$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c46761-37a6-3088-8752-bb2d20d5be5e.roa File: 24c46761-37a6-3088-8752-bb2d20d5be5e.roa (raw, json) Hash identifier: OQ3F7p/9U7ALU6jCSnuLQ6pBNNJ5OiGLTAI2PxA5++g= Subject key identifier: D6:12:14:2E:8E:EC:08:44:68:95:8A:88:8B:71:D8:72:92:74:47:4E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5276246B680CEB1E8ACC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c46761-37a6-3088-8752-bb2d20d5be5e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396573 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:76:24:6b:68:0c:eb:1e:8a:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=f05e551e-dcec-47f5-b6d6-d2b11962da84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:9e:29:29:8c:68:e1:14:10:98:b6:9a:cf: 74:6c:48:ff:56:63:25:98:66:41:35:32:69:56:b1: d8:88:97:b1:83:39:ce:ab:4f:7f:f3:50:76:be:71: 26:4c:3a:2f:57:89:88:72:1d:fd:97:f5:af:ce:ca: ea:f1:e4:57:99:d4:f9:0e:10:5c:4a:cf:c7:c9:7d: 6a:b8:49:bc:69:39:ab:8c:a6:d0:89:16:ee:db:c6: 0f:d3:96:cb:71:c9:db:4c:85:2f:86:81:98:ec:80: 52:d0:cf:70:d8:9d:8e:56:46:7d:df:47:f6:59:7f: e7:ee:09:75:3f:03:bc:50:59:a8:35:fa:3d:07:7b: 4b:e8:14:0c:19:c9:3a:7e:0c:ec:b1:bd:6c:44:7d: 80:87:71:3f:35:79:95:c1:14:75:9c:46:16:56:9d: 9c:51:fa:1f:86:d1:1d:74:1f:fe:3c:7d:5f:12:32: 26:44:ea:59:43:80:72:fd:ec:3c:1c:7f:57:ab:82: 82:46:37:39:48:f5:9d:56:26:c4:85:10:28:98:9f: 94:b5:7a:e2:af:7a:9a:c6:30:fd:f5:a0:6c:8e:ac: 70:c0:28:fa:4a:a1:e6:51:da:91:dd:dd:b3:52:c3: 9b:b7:b1:fd:5e:36:14:e2:83:96:08:9c:3d:3b:38: 28:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:12:14:2E:8E:EC:08:44:68:95:8A:88:8B:71:D8:72:92:74:47:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24c46761-37a6-3088-8752-bb2d20d5be5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d1:bc:ab:92:47:46:fe:db:e6:93:9c:4b:e0:e0:07:f4:62: a7:b4:b5:95:cb:8e:07:fa:2a:d5:49:fb:9c:8f:0f:ed:1a:c3: 8a:a7:be:8a:5e:b1:2a:fa:6e:2f:21:c6:ba:a5:99:f0:fd:a7: 2e:14:a2:79:29:73:6b:5f:a8:87:ad:61:b4:ce:73:0c:8c:e8: 59:b9:fb:9f:f3:ee:f0:4a:f5:6c:69:eb:7c:79:13:d0:ba:e4: 0f:7a:a6:c7:68:99:a1:78:f0:12:0c:e0:32:87:98:44:3e:7e: ef:0c:1b:6a:87:fc:47:16:c8:6d:9a:b9:fc:1e:37:62:60:a8: 6e:48:95:3d:0a:e0:f5:56:32:d1:35:14:6d:e4:75:e4:46:ff: 8d:95:75:e5:09:6b:ad:28:3b:b7:f7:ad:e4:41:0f:6d:f3:23: 6c:c8:d9:12:ca:8a:24:60:68:b9:bb:46:ea:15:e2:9e:94:89: d1:34:91:a0:ce:a1:4d:20:d8:cb:d3:0f:6f:28:f0:70:48:d7: ce:ff:af:d6:b1:d5:f8:19:78:26:07:48:2c:69:8c:5e:81:7c: 9e:ac:cc:b2:65:67:50:51:41:2c:72:91:0e:20:49:8d:72:f9: d4:47:40:0e:5e:e5:5c:7d:b7:c3:b3:14:20:11:97:71:04:0d: 9d:38:d0:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UnYka2gM6x6KzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZjA1ZTU1MWUtZGNlYy00N2Y1LWI2ZDYtZDJiMTE5NjJkYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml2eKSmMaOEUEJi2ms90bEj/VmMlmGZBNTJp VrHYiJexgznOq09/81B2vnEmTDovV4mIch39l/Wvzsrq8eRXmdT5DhBcSs/HyX1q uEm8aTmrjKbQiRbu28YP05bLccnbTIUvhoGY7IBS0M9w2J2OVkZ930f2WX/n7gl1 PwO8UFmoNfo9B3tL6BQMGck6fgzssb1sRH2Ah3E/NXmVwRR1nEYWVp2cUfofhtEd dB/+PH1fEjImROpZQ4By/ew8HH9Xq4KCRjc5SPWdVibEhRAomJ+UtXrir3qaxjD9 9aBsjqxwwCj6SqHmUdqR3d2zUsObt7H9XjYU4oOWCJw9OzgoCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNYSFC6O7AhEaJWKiItx2HKSdEdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjRjNDY3NjEtMzdhNi0z MDg4LTg3NTItYmIyZDIwZDViZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIHRvKuSR0b+2+aTnEvg4Af0Yqe0tZXLjgf6KtVJ+5yPD+0aw4qn vopesSr6bi8hxrqlmfD9py4Uonkpc2tfqIetYbTOcwyM6Fm5+5/z7vBK9Wxp63x5 E9C65A96psdomaF48BIM4DKHmEQ+fu8MG2qH/EcWyG2aufweN2JgqG5IlT0K4PVW MtE1FG3kdeRG/42VdeUJa60oO7f3reRBD23zI2zI2RLKiiRgaLm7RuoV4p6UidE0 kaDOoU0g2MvTD28o8HBI187/r9ax1fgZeCYHSCxpjF6BfJ6szLJlZ1BRQSxykQ4g SY1y+dRHQA5e5Vx9t8OzFCARl3EEDZ040AE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:45 2025 by rpki-client