$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd983ba-5dbb-3aa3-bc22-152345f17e64.roa File: 7dd983ba-5dbb-3aa3-bc22-152345f17e64.roa (raw, json) Hash identifier: sjwqpUg+q9NBrbhEMf6gTMBQVMSRzRBxyJvaR1Uw+/I= Subject key identifier: F7:97:34:6B:96:1F:0B:C9:B2:CC:F0:22:43:43:0B:2A:AB:B3:CF:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526A655AEE19717FF72860 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd983ba-5dbb-3aa3-bc22-152345f17e64.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36623 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6a:65:5a:ee:19:71:7f:f7:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=e2850c6a-4205-4095-b37f-d162782ef0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:02:0f:31:24:19:36:6d:43:15:90:2e:90: d8:d8:6e:a0:bc:c1:41:9a:41:6b:ef:8e:6a:86:e5: 55:b4:80:14:57:10:1f:11:ad:3d:6a:9c:85:e1:61: f0:c6:26:da:90:2d:a9:00:7e:d3:c6:a8:7b:5e:fe: f1:c9:c8:2a:ce:06:fe:c5:cb:a7:ff:62:1a:f5:1e: 21:4e:14:08:fa:6c:4c:44:6a:fc:f8:dd:33:9f:30: d2:cf:dd:29:8e:3c:88:94:aa:c5:f9:46:8f:17:3c: a7:b1:22:90:2e:6d:48:07:95:f2:f7:04:f4:c1:fe: e5:3c:bb:da:72:d1:97:db:b8:1f:29:36:68:da:a6: 07:d2:cd:53:92:36:40:2c:00:61:37:f3:11:e5:bb: fc:71:f9:ba:da:56:be:36:44:05:f2:39:87:38:4a: a7:b2:ce:34:d8:04:51:83:f6:35:35:da:2a:eb:87: 16:54:c2:d9:f5:14:b7:c3:10:a5:9d:fc:8f:b5:f5: e7:10:9c:f4:44:fe:8e:a4:5d:3c:35:23:4a:cf:7b: b4:73:31:07:af:99:f0:f9:d0:4c:19:8c:12:bd:e1: af:d4:7f:79:d9:21:b3:e2:f7:63:75:a9:2b:09:2a: 33:94:ef:e0:88:16:9d:03:38:af:b2:82:6d:89:cb: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:34:6B:96:1F:0B:C9:B2:CC:F0:22:43:43:0B:2A:AB:B3:CF:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd983ba-5dbb-3aa3-bc22-152345f17e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:38:0f:14:d9:c2:75:2c:b8:9b:6a:c8:58:e3:81:f6:c0:f5: 58:86:25:9c:0b:08:fd:0e:fc:43:ee:3c:2e:14:25:d4:5d:74: e1:51:06:1a:e5:68:3c:b3:7e:c5:08:95:4c:ab:40:c6:1d:81: 4e:3e:89:26:6d:44:83:16:98:53:55:b0:c5:67:e8:9b:1d:cf: 85:dc:78:aa:63:dd:44:5b:8b:a3:3d:ba:bc:ab:37:f1:62:1d: 10:f8:27:63:95:1c:a1:22:42:64:44:73:b2:19:88:09:66:5e: 0c:ea:2f:26:01:31:39:7f:4f:81:ac:b1:1b:b2:58:20:26:ef: 29:62:cc:14:18:a1:7a:36:86:53:e7:06:93:e4:f5:db:54:9c: 6c:9b:8e:66:c8:00:b1:fc:fc:50:fb:4b:e7:b1:86:b6:11:82: a4:90:b2:10:73:48:c2:a3:4f:7e:e4:ef:a8:a8:7e:b2:83:f7: 77:99:1b:94:8a:1c:c2:02:8e:10:f9:fa:c1:d2:70:d6:87:89: 98:7f:c8:75:72:23:47:09:47:1d:14:72:23:3e:19:43:e3:6f: 5e:78:fd:a9:bf:b0:bc:fc:4a:88:93:56:1e:a5:9b:4c:38:61: b9:a1:ac:0c:9e:1c:e2:96:40:4e:62:2d:ed:35:13:e8:c6:5a: eb:ba:d1:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UmplWu4ZcX/3KGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZTI4NTBjNmEtNDIwNS00MDk1LWIzN2YtZDE2Mjc4MmVmMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNcCDzEkGTZtQxWQLpDY2G6gvMFBmkFr745q huVVtIAUVxAfEa09apyF4WHwxibakC2pAH7Txqh7Xv7xycgqzgb+xcun/2Ia9R4h ThQI+mxMRGr8+N0znzDSz90pjjyIlKrF+UaPFzynsSKQLm1IB5Xy9wT0wf7lPLva ctGX27gfKTZo2qYH0s1TkjZALABhN/MR5bv8cfm62la+NkQF8jmHOEqnss402ARR g/Y1Ndoq64cWVMLZ9RS3wxClnfyPtfXnEJz0RP6OpF08NSNKz3u0czEHr5nw+dBM GYwSveGv1H952SGz4vdjdakrCSozlO/giBadAzivsoJticsyTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPeXNGuWHwvJsszwIkNDCyqrs88WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RkOTgzYmEtNWRiYi0z YWEzLWJjMjItMTUyMzQ1ZjE3ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAs4DxTZwnUsuJtqyFjjgfbA9ViGJZwLCP0O/EPuPC4UJdRddOFR BhrlaDyzfsUIlUyrQMYdgU4+iSZtRIMWmFNVsMVn6Jsdz4XceKpj3URbi6M9uryr N/FiHRD4J2OVHKEiQmREc7IZiAlmXgzqLyYBMTl/T4GssRuyWCAm7ylizBQYoXo2 hlPnBpPk9dtUnGybjmbIALH8/FD7S+exhrYRgqSQshBzSMKjT37k76iofrKD93eZ G5SKHMICjhD5+sHScNaHiZh/yHVyI0cJRx0UciM+GUPjb154/am/sLz8SoiTVh6l m0w4YbmhrAyeHOKWQE5iLe01E+jGWuu60UQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:11 2025 by rpki-client