$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4fe0e2b-db5a-33f6-a394-9a419138ba90.roa File: d4fe0e2b-db5a-33f6-a394-9a419138ba90.roa (raw, json) Hash identifier: 9RcQJEi22NY92QE4TRLpsmiERgbmwjlU1XTPJ/QUa0A= Subject key identifier: EA:98:84:A5:36:6A:CD:11:9D:9F:9D:85:95:78:1B:A1:C7:96:49:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA22CEA8B2FD3CD65DDFB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4fe0e2b-db5a-33f6-a394-9a419138ba90.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 397199 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2c:ea:8b:2f:d3:cd:65:dd:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=f40421ea-626d-4b72-9413-360b2fc3e94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ef:b8:9f:4e:a7:23:ee:d5:fa:43:5c:3a:aa: 6a:1a:f3:3f:14:10:de:43:c9:9c:7a:fa:c7:00:de: a4:6e:a1:c9:5d:0a:b3:e1:15:05:1d:ed:81:4d:b7: f0:38:9d:81:43:70:08:78:3f:48:41:90:bd:5d:44: 93:df:50:29:95:9e:eb:79:c6:7c:a5:6c:ff:0a:2d: a9:48:c2:8f:23:92:80:4b:c2:eb:4d:ee:52:64:03: 5b:54:77:0d:fe:16:2d:3a:1d:08:c2:87:e0:fa:c0: ef:eb:50:43:45:ef:91:5c:ae:72:ed:2a:eb:9a:fc: 1a:b7:ca:e4:92:01:47:03:ae:58:62:61:d1:18:60: 4b:05:dc:a6:53:73:f5:d0:5e:69:cd:cd:a0:33:4b: 71:e5:42:2c:74:50:eb:04:37:a6:25:ba:63:dc:d2: 0c:9a:05:ab:c7:5c:59:7d:a1:70:53:18:5f:da:ac: 4d:14:19:e8:7b:10:33:ab:ec:f6:13:bd:76:9e:07: 6f:a0:87:eb:65:49:39:c6:35:9b:57:20:37:e0:cc: 54:49:e0:cc:b9:e4:bc:2c:d9:c4:44:bd:19:63:39: 2b:81:c5:39:3b:38:84:c8:dd:f5:48:2f:66:2d:ba: f5:fc:3a:19:da:f4:2b:5b:5f:12:f0:f4:7f:8d:87: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:98:84:A5:36:6A:CD:11:9D:9F:9D:85:95:78:1B:A1:C7:96:49:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4fe0e2b-db5a-33f6-a394-9a419138ba90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:4b:3c:9b:c4:f4:2d:95:e1:dd:71:c8:2a:63:43:78:7d:17: 99:44:e3:01:1e:b5:65:8b:21:0f:fb:2b:ab:e1:d5:62:75:a6: ed:67:63:b9:ce:82:fa:4f:1f:a1:bb:12:33:07:43:22:68:4c: 71:01:3e:be:69:31:dd:9d:09:26:d5:3d:b9:e7:85:66:3f:b7: c2:cd:35:3c:b5:ed:94:ec:ec:ae:a2:f8:2d:27:c5:ea:9a:aa: ee:9e:00:15:76:db:1a:b6:b2:db:6c:7d:08:7c:c9:f5:1a:f9: 14:04:80:4d:f2:11:9c:1b:1c:31:e5:3c:53:23:cc:b9:82:cc: c7:08:c3:11:59:0f:3c:8b:0a:10:73:08:58:96:a4:18:94:16: 64:29:53:2b:62:4a:b0:30:d4:78:5c:ea:8b:94:03:20:30:9b: 09:2d:55:ee:0e:88:5f:1c:b7:a8:62:af:d8:16:df:3e:6d:c0: f3:bd:73:8a:91:c3:5d:0e:c0:07:c4:6d:a2:82:bb:60:6f:0c: ac:e8:2d:56:a7:8c:53:e7:c1:b4:29:49:4f:64:56:f1:1a:2d: fd:50:a6:c3:17:a7:37:4d:b3:09:aa:f2:da:44:0a:60:29:23: d5:23:4f:5a:1c:fe:bf:7e:c5:63:d9:b8:f4:47:37:93:a6:48: 56:6e:1d:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoizqiy/TzWXd+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjQwNDIxZWEtNjI2ZC00YjcyLTk0MTMtMzYwYjJmYzNlOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO+4n06nI+7V+kNcOqpqGvM/FBDeQ8mcevrH AN6kbqHJXQqz4RUFHe2BTbfwOJ2BQ3AIeD9IQZC9XUST31AplZ7recZ8pWz/Ci2p SMKPI5KAS8LrTe5SZANbVHcN/hYtOh0Iwofg+sDv61BDRe+RXK5y7Srrmvwat8rk kgFHA65YYmHRGGBLBdymU3P10F5pzc2gM0tx5UIsdFDrBDemJbpj3NIMmgWrx1xZ faFwUxhf2qxNFBnoexAzq+z2E712ngdvoIfrZUk5xjWbVyA34MxUSeDMueS8LNnE RL0ZYzkrgcU5OziEyN31SC9mLbr1/DoZ2vQrW18S8PR/jYcPEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOqYhKU2as0RnZ+dhZV4G6HHlkloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDRmZTBlMmItZGI1YS0z M2Y2LWEzOTQtOWE0MTkxMzhiYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK1LPJvE9C2V4d1xyCpjQ3h9F5lE4wEetWWLIQ/7K6vh1WJ1pu1n Y7nOgvpPH6G7EjMHQyJoTHEBPr5pMd2dCSbVPbnnhWY/t8LNNTy17ZTs7K6i+C0n xeqaqu6eABV22xq2sttsfQh8yfUa+RQEgE3yEZwbHDHlPFMjzLmCzMcIwxFZDzyL ChBzCFiWpBiUFmQpUytiSrAw1Hhc6ouUAyAwmwktVe4OiF8ct6hir9gW3z5twPO9 c4qRw10OwAfEbaKCu2BvDKzoLVanjFPnwbQpSU9kVvEaLf1QpsMXpzdNswmq8tpE CmApI9UjT1oc/r9+xWPZuPRHN5OmSFZuHcs= -----END CERTIFICATE-----Generated at Wed Oct 29 09:00:35 2025 by rpki-client