$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59192f7b-4d70-3df8-8f3b-a11e00c7c413.roa File: 59192f7b-4d70-3df8-8f3b-a11e00c7c413.roa (raw, json) Hash identifier: NCS41ri2B3nRGVPgKsp27B4NusqIDvb/h0F7NI8WDdo= Subject key identifier: 2B:33:7E:68:F7:28:2C:9A:A4:B3:48:B2:66:B4:E3:0F:69:AA:78:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5265E560C8A8AF65B2D8B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59192f7b-4d70-3df8-8f3b-a11e00c7c413.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36621 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:65:e5:60:c8:a8:af:65:b2:d8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=afd090b5-0be8-4082-be88-f9fe51e840bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:16:2b:eb:8f:df:0a:52:16:34:a2:71:be: 68:50:87:47:1b:06:ae:9a:dd:6d:96:dc:4e:f0:1b: 45:e1:7b:4a:1d:9e:6d:73:a2:0e:bb:3e:b5:46:be: 4c:0c:ff:4c:b0:bb:2a:a2:c4:1c:70:da:e1:77:24: 80:85:6c:41:81:4f:c8:3e:a5:0a:2d:50:2e:2a:de: b8:1f:53:61:81:22:0b:8f:4c:12:00:26:e1:af:85: b5:a1:53:d3:eb:09:30:19:00:68:c7:82:f2:91:94: 2e:42:67:2d:4f:60:1d:7e:65:a2:91:15:10:bf:5a: 93:f5:c4:d3:cc:82:97:03:fc:37:db:d5:ee:33:b2: 80:ae:b8:de:bf:ba:07:38:2f:21:a3:2f:19:fd:43: 07:63:fd:d5:70:25:dc:d0:73:91:53:30:56:63:90: c5:4d:3f:b6:04:7b:d9:7d:54:e5:a4:a5:85:b3:24: 5e:eb:d5:0e:a7:ce:f9:45:b3:c4:c8:33:cb:57:26: 06:d2:44:b4:c3:7e:c9:77:b5:6f:39:1d:3e:fb:14: 8f:3e:67:d4:af:1e:cc:d5:50:b4:c1:83:69:3b:69: 00:05:08:a1:2e:34:ad:1d:0a:c4:92:af:ab:44:96: 52:b2:a6:54:0e:6d:ad:c8:91:1e:56:e1:39:95:10: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:7E:68:F7:28:2C:9A:A4:B3:48:B2:66:B4:E3:0F:69:AA:78:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59192f7b-4d70-3df8-8f3b-a11e00c7c413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:be:8b:82:32:43:67:78:f0:ab:19:9f:b1:91:fa:62:44:7e: fc:4d:1d:f9:1a:84:32:f7:00:6a:f0:18:df:d5:ea:4a:3c:08: 95:9a:d6:1b:06:e8:23:1e:ec:5f:4d:01:96:f9:7d:cd:e1:f2: 60:51:03:d9:d4:7e:48:1b:b9:d6:96:9d:24:29:18:93:23:9d: 45:48:7e:9c:9d:63:f2:35:00:c1:af:e4:61:5d:be:4f:57:41: 11:b4:30:e9:15:7e:c5:42:24:d0:6b:e3:45:f0:6c:42:80:a0: 58:bd:a1:38:34:5a:91:7c:33:9a:49:4b:7e:2d:a6:eb:6d:a1: 60:52:05:6e:2f:3e:f3:5f:8e:f3:77:e2:52:98:c2:44:c7:34: 72:88:69:01:f8:8a:3b:47:8b:16:18:d0:6c:34:6a:69:69:ec: 82:4e:47:51:18:82:83:f6:44:86:85:3d:fe:55:f1:86:83:90: 3c:a2:ff:16:39:47:60:f7:74:83:3f:e2:5e:0e:1c:bb:53:a0: c0:08:fe:f8:64:29:39:21:d6:18:79:5e:08:c3:36:34:63:92: 5f:a1:8c:f4:f0:41:f8:94:75:ff:86:ac:11:f0:f5:25:9d:4a: 41:9c:66:b7:7a:d9:48:b9:2f:0c:1d:c1:14:6d:3a:14:3c:fb: 66:03:cb:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UmXlYMior2Wy2LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YWZkMDkwYjUtMGJlOC00MDgyLWJlODgtZjlmZTUxZTg0MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RYWK+uP3wpSFjSicb5oUIdHGwaumt1tltxO 8BtF4XtKHZ5tc6IOuz61Rr5MDP9MsLsqosQccNrhdySAhWxBgU/IPqUKLVAuKt64 H1NhgSILj0wSACbhr4W1oVPT6wkwGQBox4LykZQuQmctT2AdfmWikRUQv1qT9cTT zIKXA/w329XuM7KArrjev7oHOC8hoy8Z/UMHY/3VcCXc0HORUzBWY5DFTT+2BHvZ fVTlpKWFsyRe69UOp875RbPEyDPLVyYG0kS0w37Jd7VvOR0++xSPPmfUrx7M1VC0 wYNpO2kABQihLjStHQrEkq+rRJZSsqZUDm2tyJEeVuE5lRDvlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCszfmj3KCyapLNIsma04w9pqniCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTkxOTJmN2ItNGQ3MC0z ZGY4LThmM2ItYTExZTAwYzdjNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ2+i4IyQ2d48KsZn7GR+mJEfvxNHfkahDL3AGrwGN/V6ko8CJWa 1hsG6CMe7F9NAZb5fc3h8mBRA9nUfkgbudaWnSQpGJMjnUVIfpydY/I1AMGv5GFd vk9XQRG0MOkVfsVCJNBr40XwbEKAoFi9oTg0WpF8M5pJS34tputtoWBSBW4vPvNf jvN34lKYwkTHNHKIaQH4ijtHixYY0Gw0amlp7IJOR1EYgoP2RIaFPf5V8YaDkDyi /xY5R2D3dIM/4l4OHLtToMAI/vhkKTkh1hh5XgjDNjRjkl+hjPTwQfiUdf+GrBHw 9SWdSkGcZrd62Ui5LwwdwRRtOhQ8+2YDy7Y= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:08 2025 by rpki-client