$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545255d6-b391-3db0-9038-c42d863bafae.roa File: 545255d6-b391-3db0-9038-c42d863bafae.roa (raw, json) Hash identifier: ufKt0MX7fWGgRxlXsTkWy7CCV4TB+tr8CDx3zD2oft8= Subject key identifier: 5C:40:55:E9:47:66:49:E1:B2:38:E7:1D:F1:36:D9:39:09:12:71:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDC376FD4D06B54ECFF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545255d6-b391-3db0-9038-c42d863bafae.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 36616 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:dc:37:6f:d4:d0:6b:54:ec:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=97fc9b5f-a9b4-4819-8d1d-4b4030b9e5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c0:80:eb:c3:e7:0e:2a:a9:8f:99:10:e0:ac: 03:df:d6:54:8f:dd:c7:72:9b:b7:f3:a7:c6:d6:ed: 79:c7:26:a5:1f:82:7c:40:e9:25:2a:46:c5:5b:62: 48:e1:ec:bf:f3:2a:73:97:f9:eb:33:5f:4a:9b:b6: 6e:1a:76:02:1b:4a:49:74:a3:23:73:3c:35:28:f4: cf:7f:40:24:25:f8:25:b4:24:41:d1:b3:80:4f:99: fd:66:84:eb:79:e7:80:3b:0b:28:67:5f:64:8b:be: b1:23:c1:9b:a0:72:58:7f:08:90:34:c4:f6:9a:d2: 6a:b2:5e:a4:dd:f7:56:a0:4f:86:77:f9:cc:f5:5b: db:b3:06:1f:62:04:9b:86:7e:4f:e4:2b:fb:75:af: d7:92:e6:dc:e9:6c:64:91:d5:de:21:a2:d0:81:f4: d1:93:4c:5e:ea:88:82:c2:c3:9d:b6:83:b9:76:b1: 19:42:aa:45:55:e7:7d:63:4a:a9:ae:db:f8:db:9d: 28:c4:31:ca:73:6a:9a:30:3c:6e:76:29:ad:61:84: 77:99:aa:8d:d3:e7:5f:df:70:7d:c0:7d:71:d5:a9: a3:e5:0e:2d:b3:7f:7a:10:ac:5e:3e:ab:52:11:fd: 1f:0f:35:69:87:51:dd:cc:65:20:29:89:67:f4:d4: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:40:55:E9:47:66:49:E1:B2:38:E7:1D:F1:36:D9:39:09:12:71:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545255d6-b391-3db0-9038-c42d863bafae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8e:22:ca:bb:de:3e:ee:db:26:9e:d2:70:8e:98:e3:3b:9c: 16:d8:51:8c:ef:1b:a2:d0:c0:94:a8:28:c2:ac:c6:09:f8:b1: a3:d2:a2:b4:5a:1a:ce:52:40:06:87:cf:c6:4a:0e:e9:06:ac: 97:8e:22:0c:96:87:f8:e9:82:61:c2:39:de:13:05:99:95:e3: 3f:a7:1f:67:f5:8f:7a:2e:92:fa:c6:e1:6b:bf:a7:2b:b3:9c: af:f2:97:2c:d7:0a:d2:db:88:e9:f1:96:c6:b6:6c:74:85:94: 14:f3:be:27:c3:18:a8:f0:c5:57:04:54:92:36:90:5a:f5:cc: fe:ee:6f:10:44:66:48:bc:1b:ff:e3:c6:0a:94:8c:3a:6f:a1: 0d:ea:6b:fd:3e:ae:ee:78:ea:03:fd:1f:07:22:f2:16:b6:c6: e4:61:e7:e0:d5:32:ee:ac:74:f8:3e:a2:93:d0:b5:20:13:5c: 68:2c:a4:d0:83:75:d5:59:6b:80:31:97:4a:d8:9a:01:32:10: ea:ef:d9:85:65:bc:d8:9c:ee:cc:69:ca:13:98:9b:12:a5:f8: 0c:4a:54:74:72:d7:76:ac:dd:cf:83:85:a3:61:18:d9:87:30: f1:17:6b:36:b5:37:23:0f:bc:f5:a3:2f:9b:2f:f1:91:e7:6b: be:33:f5:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNw3b9TQa1Ts/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OTdmYzliNWYtYTliNC00ODE5LThkMWQtNGI0MDMwYjllNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cCA68PnDiqpj5kQ4KwD39ZUj93Hcpu386fG 1u15xyalH4J8QOklKkbFW2JI4ey/8ypzl/nrM19Km7ZuGnYCG0pJdKMjczw1KPTP f0AkJfgltCRB0bOAT5n9ZoTreeeAOwsoZ19ki76xI8GboHJYfwiQNMT2mtJqsl6k 3fdWoE+Gd/nM9VvbswYfYgSbhn5P5Cv7da/Xkubc6WxkkdXeIaLQgfTRk0xe6oiC wsOdtoO5drEZQqpFVed9Y0qprtv4250oxDHKc2qaMDxudimtYYR3maqN0+df33B9 wH1x1amj5Q4ts396EKxePqtSEf0fDzVph1HdzGUgKYln9NSfewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFxAVelHZknhsjjnHfE22TkJEnHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTQ1MjU1ZDYtYjM5MS0z ZGIwLTkwMzgtYzQyZDg2M2JhZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAaOIsq73j7u2yae0nCOmOM7nBbYUYzvG6LQwJSoKMKsxgn4saPS orRaGs5SQAaHz8ZKDukGrJeOIgyWh/jpgmHCOd4TBZmV4z+nH2f1j3oukvrG4Wu/ pyuznK/ylyzXCtLbiOnxlsa2bHSFlBTzvifDGKjwxVcEVJI2kFr1zP7ubxBEZki8 G//jxgqUjDpvoQ3qa/0+ru546gP9Hwci8ha2xuRh5+DVMu6sdPg+opPQtSATXGgs pNCDddVZa4Axl0rYmgEyEOrv2YVlvNic7sxpyhOYmxKl+AxKVHRy13as3c+DhaNh GNmHMPEXaza1NyMPvPWjL5sv8ZHna74z9Sw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:47 2025 by rpki-client