$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddef4093-d88e-33e8-baed-66bed0169e17.roa File: ddef4093-d88e-33e8-baed-66bed0169e17.roa (raw, json) Hash identifier: LzJCQjP+tuZIJJ9bNLEvxdBK8yX1KleVP931UGKyJ/Q= Subject key identifier: 49:E2:C8:09:4F:8F:DB:07:BD:43:D4:AB:37:68:43:3F:40:E2:56:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA23E858F06235F523F0C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddef4093-d88e-33e8-baed-66bed0169e17.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396826 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3e:85:8f:06:23:5f:52:3f:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=3196ddfa-cb93-4493-8175-22fe2046b63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:75:f8:1b:5f:de:85:8e:ef:22:2f:50:04:73: b6:bf:22:47:ee:63:fb:ca:7a:44:02:f9:07:28:64: 25:69:e3:12:f2:a5:58:ce:f2:97:9c:c9:5b:fa:02: 32:f0:f0:47:6e:f8:77:dc:f2:54:5e:8d:1e:95:44: 49:4a:94:86:71:e9:ed:3c:18:a4:d4:ec:47:9b:7f: c1:9c:b7:dc:62:66:aa:5b:1a:b7:9b:ee:f4:be:b3: a6:bf:42:e9:7b:3a:4d:94:55:e7:35:66:cc:8d:33: cb:09:cd:6e:32:75:09:2f:4d:8c:02:6f:48:81:9b: 4d:b3:74:35:9b:5f:92:6e:47:65:6a:4c:c7:ae:e3: ed:55:bb:96:30:bb:cb:6d:b9:64:cb:ac:72:89:42: 35:23:57:62:d7:91:d3:49:76:f5:47:cb:74:80:37: bf:4b:c0:32:58:2c:d0:73:a9:29:d7:f6:6b:2c:41: 76:8d:8a:c0:ab:07:76:95:f3:68:be:e6:4b:f9:56: fe:43:59:89:23:e4:8c:01:ad:f8:3c:c5:b6:31:4c: 74:52:f1:6a:fb:35:b5:b6:f7:6b:0b:58:ae:de:bc: a5:58:0a:f9:f8:fc:da:40:91:ad:60:58:58:a0:93: 98:4d:16:10:02:9e:6b:b2:75:8a:35:fc:25:45:75: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E2:C8:09:4F:8F:DB:07:BD:43:D4:AB:37:68:43:3F:40:E2:56:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddef4093-d88e-33e8-baed-66bed0169e17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:55:9d:fd:26:06:fe:64:54:23:88:65:a1:9e:60:6c:c7:5c: 45:0d:f2:64:ce:1e:74:22:a8:b6:17:46:ee:b1:5e:84:6e:e5: 4d:02:eb:88:68:1d:73:17:7b:68:48:43:e3:3f:47:41:73:d9: f8:4e:1a:46:07:77:41:33:c5:31:f1:da:dd:66:75:ae:64:05: 11:08:ea:4a:56:54:1a:cb:48:c6:64:41:6f:a8:62:94:0b:fe: f9:d4:af:a3:b5:70:74:31:5c:c9:8e:f9:bb:a0:97:da:13:75: e0:9f:59:6c:d6:49:fd:17:42:df:df:4a:3c:b2:2f:73:9d:8c: 1d:e2:e0:35:39:6c:8f:2f:73:99:fd:88:b6:bb:6d:6d:f7:91: fc:39:8a:a5:d4:a6:eb:e6:e4:f1:b5:5b:56:2c:24:17:09:b9: 55:f6:97:68:ea:3c:1c:18:90:18:d8:40:b4:c1:f9:80:20:a6: b4:ac:76:f1:6b:0f:f3:66:ae:a5:f9:38:01:4c:d7:1b:14:a1: 14:20:cd:13:27:fd:9c:6e:d1:90:0d:58:96:92:db:45:34:da: 31:ee:d0:cc:8c:69:e0:5c:0a:48:52:1d:b3:6f:73:33:7b:43: 4e:cf:5c:5b:54:20:d5:a3:42:f4:b4:be:d6:79:78:2e:76:da: 4d:a1:d2:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoj6FjwYjX1I/DEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MzE5NmRkZmEtY2I5My00NDkzLTgxNzUtMjJmZTIwNDZiNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXX4G1/ehY7vIi9QBHO2vyJH7mP7ynpEAvkH KGQlaeMS8qVYzvKXnMlb+gIy8PBHbvh33PJUXo0elURJSpSGcentPBik1OxHm3/B nLfcYmaqWxq3m+70vrOmv0LpezpNlFXnNWbMjTPLCc1uMnUJL02MAm9IgZtNs3Q1 m1+SbkdlakzHruPtVbuWMLvLbblky6xyiUI1I1di15HTSXb1R8t0gDe/S8AyWCzQ c6kp1/ZrLEF2jYrAqwd2lfNovuZL+Vb+Q1mJI+SMAa34PMW2MUx0UvFq+zW1tvdr C1iu3rylWAr5+PzaQJGtYFhYoJOYTRYQAp5rsnWKNfwlRXULUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEniyAlPj9sHvUPUqzdoQz9A4larMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRlZjQwOTMtZDg4ZS0z M2U4LWJhZWQtNjZiZWQwMTY5ZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKNVnf0mBv5kVCOIZaGeYGzHXEUN8mTOHnQiqLYXRu6xXoRu5U0C 64hoHXMXe2hIQ+M/R0Fz2fhOGkYHd0EzxTHx2t1mda5kBREI6kpWVBrLSMZkQW+o YpQL/vnUr6O1cHQxXMmO+bugl9oTdeCfWWzWSf0XQt/fSjyyL3OdjB3i4DU5bI8v c5n9iLa7bW33kfw5iqXUpuvm5PG1W1YsJBcJuVX2l2jqPBwYkBjYQLTB+YAgprSs dvFrD/NmrqX5OAFM1xsUoRQgzRMn/Zxu0ZANWJaS20U02jHu0MyMaeBcCkhSHbNv czN7Q07PXFtUINWjQvS0vtZ5eC522k2h0oc= -----END CERTIFICATE-----Generated at Wed Oct 29 09:14:52 2025 by rpki-client