$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daee150b-b993-3869-98f1-cb12f59362a7.roa File: daee150b-b993-3869-98f1-cb12f59362a7.roa (raw, json) Hash identifier: fSOR1X0Yp7VZQaF2NPtwfL4Vc7iFH9k+bxcpsKg3WhA= Subject key identifier: F3:63:7B:C1:9D:22:95:B2:1E:F0:C3:81:7F:B6:B4:D6:95:11:2A:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723A48BE8E30D1DC770280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daee150b-b993-3869-98f1-cb12f59362a7.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 36617 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3a:48:be:8e:30:d1:dc:77:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=48a06c73-74ca-4852-be6f-f9bfe75f69aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:2b:f6:09:22:6a:24:2a:4a:9e:a6:06:5d: 1f:4b:2d:44:d3:f4:2c:51:7d:b3:3e:5c:b1:1a:35: be:1f:26:e1:fe:cf:27:a8:1e:c1:c1:c4:ed:e5:75: ce:ef:01:f5:a2:c3:cf:4d:de:72:a4:fa:35:54:6c: e1:6e:6c:3a:ef:16:12:02:d1:7f:35:52:fd:7f:b7: 68:f5:66:f6:79:33:15:f1:4a:35:f6:a4:68:b5:42: 1a:f9:13:01:90:d5:92:48:89:2d:00:a4:ac:c4:d6: e3:99:9b:4a:8f:61:66:08:f2:19:ee:0f:6d:f4:39: 4c:0b:30:1f:36:1e:8e:28:fa:56:57:8b:e5:a6:41: 92:1b:eb:09:62:98:47:fb:43:5b:68:7c:ac:42:57: de:29:17:f9:e9:83:9b:ba:98:3c:2e:57:ff:cc:f5: 1b:c3:8f:1f:af:00:6b:cc:62:46:b0:28:fe:27:45: 63:75:eb:42:70:9c:a6:b8:11:53:ae:42:5f:29:0d: 30:a1:92:40:c4:71:08:f1:74:ff:ab:32:80:f3:b5: 29:f3:d3:5a:ba:ba:43:ee:8e:39:d5:a4:dc:37:ab: e8:66:bc:bc:b9:a5:99:1b:e8:a8:ef:00:02:4c:1d: c2:3b:83:44:b5:b9:c7:44:d2:90:f9:89:eb:a2:46: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:63:7B:C1:9D:22:95:B2:1E:F0:C3:81:7F:B6:B4:D6:95:11:2A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/daee150b-b993-3869-98f1-cb12f59362a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:73:0f:f8:28:2e:45:3b:af:67:68:ee:92:32:e8:d7:b2:f9: cb:3a:d1:4d:5a:9f:e3:b4:fb:20:c4:f9:8b:ab:44:2f:4a:57: 12:3e:8e:b7:01:04:a7:d6:84:27:f4:d1:72:50:c8:bf:fd:e4: d9:8a:5f:a5:d6:43:5d:f6:b1:91:70:ca:f5:fb:02:ea:37:15: c3:5a:34:4e:34:88:a9:0c:a1:dd:04:3a:e9:e3:30:44:8b:a7: b3:f2:c7:dd:f1:29:85:6d:af:52:59:bb:71:4a:00:03:bd:e8: 2a:fc:49:3d:24:54:7b:3f:52:e4:7b:cb:5b:14:d1:23:69:88: 6e:ef:d2:7f:67:81:ac:69:30:08:0e:7b:8e:3b:c7:08:11:2e: 51:06:1c:1e:80:e0:35:7e:ef:2a:d2:b1:46:7f:14:ef:3e:34: d9:62:50:1a:03:f0:b9:d7:9c:52:77:25:94:5d:cb:0a:fd:19: f7:cc:58:53:b0:36:46:f4:22:32:61:55:3f:8b:77:6a:1e:3b: de:9d:f0:ae:f0:45:d6:d9:82:cf:4d:fd:bd:d9:d3:28:bf:9a: d5:04:f6:86:ae:81:40:4b:dc:3d:9b:c8:d7:11:87:da:b1:be: 6e:0f:95:1a:d9:b1:c4:60:65:35:b4:92:ff:9e:f1:85:ce:a2: 01:21:13:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjpIvo4w0dx3AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NDhhMDZjNzMtNzRjYS00ODUyLWJlNmYtZjliZmU3NWY2OWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR0r9gkiaiQqSp6mBl0fSy1E0/QsUX2zPlyx GjW+Hybh/s8nqB7BwcTt5XXO7wH1osPPTd5ypPo1VGzhbmw67xYSAtF/NVL9f7do 9Wb2eTMV8Uo19qRotUIa+RMBkNWSSIktAKSsxNbjmZtKj2FmCPIZ7g9t9DlMCzAf Nh6OKPpWV4vlpkGSG+sJYphH+0NbaHysQlfeKRf56YObupg8Llf/zPUbw48frwBr zGJGsCj+J0VjdetCcJymuBFTrkJfKQ0woZJAxHEI8XT/qzKA87Up89NaurpD7o45 1aTcN6voZry8uaWZG+io7wACTB3CO4NEtbnHRNKQ+YnrokaDDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPNje8GdIpWyHvDDgX+2tNaVESreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGFlZTE1MGItYjk5My0z ODY5LTk4ZjEtY2IxMmY1OTM2MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADNzD/goLkU7r2do7pIy6Ney+cs60U1an+O0+yDE+YurRC9KVxI+ jrcBBKfWhCf00XJQyL/95NmKX6XWQ132sZFwyvX7Auo3FcNaNE40iKkMod0EOunj MESLp7Pyx93xKYVtr1JZu3FKAAO96Cr8ST0kVHs/UuR7y1sU0SNpiG7v0n9ngaxp MAgOe447xwgRLlEGHB6A4DV+7yrSsUZ/FO8+NNliUBoD8LnXnFJ3JZRdywr9GffM WFOwNkb0IjJhVT+Ld2oeO96d8K7wRdbZgs9N/b3Z0yi/mtUE9oaugUBL3D2byNcR h9qxvm4PlRrZscRgZTW0kv+e8YXOogEhE24= -----END CERTIFICATE-----Generated at Wed Oct 29 09:17:17 2025 by rpki-client