$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5faf6563-ebcd-3341-a2c3-1939f75768e3.roa File: 5faf6563-ebcd-3341-a2c3-1939f75768e3.roa (raw, json) Hash identifier: 13ZRYIZfoH2CQhelsT4F2dGNVuJDAn6BXz+/D212NM0= Subject key identifier: 0B:54:4F:67:A9:E4:A0:12:B7:96:24:30:05:2F:18:97:31:54:6B:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD55E3EBC8405A8A1DB60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5faf6563-ebcd-3341-a2c3-1939f75768e3.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 36622 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d5:5e:3e:bc:84:05:a8:a1:db:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=93de0641-da1e-449a-abc3-bd5ddcd91f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:c0:ce:a9:ae:1c:78:f0:32:88:72:65:85: 66:69:ee:23:7c:43:ea:ae:83:67:f2:fb:28:07:ba: 27:94:66:3e:a9:cc:43:74:55:08:3f:13:36:16:f7: 39:b7:de:59:59:cd:5b:11:76:01:e5:9f:09:19:b1: e7:ee:de:65:b2:89:73:e2:30:ae:89:61:1b:95:de: ae:53:6e:1c:dc:ca:3d:58:d3:d9:ee:f2:67:55:d6: 99:36:1b:fe:18:1b:c2:99:e8:8c:40:c1:72:80:21: e7:38:7f:de:ab:eb:90:8c:a1:54:0e:86:00:2b:51: 4d:62:dc:04:4a:07:a3:3e:1d:ac:0b:92:bd:20:fe: 54:9b:05:8e:72:c6:57:bf:e4:11:e7:89:fb:c8:15: b2:e6:a5:57:42:2c:4a:31:d2:eb:6e:17:aa:53:8c: 53:79:12:35:f1:ed:30:e1:5c:aa:91:fd:43:cc:7c: 88:63:c0:04:55:18:db:d2:96:cd:3f:ad:f1:e0:bb: b9:ca:e9:cc:83:7d:24:de:52:40:49:d4:96:55:1e: 17:07:f5:d0:73:bb:b5:6f:f8:b6:93:65:49:ae:91: c0:7e:c5:01:07:c0:5a:33:f9:81:73:16:85:e2:36: ad:48:19:21:fb:59:23:eb:54:37:c5:a5:43:87:d8: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:4F:67:A9:E4:A0:12:B7:96:24:30:05:2F:18:97:31:54:6B:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5faf6563-ebcd-3341-a2c3-1939f75768e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9e:0f:12:54:32:5b:41:99:f3:4e:c8:ba:17:7b:64:f2:ef: 54:dc:34:5a:ff:5a:b4:60:33:04:49:a7:ef:50:10:73:19:63: 47:2a:98:0b:b7:79:82:cf:b5:05:0f:db:e4:75:56:7f:8a:9e: 17:a9:18:8a:7c:94:72:a3:dc:13:e2:ca:1a:2d:92:f8:12:16: e7:22:b2:bd:47:a4:03:a6:c8:e4:db:e8:4e:bd:4d:d9:fb:90: 5f:33:66:f3:6f:c9:3b:1d:97:83:c0:ae:18:33:15:b9:d0:5e: 65:3a:87:87:42:e4:53:26:14:86:1b:cc:4d:ee:24:fd:ed:1d: 0d:e5:0f:94:c1:64:b3:96:3b:de:03:b5:a4:ed:e8:c6:0c:20: 80:54:7b:f4:e2:b8:39:1e:1a:1f:6b:aa:ed:2b:ad:08:e8:8b: 82:4e:ab:d5:c4:f2:29:17:9f:12:c7:a1:9f:53:f7:e0:35:e5: e6:b0:e7:a3:62:b1:3c:52:b6:55:7c:f3:0c:a8:e9:db:f1:41: 8c:74:e9:e1:ed:21:59:f3:01:95:14:c5:63:81:e0:fd:e8:8e: 67:1e:f4:d8:f8:60:c0:ae:d7:cb:81:95:68:ba:78:58:9c:ba: b7:52:3b:bf:71:82:38:57:27:b8:a6:b9:54:44:82:5d:bf:61: 77:b6:f1:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNVePryEBaih22AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OTNkZTA2NDEtZGExZS00NDlhLWFiYzMtYmQ1ZGRjZDkxZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnPAzqmuHHjwMohyZYVmae4jfEPqroNn8vso B7onlGY+qcxDdFUIPxM2Fvc5t95ZWc1bEXYB5Z8JGbHn7t5lsolz4jCuiWEbld6u U24c3Mo9WNPZ7vJnVdaZNhv+GBvCmeiMQMFygCHnOH/eq+uQjKFUDoYAK1FNYtwE SgejPh2sC5K9IP5UmwWOcsZXv+QR54n7yBWy5qVXQixKMdLrbheqU4xTeRI18e0w 4Vyqkf1DzHyIY8AEVRjb0pbNP63x4Lu5yunMg30k3lJASdSWVR4XB/XQc7u1b/i2 k2VJrpHAfsUBB8BaM/mBcxaF4jatSBkh+1kj61Q3xaVDh9jj0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAtUT2ep5KASt5YkMAUvGJcxVGvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWZhZjY1NjMtZWJjZC0z MzQxLWEyYzMtMTkzOWY3NTc2OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGeDxJUMltBmfNOyLoXe2Ty71TcNFr/WrRgMwRJp+9QEHMZY0cq mAu3eYLPtQUP2+R1Vn+KnhepGIp8lHKj3BPiyhotkvgSFucisr1HpAOmyOTb6E69 Tdn7kF8zZvNvyTsdl4PArhgzFbnQXmU6h4dC5FMmFIYbzE3uJP3tHQ3lD5TBZLOW O94DtaTt6MYMIIBUe/TiuDkeGh9rqu0rrQjoi4JOq9XE8ikXnxLHoZ9T9+A15eaw 56NisTxStlV88wyo6dvxQYx06eHtIVnzAZUUxWOB4P3ojmce9Nj4YMCu18uBlWi6 eFicurdSO79xgjhXJ7imuVREgl2/YXe28Q4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:57:44 2025 by rpki-client