$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f8bf9fd-5384-36ad-bfb9-e16a15d13ca8.roa File: 8f8bf9fd-5384-36ad-bfb9-e16a15d13ca8.roa (raw, json) Hash identifier: Ea4WrXPFVP6QQDFIwFVlU02kGTDaZx0S6cURG9ZcJUo= Subject key identifier: AB:4D:8F:1A:6B:29:20:C1:DB:FB:C7:FC:57:8D:AA:4B:9C:14:A4:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDC54AEC09B1C36A4F200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f8bf9fd-5384-36ad-bfb9-e16a15d13ca8.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 36630 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:dc:54:ae:c0:9b:1c:36:a4:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=283c1fcf-6762-4015-8a3f-c3eef2642fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:c7:4a:1b:ee:c8:d9:09:73:42:19:15:02: a7:d8:51:68:a4:91:12:43:9b:a6:2e:ed:f4:3d:b8: ac:4c:54:0b:cd:08:a6:9b:42:a6:42:a3:89:52:cc: 97:50:0b:c9:b6:69:f2:51:19:8d:25:17:99:50:12: a4:ab:6d:e9:6d:78:db:77:67:7f:0a:98:a4:ba:8d: 6d:79:51:37:f6:bb:9e:24:2b:f3:95:7a:71:98:03: 43:be:60:0e:20:cc:bd:15:08:73:0b:d5:98:6f:e6: 9d:79:d2:4b:2c:f2:7d:76:15:0b:66:a9:44:0f:d8: 82:53:b6:87:26:0f:e2:c6:77:69:4c:a5:f9:90:f6: 2f:31:5d:1d:23:d2:a3:2c:07:c7:2e:90:36:0e:1b: 8a:cb:e5:48:3b:51:b0:c7:e9:c2:8f:ef:c1:a0:91: 8d:0e:74:11:06:4b:dd:96:ad:6a:c5:d5:f5:6c:f1: b1:af:35:41:08:0a:ba:23:33:6f:c6:9a:d4:04:81: 22:5e:74:88:09:9c:11:52:20:9a:eb:e8:6f:b1:c5: 1d:31:24:a2:80:f7:23:3d:9f:8b:08:86:6a:05:fd: cf:92:4e:2f:13:60:87:b9:b1:33:a9:a7:8e:b3:64: 3d:62:5d:b0:e6:cb:4b:59:d6:ff:60:a3:d9:4a:cc: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4D:8F:1A:6B:29:20:C1:DB:FB:C7:FC:57:8D:AA:4B:9C:14:A4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f8bf9fd-5384-36ad-bfb9-e16a15d13ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:5e:66:f6:6a:e4:f7:a5:79:0b:0e:04:4d:f3:49:a2:06:39: ea:3c:d1:d1:27:9a:e4:f7:42:db:66:75:d3:41:83:3a:00:0d: be:5f:a3:25:d6:01:bb:fb:98:50:6a:25:de:5f:43:36:60:7d: 53:de:f6:17:e2:79:ae:20:60:36:68:18:a7:35:fa:8a:05:34: 89:6a:e3:a8:56:dd:25:80:c0:c9:fd:f2:7c:b9:29:44:d5:31: f9:15:ea:d5:ad:3a:4a:3b:31:7a:73:47:96:a5:2f:18:3f:1a: 56:e5:c0:be:79:69:1c:5d:1f:d1:65:29:fc:03:e5:f0:55:22: 90:80:31:58:c7:25:d0:d6:4d:94:b8:91:1e:ba:46:bb:5a:6b: d9:6b:4a:52:96:82:78:ec:c0:61:72:29:17:da:d4:91:99:99: 80:3a:af:03:dc:c7:37:72:24:33:5b:54:dc:c6:4b:26:7a:a6: 21:da:3f:11:46:36:eb:fe:9b:2a:db:42:07:da:ea:fe:95:1c: bf:91:e3:ef:8f:7e:71:58:19:df:8b:89:19:0a:1d:35:2f:aa: 60:4f:a3:f7:d9:31:2d:39:a4:64:eb:6c:74:dd:0a:60:9e:45: 89:f7:19:26:d6:ca:cd:99:73:fd:9f:f5:ed:f1:61:89:b2:fa: ee:0c:9c:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNxUrsCbHDak8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MjgzYzFmY2YtNjc2Mi00MDE1LThhM2YtYzNlZWYyNjQyZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgXHShvuyNkJc0IZFQKn2FFopJESQ5umLu30 PbisTFQLzQimm0KmQqOJUsyXUAvJtmnyURmNJReZUBKkq23pbXjbd2d/Cpikuo1t eVE39rueJCvzlXpxmANDvmAOIMy9FQhzC9WYb+adedJLLPJ9dhULZqlED9iCU7aH Jg/ixndpTKX5kPYvMV0dI9KjLAfHLpA2DhuKy+VIO1Gwx+nCj+/BoJGNDnQRBkvd lq1qxdX1bPGxrzVBCAq6IzNvxprUBIEiXnSICZwRUiCa6+hvscUdMSSigPcjPZ+L CIZqBf3Pkk4vE2CHubEzqaeOs2Q9Yl2w5stLWdb/YKPZSsxhxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKtNjxprKSDB2/vH/FeNqkucFKQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGY4YmY5ZmQtNTM4NC0z NmFkLWJmYjktZTE2YTE1ZDEzY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNeZvZq5PeleQsOBE3zSaIGOeo80dEnmuT3QttmddNBgzoADb5f oyXWAbv7mFBqJd5fQzZgfVPe9hfiea4gYDZoGKc1+ooFNIlq46hW3SWAwMn98ny5 KUTVMfkV6tWtOko7MXpzR5alLxg/GlblwL55aRxdH9FlKfwD5fBVIpCAMVjHJdDW TZS4kR66Rrtaa9lrSlKWgnjswGFyKRfa1JGZmYA6rwPcxzdyJDNbVNzGSyZ6piHa PxFGNuv+myrbQgfa6v6VHL+R4++PfnFYGd+LiRkKHTUvqmBPo/fZMS05pGTrbHTd CmCeRYn3GSbWys2Zc/2f9e3xYYmy+u4MnHI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:33:01 2025 by rpki-client