$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1ff1099-acd8-358e-b072-4a23c7f92d73.roa File: d1ff1099-acd8-358e-b072-4a23c7f92d73.roa (raw, json) Hash identifier: mEssQE0B2VE7C69wpHB+A0qxIs6z8ltdYbzqvkKvG4E= Subject key identifier: 38:A9:1B:C3:02:ED:64:83:55:C3:1F:A8:D4:B1:0B:50:10:9C:71:BE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724A01D4BBD34745C36040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1ff1099-acd8-358e-b072-4a23c7f92d73.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 397207 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4a:01:d4:bb:d3:47:45:c3:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=38eb771b-c2d5-4b7d-b804-87c058f7ecbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f1:09:b5:20:97:33:9a:85:92:d2:67:20:98: 87:db:eb:84:b8:3c:94:a3:dd:87:89:87:f8:cc:ec: e2:9b:e9:e8:23:6c:d7:b8:78:0b:cf:dc:59:cd:fe: 43:fe:0c:22:f7:af:5e:ba:8c:c0:ed:0d:3b:cd:e6: 43:07:f2:6b:5a:74:5c:18:82:a7:fb:93:3b:e8:a2: f2:b1:ae:2d:d0:d6:d6:48:eb:fd:3a:9e:43:03:3f: a9:18:3f:fe:a2:af:b3:51:17:a7:c9:1d:1a:70:5e: 70:1b:5f:8b:d6:26:37:90:3b:f6:f4:69:9d:b5:57: 71:6a:62:32:57:a0:05:7a:5c:76:63:8c:37:61:43: 79:e8:a5:b4:0e:8d:60:58:90:ab:1a:c5:86:82:1f: 23:f6:ab:48:53:1c:c5:5e:2e:dd:34:35:37:a3:3f: 0b:58:44:c0:d5:3e:7d:90:ad:e7:ac:e4:25:fe:5e: 2c:ad:c0:52:05:36:0e:79:ed:bd:4e:7d:5e:84:3e: 7e:3d:c8:01:f7:65:a6:9b:a4:14:86:a5:bc:cb:5a: ec:82:af:d2:f4:92:4f:9d:74:4b:e1:b9:af:dd:19: 5d:19:89:7e:62:69:c7:17:5c:7b:1f:81:db:97:98: db:37:13:7e:9c:f0:00:e2:57:d5:12:2a:61:80:f9: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A9:1B:C3:02:ED:64:83:55:C3:1F:A8:D4:B1:0B:50:10:9C:71:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1ff1099-acd8-358e-b072-4a23c7f92d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cf:1c:0f:70:05:ee:25:6a:11:21:53:d8:6b:88:c3:f2:d6: e9:04:2c:eb:6b:6e:bc:f1:2a:00:dc:8f:5f:3b:0a:fd:d2:d9: 6d:a5:9e:76:c8:18:46:24:59:a4:26:79:9c:fc:3e:01:0a:af: b1:d8:e0:f4:68:2c:3c:f9:cf:09:53:39:98:39:dc:0c:eb:83: f3:76:9a:d7:97:21:b6:fa:cd:a3:0e:b9:4a:75:63:d6:02:59: 91:2c:be:58:33:65:0e:20:23:70:34:11:71:d7:26:3e:8f:d3: 11:c6:05:26:9b:20:a8:2e:69:32:f6:57:50:6c:52:2d:c6:17: 09:55:44:7a:ca:79:30:22:a4:b7:74:3d:9b:4b:7e:90:cd:0f: d9:5b:ce:85:78:0c:4b:19:58:be:5d:a0:2b:65:a2:c1:47:31: 02:fb:56:74:a1:70:42:ba:b7:94:87:1b:54:32:8f:4f:b0:de: 7b:35:8b:ea:71:4f:a6:60:b6:07:86:a5:9f:78:72:6d:5f:98: 1f:58:48:5a:9b:a4:fc:bb:8f:9a:d3:9a:2f:95:28:8c:f5:f0: 20:19:74:c4:af:47:54:3c:ab:80:76:71:fc:71:f5:b7:12:a9: be:ea:6a:dd:3a:c6:52:74:ee:de:85:23:74:ff:24:fe:a2:ec: a8:a2:96:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckoB1LvTR0XDYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MzhlYjc3MWItYzJkNS00YjdkLWI4MDQtODdjMDU4ZjdlY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vEJtSCXM5qFktJnIJiH2+uEuDyUo92HiYf4 zOzim+noI2zXuHgLz9xZzf5D/gwi969euozA7Q07zeZDB/JrWnRcGIKn+5M76KLy sa4t0NbWSOv9Op5DAz+pGD/+oq+zURenyR0acF5wG1+L1iY3kDv29GmdtVdxamIy V6AFelx2Y4w3YUN56KW0Do1gWJCrGsWGgh8j9qtIUxzFXi7dNDU3oz8LWETA1T59 kK3nrOQl/l4srcBSBTYOee29Tn1ehD5+PcgB92Wmm6QUhqW8y1rsgq/S9JJPnXRL 4bmv3RldGYl+YmnHF1x7H4Hbl5jbNxN+nPAA4lfVEiphgPlVowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDipG8MC7WSDVcMfqNSxC1AQnHG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDFmZjEwOTktYWNkOC0z NThlLWIwNzItNGEyM2M3ZjkyZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHPHA9wBe4lahEhU9hriMPy1ukELOtrbrzxKgDcj187Cv3S2W2l nnbIGEYkWaQmeZz8PgEKr7HY4PRoLDz5zwlTOZg53Azrg/N2mteXIbb6zaMOuUp1 Y9YCWZEsvlgzZQ4gI3A0EXHXJj6P0xHGBSabIKguaTL2V1BsUi3GFwlVRHrKeTAi pLd0PZtLfpDND9lbzoV4DEsZWL5doCtlosFHMQL7VnShcEK6t5SHG1Qyj0+w3ns1 i+pxT6ZgtgeGpZ94cm1fmB9YSFqbpPy7j5rTmi+VKIz18CAZdMSvR1Q8q4B2cfxx 9bcSqb7qat06xlJ07t6FI3T/JP6i7Kiilmk= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:18 2025 by rpki-client