$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b9945a9-0b47-3c39-81d7-f6afb5ea5e08.roa File: 1b9945a9-0b47-3c39-81d7-f6afb5ea5e08.roa (raw, json) Hash identifier: wILi10E0V1Bznsyw8/JrrwyG1ykAIEIpP68777pgqzE= Subject key identifier: 88:02:74:45:30:9C:95:09:10:94:F3:61:D3:8B:85:CD:A9:45:FF:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD4D155AFECB01B1DFC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b9945a9-0b47-3c39-81d7-f6afb5ea5e08.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396546 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d4:d1:55:af:ec:b0:1b:1d:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=39c1f0dc-b4c9-4397-a0ca-11242695f65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:d2:d0:6a:f8:fd:f0:27:b4:9d:39:dd:c9: 67:ee:13:59:93:c8:6c:3a:db:71:cb:0a:fd:f1:67: 2d:c0:94:bc:dc:d9:6d:27:7d:68:52:2e:cd:cb:f4: eb:2d:68:83:87:68:96:81:e8:42:ce:91:f3:55:6d: d5:12:c9:72:f1:49:1d:63:29:e2:fd:3c:67:e3:8e: 1e:44:b2:76:77:5b:37:79:7c:2d:18:e5:05:5b:71: a5:ec:a7:d4:4b:41:4b:82:22:ba:ef:09:31:8e:e7: 20:0e:48:c2:00:69:d7:dd:64:41:ff:3d:7f:13:39: 7a:1f:b3:d1:b1:b8:c8:e2:cd:e8:3b:e1:f5:e7:7a: b9:5f:e2:29:dd:1a:6f:24:ea:62:b9:b9:3e:68:9c: 11:74:3f:fc:33:60:ca:c6:ef:bc:87:a3:04:d2:0e: 37:c7:ab:8d:41:9d:ef:5d:e0:d4:25:b0:da:b2:7d: 91:1d:4f:85:17:8a:d5:74:25:1b:d9:b4:4d:c0:92: f0:a2:52:a2:41:85:6a:58:e6:b5:f1:02:a1:77:b9: a1:41:69:d3:a5:fa:2d:c2:cb:7a:a8:97:f9:18:82: a7:fc:f5:20:91:4d:7d:c3:6a:35:bc:1f:ae:e7:ef: ba:16:4b:63:b5:81:dd:c9:25:4f:49:ad:11:0a:7a: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:02:74:45:30:9C:95:09:10:94:F3:61:D3:8B:85:CD:A9:45:FF:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b9945a9-0b47-3c39-81d7-f6afb5ea5e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b9:4b:2a:1a:8a:5a:e7:88:d0:2b:91:b2:cd:eb:cf:6d:fc: 38:45:e6:4f:3b:e9:04:e5:77:d8:6c:85:f2:a9:e4:1d:68:a7: 8c:8c:38:50:f5:b3:92:26:c1:be:62:55:cf:62:a6:8c:5d:9c: 1c:07:c0:20:63:c6:25:86:52:0d:56:fa:35:c7:14:8f:9e:5a: 99:7f:fb:4c:3e:4d:4d:4e:30:f4:fc:37:2a:98:98:40:97:b2: f5:3b:d1:c3:5d:ae:e2:13:c1:64:37:2c:4f:1f:7d:f7:0e:76: 79:94:19:ea:3f:86:40:62:9b:cd:e7:d1:14:19:6f:e1:c7:f0: ac:80:21:9c:85:9d:8c:78:a9:34:5d:29:6e:a6:36:6d:80:4a: b0:1f:5e:98:86:86:80:a5:89:eb:f9:03:cb:0a:3d:19:1e:d6: bd:a9:52:07:4b:20:e2:a3:35:9b:db:d4:a1:74:08:a6:1c:7a: 48:84:bb:39:bc:f6:5c:19:bc:d7:3e:cb:fc:08:eb:5c:de:6f: b8:70:a3:a3:09:a8:fc:d2:65:b3:b3:ff:e2:76:2b:61:a5:af: 4a:3a:fd:4b:4d:88:ff:9c:91:cd:91:33:30:63:a1:b6:89:3f: 8c:d0:be:86:1b:3e:23:8b:b2:7b:77:f0:6a:df:48:5a:ef:83: 40:8d:2b:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNTRVa/ssBsd/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MzljMWYwZGMtYjRjOS00Mzk3LWEwY2EtMTEyNDI2OTVmNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdHS0Gr4/fAntJ053cln7hNZk8hsOttxywr9 8WctwJS83NltJ31oUi7Ny/TrLWiDh2iWgehCzpHzVW3VEsly8UkdYyni/Txn444e RLJ2d1s3eXwtGOUFW3Gl7KfUS0FLgiK67wkxjucgDkjCAGnX3WRB/z1/Ezl6H7PR sbjI4s3oO+H153q5X+Ip3RpvJOpiubk+aJwRdD/8M2DKxu+8h6ME0g43x6uNQZ3v XeDUJbDasn2RHU+FF4rVdCUb2bRNwJLwolKiQYVqWOa18QKhd7mhQWnTpfotwst6 qJf5GIKn/PUgkU19w2o1vB+u5++6FktjtYHdySVPSa0RCnp+HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgCdEUwnJUJEJTzYdOLhc2pRf84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWI5OTQ1YTktMGI0Ny0z YzM5LTgxZDctZjZhZmI1ZWE1ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGS5SyoailrniNArkbLN689t/DhF5k876QTld9hshfKp5B1op4yM OFD1s5Imwb5iVc9ipoxdnBwHwCBjxiWGUg1W+jXHFI+eWpl/+0w+TU1OMPT8NyqY mECXsvU70cNdruITwWQ3LE8fffcOdnmUGeo/hkBim83n0RQZb+HH8KyAIZyFnYx4 qTRdKW6mNm2ASrAfXpiGhoCliev5A8sKPRke1r2pUgdLIOKjNZvb1KF0CKYcekiE uzm89lwZvNc+y/wI61zeb7hwo6MJqPzSZbOz/+J2K2Glr0o6/UtNiP+ckc2RMzBj obaJP4zQvoYbPiOLsnt38GrfSFrvg0CNK60= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:15 2025 by rpki-client