$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d73d5d-faa4-369b-b766-c5b97f5cbab1.roa File: 08d73d5d-faa4-369b-b766-c5b97f5cbab1.roa (raw, json) Hash identifier: 3jYPc4ghYiEEFTntiY54jgOvTPEP/f0bnRiI65qTDp0= Subject key identifier: 40:7E:C5:F2:EB:A8:66:56:8F:E0:6A:82:5C:91:2E:82:12:D5:9F:BE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5267A7DCCC6D35C7FEC6D1 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d73d5d-faa4-369b-b766-c5b97f5cbab1.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397208 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:67:a7:dc:cc:6d:35:c7:fe:c6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=74069bf0-abf8-4e57-9be9-30264c63107f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:14:2f:5a:b7:cf:06:16:49:e2:87:b5:72: 35:f4:14:61:73:8c:89:04:b5:a9:f3:78:16:da:fa: 24:b8:fe:5c:63:c9:ce:97:42:9e:55:6d:92:a6:b8: 98:7e:87:a9:fe:b1:b1:18:ec:ac:eb:59:ef:c6:34: e2:f5:6d:7e:8a:eb:79:ec:4f:9d:78:72:25:48:ea: 05:29:8e:d0:5e:d8:d8:4b:13:34:2b:3e:22:9a:fa: df:a7:1c:8d:f7:e7:f2:37:98:bd:a7:4e:32:14:0d: f7:d9:a3:a8:d7:73:50:35:54:52:93:95:b5:dc:07: 1b:e0:da:6d:56:ac:da:6f:36:e6:72:54:c1:d6:bb: 09:e8:58:4e:fb:a0:46:a5:d8:ed:70:2d:a3:76:cb: 8a:8d:e1:70:c8:73:50:3c:17:29:57:be:f5:b2:77: ec:4a:49:e6:83:cc:7f:e6:80:c8:b7:79:50:9d:f0: 86:26:e1:fe:49:e4:c5:3c:0b:31:3b:8a:b7:68:16: 4b:60:ee:5e:79:48:3b:bc:d5:39:df:94:18:80:d6: 6d:18:54:c7:4c:cb:69:12:3c:7c:93:b3:f3:a4:cf: 21:44:74:e3:28:07:5b:17:97:e6:f2:7e:47:d5:68: d9:c4:ea:8d:be:d4:9b:53:f5:98:93:ce:1c:f9:6e: 63:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:C5:F2:EB:A8:66:56:8F:E0:6A:82:5C:91:2E:82:12:D5:9F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d73d5d-faa4-369b-b766-c5b97f5cbab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:80:27:67:68:b3:d2:ee:af:f6:a6:97:5f:39:10:46:2e:70: f2:7b:d3:49:62:76:8e:c1:5d:9a:49:06:da:f6:8e:e5:94:c3: 39:4d:53:8b:14:1f:f6:32:7d:86:03:e1:bb:aa:dd:31:68:f7: bd:fd:b9:29:fa:fd:33:b3:7a:f6:6f:dd:b8:d8:8a:47:5d:e1: ec:4d:81:ad:12:d1:8b:00:0e:ad:b6:18:df:a6:0d:ca:73:6f: 9e:e1:58:58:3f:d4:98:d2:d4:dd:8e:c4:80:67:5b:d1:39:7c: e4:29:9b:96:2f:f9:4a:f7:e5:4b:93:27:38:e5:f4:a1:f4:8e: e3:14:d2:b8:82:79:6d:02:d5:39:c5:36:79:11:cc:35:8d:1f: 4c:12:70:b0:ff:77:77:67:ef:a9:ca:ed:a5:71:88:28:97:02: cd:f1:d4:07:ce:41:bd:c5:69:76:03:a7:7e:4e:af:17:52:54: 1d:54:15:0f:e5:e5:26:a5:75:79:e7:65:61:25:36:6a:01:a3: e8:84:4b:47:54:24:5c:50:c8:16:98:f6:ce:67:bb:2b:59:72: 7c:db:97:17:57:d5:c1:c9:2e:eb:40:72:19:09:89:fa:3c:0e: d8:d2:b9:1e:1e:d4:e7:2e:13:30:95:30:84:56:90:84:38:d7: f1:52:60:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Umen3MxtNcf+xtEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NzQwNjliZjAtYWJmOC00ZTU3LTliZTktMzAyNjRjNjMxMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ0UL1q3zwYWSeKHtXI19BRhc4yJBLWp83gW 2vokuP5cY8nOl0KeVW2SpriYfoep/rGxGOys61nvxjTi9W1+iut57E+deHIlSOoF KY7QXtjYSxM0Kz4imvrfpxyN9+fyN5i9p04yFA332aOo13NQNVRSk5W13Acb4Npt VqzabzbmclTB1rsJ6FhO+6BGpdjtcC2jdsuKjeFwyHNQPBcpV771snfsSknmg8x/ 5oDIt3lQnfCGJuH+SeTFPAsxO4q3aBZLYO5eeUg7vNU535QYgNZtGFTHTMtpEjx8 k7PzpM8hRHTjKAdbF5fm8n5H1WjZxOqNvtSbU/WYk84c+W5jkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEB+xfLrqGZWj+BqglyRLoIS1Z++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDhkNzNkNWQtZmFhNC0z NjliLWI3NjYtYzViOTdmNWNiYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIiAJ2dos9Lur/aml185EEYucPJ700lido7BXZpJBtr2juWUwzlN U4sUH/YyfYYD4buq3TFo9739uSn6/TOzevZv3bjYikdd4exNga0S0YsADq22GN+m Dcpzb57hWFg/1JjS1N2OxIBnW9E5fOQpm5Yv+Ur35UuTJzjl9KH0juMU0riCeW0C 1TnFNnkRzDWNH0wScLD/d3dn76nK7aVxiCiXAs3x1AfOQb3FaXYDp35OrxdSVB1U FQ/l5SaldXnnZWElNmoBo+iES0dUJFxQyBaY9s5nuytZcnzblxdX1cHJLutAchkJ ifo8DtjSuR4e1OcuEzCVMIRWkIQ41/FSYOs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:21:30 2025 by rpki-client