$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa File: 28af308b-f981-38a8-9259-54549363d62d.roa (raw, json) Hash identifier: Xx3jZSJQr5REcPUgTFnRLbmDyenayegBiRCCJGaP0o4= Subject key identifier: 5E:20:CE:D9:4C:7A:50:57:AE:3F:23:6C:AC:86:EA:52:B2:D6:1B:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD699327569B45A07D900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 40717 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d6:99:32:75:69:b4:5a:07:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=ea802adb-14a7-4051-8100-bacd643111ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:ea:d9:70:f4:1e:55:91:b6:c8:51:84:fc: 98:c3:7d:85:0b:ff:7c:94:7e:bb:ad:3d:a6:52:96: 21:11:a3:01:62:6a:48:30:71:f4:d0:0e:a9:ce:a9: 34:46:ae:06:89:7c:95:fc:ff:18:41:27:37:83:3f: fb:05:0e:fd:34:f3:f1:5a:87:e7:6b:4e:91:2f:8a: e2:9d:7d:2c:53:0c:94:60:1a:99:cd:b6:67:99:4e: cc:20:8d:f6:17:cd:e1:9f:dc:35:f3:62:37:30:ce: 24:d2:c8:2b:25:87:9d:8b:cc:35:4c:c2:4b:ec:2d: 3d:9e:76:fc:71:03:0a:5f:d0:7f:51:bb:42:50:7d: 07:d7:4c:9d:65:2f:57:9f:14:d2:2f:77:81:15:f7: b7:99:08:a5:53:93:93:62:b1:4b:6e:87:bb:98:28: 7c:7f:32:2d:2b:ee:d3:64:30:c6:0c:42:df:09:d6: 5e:7b:4a:7a:84:b3:51:9a:04:8c:cf:4f:a2:f3:bf: 92:4a:2c:78:90:87:1f:0f:c3:10:8f:07:f6:df:e5: 1a:b7:aa:b7:c6:9d:c7:1c:a3:d2:3b:5d:6c:95:41: 5e:dd:93:aa:e0:c1:6f:65:ff:0f:d1:c1:29:e6:04: 26:eb:87:1a:b0:59:97:f0:ac:b8:25:2b:49:6b:ef: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:20:CE:D9:4C:7A:50:57:AE:3F:23:6C:AC:86:EA:52:B2:D6:1B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:44:e7:67:64:ed:ff:15:2c:ac:25:cc:e6:0c:93:84:10:06: 71:51:de:5e:f4:e7:86:c5:15:70:b3:15:20:45:25:fa:4a:ea: 54:5f:6c:7d:52:ad:a9:6d:49:ac:d2:c4:b2:8c:87:20:cc:fe: df:eb:d3:24:ba:52:2e:ba:68:b7:e4:35:a8:7c:71:ca:fb:28: 4a:1a:3e:71:d1:0e:a4:c6:0d:6d:73:c4:15:84:7f:6c:e5:02: dd:84:6b:25:dd:41:a2:73:e7:94:7a:dd:7d:d9:05:8a:26:c7: a5:8d:6e:82:ef:8e:d3:76:44:b2:e2:c0:39:8b:d1:a6:84:ac: 2a:ab:e2:6d:35:42:ed:7f:ee:50:7c:ec:00:79:b3:8c:c2:5a: 3e:0d:fe:6b:41:73:2f:85:32:84:5e:13:45:b2:b4:5c:0d:a1: d0:c1:a0:db:8b:14:82:5d:ca:44:45:a1:b6:fa:a8:b8:0f:8a: f4:47:95:7b:11:c5:72:ad:c0:c4:42:8d:35:e6:e0:11:ef:b6: d7:79:9c:9f:23:7b:81:42:3e:cd:af:25:ec:c8:52:09:63:21: e3:35:ef:11:7e:ac:23:bd:56:2f:b6:fe:ee:30:32:d8:6a:4c: 7a:26:2e:7e:b0:0a:d9:8d:7d:75:be:21:78:82:68:68:b3:d1: 2b:88:e0:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNaZMnVptFoH2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZWE4MDJhZGItMTRhNy00MDUxLTgxMDAtYmFjZDY0MzExMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mbq2XD0HlWRtshRhPyYw32FC/98lH67rT2m UpYhEaMBYmpIMHH00A6pzqk0Rq4GiXyV/P8YQSc3gz/7BQ79NPPxWofna06RL4ri nX0sUwyUYBqZzbZnmU7MII32F83hn9w182I3MM4k0sgrJYedi8w1TMJL7C09nnb8 cQMKX9B/UbtCUH0H10ydZS9XnxTSL3eBFfe3mQilU5OTYrFLboe7mCh8fzItK+7T ZDDGDELfCdZee0p6hLNRmgSMz0+i87+SSix4kIcfD8MQjwf23+Uat6q3xp3HHKPS O11slUFe3ZOq4MFvZf8P0cEp5gQm64casFmX8Ky4JStJa+8VxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4gztlMelBXrj8jbKyG6lKy1huEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhhZjMwOGItZjk4MS0z OGE4LTkyNTktNTQ1NDkzNjNkNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKtE52dk7f8VLKwlzOYMk4QQBnFR3l7054bFFXCzFSBFJfpK6lRf bH1SraltSazSxLKMhyDM/t/r0yS6Ui66aLfkNah8ccr7KEoaPnHRDqTGDW1zxBWE f2zlAt2EayXdQaJz55R63X3ZBYomx6WNboLvjtN2RLLiwDmL0aaErCqr4m01Qu1/ 7lB87AB5s4zCWj4N/mtBcy+FMoReE0WytFwNodDBoNuLFIJdykRFobb6qLgPivRH lXsRxXKtwMRCjTXm4BHvttd5nJ8je4FCPs2vJezIUgljIeM17xF+rCO9Vi+2/u4w MthqTHomLn6wCtmNfXW+IXiCaGiz0SuI4Bk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:33:53 2025 by rpki-client