$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bca8eea-3223-3b6d-85f3-0fcb78e7f550.roa File: 6bca8eea-3223-3b6d-85f3-0fcb78e7f550.roa (raw, json) Hash identifier: k139rr1ZQtjDD0qbx/hV6Dhh2VFYtvDwzXL/jEFB5Xk= Subject key identifier: 19:4C:1A:A0:7D:6E:88:88:27:EC:62:C5:EF:8A:D7:93:09:F7:8F:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDA1469667CA7A2C55240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bca8eea-3223-3b6d-85f3-0fcb78e7f550.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 36617 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:da:14:69:66:7c:a7:a2:c5:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=ae020059-df61-461d-8484-8ff6d8212c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:1e:be:16:34:4a:25:fa:e0:6e:88:89:bb: 50:47:84:a6:44:da:8e:ff:39:f6:d4:83:d8:b5:a9: 66:43:11:7c:36:6a:8f:af:67:65:c5:39:07:ce:cf: b3:60:3c:6e:a2:db:0e:6d:b6:62:8c:c5:6b:58:8c: 48:7f:21:11:ec:f6:17:9a:cb:36:9b:ad:e6:be:fc: 97:34:05:d2:ec:6b:4a:c8:93:35:3d:ea:4a:08:1f: 7b:e8:e9:ff:ef:d5:f0:70:1c:34:74:81:f5:a8:d6: eb:74:3c:c0:41:7b:97:62:50:fe:a3:19:01:43:5d: cf:04:a9:35:9d:8c:2d:2c:5f:58:b7:07:d2:de:68: 65:9a:58:c5:7f:54:f6:6e:4f:a2:2b:94:7b:73:5b: d4:86:16:53:b0:6e:4d:fd:36:e4:90:cd:2a:a3:15: 27:f3:8a:fa:f4:1e:d8:6d:dd:30:83:39:40:34:e8: b4:d7:49:9e:ec:f6:e1:c9:59:0d:b1:b9:c1:4d:48: 07:1d:a4:a2:11:dc:5c:a4:c6:84:16:b6:e7:b5:92: 5a:39:11:26:04:20:9c:23:7d:96:41:6d:40:8a:d7: 1b:d2:cf:d4:a5:e2:7d:0b:0f:3f:0a:53:a2:1a:1b: 87:94:fa:d2:88:48:70:01:0e:2a:5c:d0:c3:37:31: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4C:1A:A0:7D:6E:88:88:27:EC:62:C5:EF:8A:D7:93:09:F7:8F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bca8eea-3223-3b6d-85f3-0fcb78e7f550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e4:87:fc:2c:17:ac:66:ae:e6:5a:87:b6:ec:43:05:0b:86: de:90:e1:b0:a9:bb:e8:06:6b:cd:43:2b:fa:02:2a:ca:42:1c: 1c:ee:4a:aa:32:d8:86:6c:11:e0:23:02:17:19:69:fd:e1:de: f5:31:7a:b0:71:d9:b2:98:86:0c:9e:e2:d4:aa:6a:df:4d:ac: c6:0f:50:83:98:2e:e9:e7:3f:15:b7:42:3b:cb:72:61:cc:32: 76:34:3a:c7:21:00:2f:c7:91:61:2e:27:6c:3b:0b:51:7d:33: 65:ac:c4:0f:b4:0e:c5:35:a0:03:72:d2:d8:89:0a:47:5a:59: 27:49:20:cd:d9:8b:99:37:2b:3d:34:83:19:00:f2:a6:33:6b: ad:9a:e1:92:7f:e8:b0:bc:6f:1a:5d:5d:4c:8d:12:a9:e4:b0: d6:1c:8a:e3:75:45:ff:7c:c1:8a:de:86:ad:40:ff:ec:a7:ca: 62:9f:db:dc:c7:12:c6:f7:66:be:e4:0f:35:28:64:02:5b:55: e5:b2:05:ac:ad:da:20:2e:78:b2:5a:2a:b8:06:1e:54:98:5a: fa:fd:2f:3a:ad:7f:e8:d5:6a:36:28:8e:47:0a:93:59:2d:64: 18:71:28:9c:ea:61:f9:b3:b0:a7:e5:38:ec:ee:a1:8b:00:ea: 31:c0:69:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNoUaWZ8p6LFUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YWUwMjAwNTktZGY2MS00NjFkLTg0ODQtOGZmNmQ4MjEyYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUMevhY0SiX64G6IibtQR4SmRNqO/zn21IPY talmQxF8NmqPr2dlxTkHzs+zYDxuotsObbZijMVrWIxIfyER7PYXmss2m63mvvyX NAXS7GtKyJM1PepKCB976On/79XwcBw0dIH1qNbrdDzAQXuXYlD+oxkBQ13PBKk1 nYwtLF9YtwfS3mhlmljFf1T2bk+iK5R7c1vUhhZTsG5N/TbkkM0qoxUn84r69B7Y bd0wgzlANOi010me7PbhyVkNsbnBTUgHHaSiEdxcpMaEFrbntZJaOREmBCCcI32W QW1Aitcb0s/UpeJ9Cw8/ClOiGhuHlPrSiEhwAQ4qXNDDNzEMUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBlMGqB9boiIJ+xixe+K15MJ94+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmJjYThlZWEtMzIyMy0z YjZkLTg1ZjMtMGZjYjc4ZTdmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArkh/wsF6xmruZah7bsQwULht6Q4bCpu+gGa81DK/oCKspCHBzu Sqoy2IZsEeAjAhcZaf3h3vUxerBx2bKYhgye4tSqat9NrMYPUIOYLunnPxW3QjvL cmHMMnY0OschAC/HkWEuJ2w7C1F9M2WsxA+0DsU1oANy0tiJCkdaWSdJIM3Zi5k3 Kz00gxkA8qYza62a4ZJ/6LC8bxpdXUyNEqnksNYciuN1Rf98wYrehq1A/+ynymKf 29zHEsb3Zr7kDzUoZAJbVeWyBayt2iAueLJaKrgGHlSYWvr9Lzqtf+jVajYojkcK k1ktZBhxKJzqYfmzsKflOOzuoYsA6jHAaaY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:02:00 2025 by rpki-client