$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd6957-e308-39b1-851f-e85cfb7af545.roa File: e3dd6957-e308-39b1-851f-e85cfb7af545.roa (raw, json) Hash identifier: gQORQTBLEixr9tUPvATq15XnPcn53AU5qrp+W1LsZ1Y= Subject key identifier: DA:D1:D8:E7:6E:F9:A9:60:85:22:6C:45:8D:6A:4C:42:74:DC:FC:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9CA22C1C008EDB76A74BDC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd6957-e308-39b1-851f-e85cfb7af545.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 396590 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2c:1c:00:8e:db:76:a7:4b:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=e0de4e46-1116-4b54-920e-97ce92468768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e4:17:53:4d:3d:ab:a6:dc:26:39:f6:85:f1: 26:4b:08:c2:7f:ef:42:fc:57:b9:1c:9e:ff:ea:42: 6f:e9:c4:3b:c0:59:21:f9:04:af:7d:c6:0f:89:60: 40:50:a8:a4:bb:5b:99:c9:b2:01:07:64:d2:fb:67: ec:65:1d:24:f0:8d:39:d6:82:43:b6:48:54:9d:4a: 50:06:07:ad:2c:80:de:b1:44:ae:4d:d5:a0:c9:5c: d8:a8:da:72:4d:06:b4:ab:92:0f:58:14:3a:26:75: cf:af:32:84:0f:b1:c5:00:fb:3d:c4:24:ec:06:4d: 0c:8d:9d:33:a8:1c:8e:2d:48:e1:64:a1:98:f4:c9: df:71:d9:8c:0c:26:df:d2:42:ad:9b:75:5b:14:65: 89:f6:af:b3:31:ea:1c:00:b0:b6:38:be:7a:43:33: 67:21:e1:f7:9b:67:87:4c:08:f2:d6:8c:f6:7c:57: 74:6e:40:79:36:d5:76:7b:f3:82:24:a5:46:6c:81: e6:4d:2e:c3:fc:e7:00:47:bf:66:9f:11:73:8f:9e: 1e:40:8a:c5:2b:3a:ff:f5:a4:54:77:5c:d6:9d:52: 10:db:24:70:13:83:28:95:17:4e:52:76:08:d8:89: ba:71:69:6c:91:e9:8b:17:8a:3f:b2:c5:79:18:3b: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D1:D8:E7:6E:F9:A9:60:85:22:6C:45:8D:6A:4C:42:74:DC:FC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd6957-e308-39b1-851f-e85cfb7af545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:88:ff:db:9e:03:67:19:f0:ee:5b:b5:74:b5:32:87:74:68: 8c:f7:ee:fe:59:f2:7d:7a:c0:e9:35:6d:8a:3e:24:c3:ae:e1: 3d:cd:a2:ff:7c:dc:1f:84:1a:6e:f3:f4:81:ab:b1:23:52:b6: e9:ff:38:bf:a4:7f:a8:58:f3:99:fe:b4:65:37:22:30:a2:bc: 8d:bf:cc:9e:40:3c:5e:54:b2:30:1e:a4:6a:1b:b5:16:b5:d1: fa:76:f2:fe:26:2e:97:fd:ff:bf:a4:c0:4f:2e:39:f4:44:2b: 89:d0:4e:ee:58:ba:6f:2d:c0:a0:63:ed:c7:13:2b:03:ee:35: 59:19:14:69:ae:76:67:0e:92:b1:76:17:0f:dd:19:22:70:22: cc:f7:6c:d8:4a:17:ed:d2:00:f4:cb:17:36:64:46:ff:43:52: 3e:ad:5c:e7:d1:24:c6:eb:0d:98:c7:4a:87:8a:48:78:70:3b: a7:64:08:94:57:a4:32:4f:69:97:e2:e1:e3:4e:35:a3:a5:11: 0c:c6:ba:af:59:4d:69:06:9a:c0:ec:68:7e:f8:b8:e8:0d:0a: 42:17:8c:f3:bf:79:50:80:9a:11:de:42:68:47:1e:cb:98:43: 36:c6:d9:7f:e8:94:4d:fa:eb:31:ec:e3:be:05:61:ff:20:99: c8:ea:fa:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEucoiwcAI7bdqdL3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTBkZTRlNDYtMTExNi00YjU0LTkyMGUtOTdjZTkyNDY4NzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOQXU009q6bcJjn2hfEmSwjCf+9C/Fe5HJ7/ 6kJv6cQ7wFkh+QSvfcYPiWBAUKiku1uZybIBB2TS+2fsZR0k8I051oJDtkhUnUpQ BgetLIDesUSuTdWgyVzYqNpyTQa0q5IPWBQ6JnXPrzKED7HFAPs9xCTsBk0MjZ0z qByOLUjhZKGY9MnfcdmMDCbf0kKtm3VbFGWJ9q+zMeocALC2OL56QzNnIeH3m2eH TAjy1oz2fFd0bkB5NtV2e/OCJKVGbIHmTS7D/OcAR79mnxFzj54eQIrFKzr/9aRU d1zWnVIQ2yRwE4MolRdOUnYI2Im6cWlskemLF4o/ssV5GDtjMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNrR2Odu+alghSJsRY1qTEJ03PxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTNkZDY5NTctZTMwOC0z OWIxLTg1MWYtZTg1Y2ZiN2FmNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABiI/9ueA2cZ8O5btXS1Mod0aIz37v5Z8n16wOk1bYo+JMOu4T3N ov983B+EGm7z9IGrsSNStun/OL+kf6hY85n+tGU3IjCivI2/zJ5APF5UsjAepGob tRa10fp28v4mLpf9/7+kwE8uOfREK4nQTu5Yum8twKBj7ccTKwPuNVkZFGmudmcO krF2Fw/dGSJwIsz3bNhKF+3SAPTLFzZkRv9DUj6tXOfRJMbrDZjHSoeKSHhwO6dk CJRXpDJPaZfi4eNONaOlEQzGuq9ZTWkGmsDsaH74uOgNCkIXjPO/eVCAmhHeQmhH HsuYQzbG2X/olE366zHs474FYf8gmcjq+rU= -----END CERTIFICATE-----Generated at Wed Oct 29 09:21:39 2025 by rpki-client