$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c415125-2056-3f85-b854-5dc9e7ba81b8.roa File: 0c415125-2056-3f85-b854-5dc9e7ba81b8.roa (raw, json) Hash identifier: msgSlT0h1ItFVjFCnKc2m1OU31QDabPvfL5Ju/rQQa4= Subject key identifier: 8E:72:86:03:EE:F0:32:A6:A0:A7:4D:9E:D8:FF:7D:F8:77:39:CC:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52734A2D24B45C9FBCFC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c415125-2056-3f85-b854-5dc9e7ba81b8.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397207 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:73:4a:2d:24:b4:5c:9f:bc:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ecd17312-4416-464f-b241-c44517257204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:c7:24:8a:8e:78:3c:c6:29:eb:2a:36:91: 2d:bc:87:b2:77:da:1c:34:3d:60:c3:ba:7f:5d:57: d4:b1:5f:c6:99:c1:87:96:ce:ea:af:ae:ef:7f:bf: 57:0c:60:8c:dd:9f:b6:3a:26:04:3a:7e:c2:85:4a: a8:a3:4d:c5:11:e6:74:53:f3:b9:d3:67:8a:3c:f9: d6:91:cb:f5:65:c7:5b:cc:ca:34:ea:35:99:f8:99: f9:a4:20:46:77:fe:a6:87:3f:f6:11:67:fe:af:04: da:dd:9c:29:bc:e1:8f:5b:65:35:41:db:e5:bd:58: 72:ff:04:7a:c1:41:63:8f:c0:30:65:51:19:70:7e: 58:ea:6d:09:e2:c3:f6:42:c0:03:37:4a:94:3c:7c: 16:85:7e:68:c3:32:5f:1b:da:a1:6f:89:e2:cd:4e: 06:7e:8a:f5:d2:28:e5:e5:a4:be:72:06:21:65:2d: 5e:78:3e:25:14:29:81:79:94:39:9d:db:91:f4:98: 3f:2d:3f:42:9e:33:ed:6f:cb:a1:d9:37:78:31:79: d5:f5:df:8e:69:13:fe:5d:07:74:60:37:cd:bf:e6: 18:8e:41:da:70:bd:2f:7d:64:8c:df:27:da:b5:e6: 41:79:2a:40:57:41:35:4b:b5:10:81:12:09:a9:d9: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:72:86:03:EE:F0:32:A6:A0:A7:4D:9E:D8:FF:7D:F8:77:39:CC:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c415125-2056-3f85-b854-5dc9e7ba81b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b0:51:06:c0:ab:92:e6:3f:4c:e9:57:c7:fb:f7:ce:a3:1e: 29:27:fa:1e:12:f1:5e:55:fb:4f:d3:58:c1:b0:c3:30:dc:b3: 87:6d:4e:1e:0a:74:56:2b:69:42:dc:b6:ae:06:75:9f:f5:39: 95:44:8c:ee:e1:79:cb:15:43:c0:c8:3d:58:cf:d2:3d:37:5a: ba:20:4a:71:9c:e7:1e:74:8b:a2:7f:c1:1e:bc:78:af:92:39: 11:b1:b0:72:43:13:b1:28:c3:af:fa:f2:cc:25:7e:1c:12:03: 64:ab:54:a8:63:66:23:ff:4a:c4:dd:a0:ab:6b:70:63:21:be: 0b:e7:1d:f1:0f:8b:28:ee:0c:61:30:66:4f:77:1e:3c:95:2d: be:29:38:e6:fe:a2:cc:58:40:69:59:7b:b1:18:22:77:bb:77: 2f:e9:15:cb:84:82:10:60:7d:d8:43:77:c8:f5:a3:18:8d:16: 14:97:e3:59:74:02:10:d1:c7:e8:91:9a:f9:72:f7:2b:48:7e: 91:f1:19:16:1e:bd:8c:cf:ec:58:0d:78:04:51:cc:63:6d:84: 17:9f:17:bd:50:14:a6:c2:81:11:86:67:60:a5:c7:2c:99:18: 66:be:17:50:e6:71:98:56:0b:cf:f7:2d:ea:66:bb:6f:22:24: 46:c1:79:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UnNKLSS0XJ+8/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZWNkMTczMTItNDQxNi00NjRmLWIyNDEtYzQ0NTE3MjU3MjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNLHJIqOeDzGKesqNpEtvIeyd9ocND1gw7p/ XVfUsV/GmcGHls7qr67vf79XDGCM3Z+2OiYEOn7ChUqoo03FEeZ0U/O502eKPPnW kcv1ZcdbzMo06jWZ+Jn5pCBGd/6mhz/2EWf+rwTa3ZwpvOGPW2U1QdvlvVhy/wR6 wUFjj8AwZVEZcH5Y6m0J4sP2QsADN0qUPHwWhX5owzJfG9qhb4nizU4Gfor10ijl 5aS+cgYhZS1eeD4lFCmBeZQ5nduR9Jg/LT9CnjPtb8uh2Td4MXnV9d+OaRP+XQd0 YDfNv+YYjkHacL0vfWSM3yfateZBeSpAV0E1S7UQgRIJqdmX2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI5yhgPu8DKmoKdNntj/ffh3OcxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGM0MTUxMjUtMjA1Ni0z Zjg1LWI4NTQtNWRjOWU3YmE4MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHWwUQbAq5LmP0zpV8f7986jHikn+h4S8V5V+0/TWMGwwzDcs4dt Th4KdFYraULctq4GdZ/1OZVEjO7hecsVQ8DIPVjP0j03WrogSnGc5x50i6J/wR68 eK+SORGxsHJDE7Eow6/68swlfhwSA2SrVKhjZiP/SsTdoKtrcGMhvgvnHfEPiyju DGEwZk93HjyVLb4pOOb+osxYQGlZe7EYIne7dy/pFcuEghBgfdhDd8j1oxiNFhSX 41l0AhDRx+iRmvly9ytIfpHxGRYevYzP7FgNeARRzGNthBefF71QFKbCgRGGZ2Cl xyyZGGa+F1DmcZhWC8/3Lepmu28iJEbBeV8= -----END CERTIFICATE-----Generated at Mon Oct 20 04:00:24 2025 by rpki-client