$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c0d51-c4a5-3d96-b197-df0c6dc97a4e.roa File: 1b2c0d51-c4a5-3d96-b197-df0c6dc97a4e.roa (raw, json) Hash identifier: U2hsGjQ6GKM4byLQEBkJW2sjEKxxQBhCrWbNUF+zIl0= Subject key identifier: FA:34:10:7B:65:C2:C1:0D:DD:6D:A1:E1:D7:41:8F:7D:83:27:42:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDBE1BD0CB1713840C5F0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c0d51-c4a5-3d96-b197-df0c6dc97a4e.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397212 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:db:e1:bd:0c:b1:71:38:40:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=eb521947-9bf7-4454-a69e-a74557727985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:fe:27:02:ea:d7:f1:90:9f:80:c1:91:6d: 0b:46:79:ff:a5:cd:56:69:a3:cd:87:0a:08:b6:72: a5:db:aa:16:48:40:8a:7d:98:20:c5:20:05:6d:d5: 32:10:79:86:61:ee:b8:4c:1f:7d:ea:52:72:ae:ee: 42:62:da:26:ea:c1:70:a2:6a:65:d3:c2:80:59:b3: 78:0e:ac:0c:16:40:20:af:25:a0:91:9f:5b:56:02: 84:9b:f4:23:43:ae:43:30:16:6d:66:83:38:12:70: fb:01:cf:6f:d3:c6:e6:a2:8d:14:ae:20:8e:84:46: 82:80:cc:0a:76:0c:83:0d:e9:ac:1b:b1:ac:c6:0b: b6:e2:d8:65:e9:72:25:88:41:d6:2f:3b:1a:ba:82: 12:d8:55:ed:bf:cc:ba:d1:f7:2e:7c:30:9c:76:1c: 5b:c0:6b:30:0e:a7:fc:d0:15:7d:e8:df:1b:12:23: da:2f:7a:f8:b5:e9:cd:2a:be:2f:c2:11:64:47:62: 9b:f0:24:61:ba:c7:ec:da:18:41:84:8f:fd:9e:e5: f8:d4:32:94:11:c3:f1:59:7e:cb:98:c4:c0:84:92: 7b:4f:d7:33:cb:26:10:da:12:9c:44:4a:0f:8b:e7: 4b:56:c6:7d:7c:3f:33:03:ce:01:ad:bd:fc:de:14: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:34:10:7B:65:C2:C1:0D:DD:6D:A1:E1:D7:41:8F:7D:83:27:42:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2c0d51-c4a5-3d96-b197-df0c6dc97a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:21:56:f6:a3:12:7c:eb:ca:37:70:44:06:8d:5f:d0:df:48: ec:b9:d3:19:e9:b8:82:e6:40:5f:1e:bd:ba:f6:5e:be:12:57: 42:54:90:29:1d:7f:c5:56:0a:48:d8:39:de:47:bc:e4:e5:0c: 38:25:42:14:c6:ad:14:f3:44:88:37:e8:b5:b5:3b:4c:b2:df: f2:2e:3b:67:46:7d:c0:36:47:50:bc:e8:37:ec:91:3d:46:a5: c4:5e:cf:cc:cd:3e:01:0b:28:80:ed:d8:bd:3e:3f:bd:5a:51: 02:f1:8e:9f:d5:9e:13:c0:e7:1a:e2:64:1a:63:66:5f:69:de: 16:45:a3:7f:77:61:00:86:ea:58:4a:22:b8:45:32:07:64:2d: 10:25:05:33:7a:38:1e:19:60:f9:9d:d1:fd:6f:f0:bf:28:92: fc:07:70:1f:11:fa:3e:03:5a:d8:1d:46:7d:61:70:9f:e9:f5: 3f:a7:d9:f1:81:8c:a2:59:2f:34:61:55:31:a2:fa:a2:d7:c4: 38:60:e2:f4:e8:da:c8:61:5d:0f:6a:fb:26:92:41:a5:85:44: 51:53:77:8a:65:ab:0b:24:40:62:c1:cd:d4:08:17:08:eb:b0: 0f:cd:1f:98:99:2b:db:49:48:dd:aa:94:40:53:86:0d:48:e7: 76:f0:a8:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNvhvQyxcThAxfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZWI1MjE5NDctOWJmNy00NDU0LWE2OWUtYTc0NTU3NzI3OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHD+JwLq1/GQn4DBkW0LRnn/pc1WaaPNhwoI tnKl26oWSECKfZggxSAFbdUyEHmGYe64TB996lJyru5CYtom6sFwompl08KAWbN4 DqwMFkAgryWgkZ9bVgKEm/QjQ65DMBZtZoM4EnD7Ac9v08bmoo0UriCOhEaCgMwK dgyDDemsG7Gsxgu24thl6XIliEHWLzsauoIS2FXtv8y60fcufDCcdhxbwGswDqf8 0BV96N8bEiPaL3r4tenNKr4vwhFkR2Kb8CRhusfs2hhBhI/9nuX41DKUEcPxWX7L mMTAhJJ7T9czyyYQ2hKcREoPi+dLVsZ9fD8zA84Brb383hQLAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPo0EHtlwsEN3W2h4ddBj32DJ0LJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWIyYzBkNTEtYzRhNS0z ZDk2LWIxOTctZGYwYzZkYzk3YTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEUhVvajEnzryjdwRAaNX9DfSOy50xnpuILmQF8evbr2Xr4SV0JU kCkdf8VWCkjYOd5HvOTlDDglQhTGrRTzRIg36LW1O0yy3/IuO2dGfcA2R1C86Dfs kT1GpcRez8zNPgELKIDt2L0+P71aUQLxjp/VnhPA5xriZBpjZl9p3hZFo393YQCG 6lhKIrhFMgdkLRAlBTN6OB4ZYPmd0f1v8L8okvwHcB8R+j4DWtgdRn1hcJ/p9T+n 2fGBjKJZLzRhVTGi+qLXxDhg4vTo2shhXQ9q+yaSQaWFRFFTd4plqwskQGLBzdQI FwjrsA/NH5iZK9tJSN2qlEBThg1I53bwqCU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:21:14 2025 by rpki-client