$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b0f7c2a-ff51-3788-84ac-6f2def0e7c30.roa File: 1b0f7c2a-ff51-3788-84ac-6f2def0e7c30.roa (raw, json) Hash identifier: b5t1AwMuQqhrwIY+qUT90yUIayHCir0xTU2ul1LcoUY= Subject key identifier: 14:94:96:2B:CB:16:0C:F8:28:55:E3:57:67:F1:2A:74:10:84:87:03 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B3AEC52289443E9F9D1A3C980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b0f7c2a-ff51-3788-84ac-6f2def0e7c30.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 396590 IP address blocks: 2001:500:30ff::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:52:28:94:43:e9:f9:d1:a3:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=31778d3d-4a4a-43bf-b500-a0c740d769f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:21:17:63:72:d0:56:f6:a8:e7:f4:f0:9a:4e: 32:d0:ab:7c:48:31:93:ef:4a:6d:30:28:db:dc:79: 7d:59:fb:7d:0f:3d:8e:04:39:74:8a:6b:c7:c2:9e: be:b4:8f:4a:c0:18:ef:e2:55:28:88:02:ef:43:3e: 47:f5:5b:4d:23:43:98:8e:17:64:62:61:43:ee:78: 5e:73:b7:fc:06:ad:55:eb:2a:b2:14:83:2e:a9:f9: 10:12:88:c1:8a:6a:40:38:2a:fc:ee:36:88:c1:d8: b1:74:4f:8e:e8:4d:9e:35:94:18:d1:aa:60:98:4e: 88:20:13:5e:63:5f:6d:41:28:ec:59:c4:95:e9:0c: 0d:bb:fc:0f:e9:88:6e:90:ee:c0:14:8c:91:2b:50: 34:cd:53:b7:e8:23:2a:f3:bd:ce:27:37:dd:41:89: 57:e4:df:cf:ba:25:68:0d:f6:ad:06:35:ad:8b:9c: 2f:77:74:ac:e6:2c:5f:fa:2b:b1:00:7f:5b:34:aa: a6:46:82:bb:16:3b:56:1f:45:90:91:dd:76:a6:ad: 26:25:dc:e2:d4:a9:d4:5b:bb:46:f6:f4:ee:7f:2f: 94:bc:66:18:52:6d:7d:8e:5f:d1:b2:57:a1:be:c1: e8:12:81:03:3c:4e:2a:b7:0a:21:ac:45:86:d0:81: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:94:96:2B:CB:16:0C:F8:28:55:E3:57:67:F1:2A:74:10:84:87:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b0f7c2a-ff51-3788-84ac-6f2def0e7c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0d:8d:b8:5f:2c:91:ee:f7:2a:4b:db:a8:83:fe:4e:f2:9b: 50:85:a0:9c:4c:31:b6:e8:a1:5c:20:a6:7b:a6:e8:a9:9d:34: 15:ab:67:0d:56:9f:0a:c3:d7:5d:43:69:ee:57:5f:44:0f:58: 86:9b:11:f8:4f:0e:33:06:82:16:3a:47:8b:14:b1:bb:bc:a7: 3a:c5:30:31:61:9a:d3:e0:3d:23:c9:b6:12:65:cb:c6:71:8c: ba:2d:28:1a:bd:19:5f:4a:b2:16:ba:d6:17:10:af:a2:f9:32: 68:1f:f4:65:cd:c9:41:7e:c5:e3:5f:ad:ff:c5:ba:da:18:4d: 17:65:14:50:9b:f3:79:be:55:b0:67:8d:60:0f:e8:1f:86:f2: 0a:9b:aa:52:ed:29:7f:36:30:de:c5:b7:55:24:8c:de:b0:3c: 80:7e:b3:ee:9d:b1:72:93:73:0c:a8:97:09:ad:9c:3f:32:60: 59:1d:88:cf:bc:ec:ab:68:d4:86:5d:4b:fd:bc:94:21:bf:b5: f4:7e:30:93:09:c1:8a:28:1d:e0:25:d6:4b:8e:f0:bc:97:67: 53:8c:f5:a1:4c:d7:06:74:03:6f:f7:ee:5c:e7:80:31:f4:a5: 67:9c:1f:ad:71:bc:7f:4e:41:88:d2:cb:a2:9e:72:83:2b:e6: d9:eb:90:b7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs67FIolEPp+dGjyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk MzE3NzhkM2QtNGE0YS00M2JmLWI1MDAtYTBjNzQwZDc2OWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiEXY3LQVvao5/Twmk4y0Kt8SDGT70ptMCjb 3Hl9Wft9Dz2OBDl0imvHwp6+tI9KwBjv4lUoiALvQz5H9VtNI0OYjhdkYmFD7nhe c7f8Bq1V6yqyFIMuqfkQEojBimpAOCr87jaIwdixdE+O6E2eNZQY0apgmE6IIBNe Y19tQSjsWcSV6QwNu/wP6YhukO7AFIyRK1A0zVO36CMq873OJzfdQYlX5N/PuiVo DfatBjWti5wvd3Ss5ixf+iuxAH9bNKqmRoK7FjtWH0WQkd12pq0mJdzi1KnUW7tG 9vTufy+UvGYYUm19jl/RslehvsHoEoEDPE4qtwohrEWG0IFujQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBSUlivLFgz4KFXjV2fxKnQQhIcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWIwZjdjMmEtZmY1MS0z Nzg4LTg0YWMtNmYyZGVmMGU3YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEDY24XyyR7vcqS9uog/5O8ptQhaCcTDG26KFc IKZ7puipnTQVq2cNVp8Kw9ddQ2nuV19ED1iGmxH4Tw4zBoIWOkeLFLG7vKc6xTAx YZrT4D0jybYSZcvGcYy6LSgavRlfSrIWutYXEK+i+TJoH/RlzclBfsXjX63/xbra GE0XZRRQm/N5vlWwZ41gD+gfhvIKm6pS7Sl/NjDexbdVJIzesDyAfrPunbFyk3MM qJcJrZw/MmBZHYjPvOyraNSGXUv9vJQhv7X0fjCTCcGKKB3gJdZLjvC8l2dTjPWh TNcGdANv9+5c54Ax9KVnnB+tcbx/TkGI0suinnKDK+bZ65C3 -----END CERTIFICATE-----Generated at Mon Oct 20 04:21:04 2025 by rpki-client