:18:0f:99:23:18:3e:df:bd:8f: cf:c4:7b:16:b1:89:b3:b6:1e:4c:90:8c:66:df:0f: 08:51:0b:20:3a:ee:6f:e0:9b:b4:db:0d:c5:a0:01: b9:96:10:35:eb:4e:d6:a3:b9:d7:6f:2d:67:25:58: 0b:b8:d9:50:8c:ba:fd:46:71:8c:5a:95:e4:88:13: b0:9c:95:bf:19:37:b2:ff:24:c0:43:43:79:5b:cc: 1e:cc:fd:ff:82:56:a2:67:0c:ad:b5:57:3b:b3:39: a0:37:1f:ce:0b:5e:c3:88:9a:3b:cb:a2:b0:13:89: cc:b3:69:61:90:2e:62:c8:74:12:3f:46:43:26:ff: 63:e5:72:f6:41:93:01:83:57:34:b1:71:7e:3c:6d: c1:40:f4:3b:00:7b:11:71:e7:22:6e:28:51:9f:dd: 43:fd:d9:65:f2:b0:1a:35:0e:08:17:ac:50:65:e7: 3b:4e:59:d3:d8:da:85:2a:a1:16:74:f4:11:1a:5b: a1:9e:72:18:2f:d4:42:6f:fd:8b:4b:51:dc:9c:ec: 03:39:1d:88:b9:a9:ab:ed:a5:0c:46:66:d8:e0:a4: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:11:7C:70:9C:A8:07:F4:2C:E0:61:BA:DA:94:34:F9:B8:01:03:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa8e3e-6a52-3719-a06a-9d3bc6657fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4f:8c:5d:29:95:f0:c1:08:95:55:0d:91:3c:f2:bb:32:b6: 45:f3:bd:0d:26:d9:7b:b4:f4:ca:a0:5f:c0:23:c4:8b:c0:1d: c6:f1:c9:1d:86:47:9a:f1:5e:a7:f9:ee:1e:89:fa:bf:13:9f: f2:14:54:68:6a:35:ce:d9:5c:4f:4e:53:b3:8d:65:78:c5:f1: b9:f7:14:1c:56:3b:c0:07:c6:b3:0e:da:b8:d1:eb:6f:a2:f1: 74:9e:f3:15:6f:c7:03:9f:46:9e:2c:68:a6:82:cd:69:45:4f: 2a:fb:ad:b8:38:43:6c:e4:34:20:c8:63:6f:eb:d1:5d:84:31: f9:6c:14:e9:ce:a8:d0:b1:d0:0f:c8:1c:2f:9b:06:20:e2:49: d1:c5:4d:b2:f2:c1:7d:fe:a0:d0:d3:6e:a0:67:27:e1:3e:bc: 28:f7:cb:04:4a:8e:02:3b:13:25:2c:df:a6:65:fd:18:c0:77: 0c:20:f7:42:17:d5:39:90:3b:87:18:7d:b2:ef:59:77:7e:bc: 40:f4:b1:de:6a:6a:73:0c:f2:21:62:96:e3:be:fa:10:94:2a: 0b:df:f4:7a:16:ac:d2:f4:dd:39:52:8a:c9:ae:97:3a:b1:78: 73:3c:13:a5:dd:8f:44:94:52:6c:49:fc:44:d9:6e:ba:29:01: 12:ab:a0:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcj4mmPFFmjHoiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NTM5MWNlZWYtMzM2Yy00MmY0LTk4NDktNjBiYTA4ZGNiMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljH5MdajtjQZ0JryaTzz6XdjbKAptRJycolM 4UJ8z6mAc2UYD5kjGD7fvY/PxHsWsYmzth5MkIxm3w8IUQsgOu5v4Ju02w3FoAG5 lhA1607Wo7nXby1nJVgLuNlQjLr9RnGMWpXkiBOwnJW/GTey/yTAQ0N5W8wezP3/ glaiZwyttVc7szmgNx/OC17DiJo7y6KwE4nMs2lhkC5iyHQSP0ZDJv9j5XL2QZMB g1c0sXF+PG3BQPQ7AHsRcecibihRn91D/dll8rAaNQ4IF6xQZec7TlnT2NqFKqEW dPQRGluhnnIYL9RCb/2LS1HcnOwDOR2Iuamr7aUMRmbY4KQ/5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgRfHCcqAf0LOBhutqUNPm4AQNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZhYThlM2UtNmE1Mi0z NzE5LWEwNmEtOWQzYmM2NjU3ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFdPjF0plfDBCJVVDZE88rsytkXzvQ0m2Xu09MqgX8AjxIvAHcbx yR2GR5rxXqf57h6J+r8Tn/IUVGhqNc7ZXE9OU7ONZXjF8bn3FBxWO8AHxrMO2rjR 62+i8XSe8xVvxwOfRp4saKaCzWlFTyr7rbg4Q2zkNCDIY2/r0V2EMflsFOnOqNCx 0A/IHC+bBiDiSdHFTbLywX3+oNDTbqBnJ+E+vCj3ywRKjgI7EyUs36Zl/RjAdwwg 90IX1TmQO4cYfbLvWXd+vED0sd5qanMM8iFiluO++hCUKgvf9HoWrNL03TlSismu lzqxeHM8E6Xdj0SUUmxJ/ETZbropARKroD8= -----END CERTIFICATE-----Generated at Wed Oct 29 09:21:46 2025 by rpki-client