$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/904d401e-64b7-3085-8be8-a80257c038a8.roa File: 904d401e-64b7-3085-8be8-a80257c038a8.roa (raw, json) Hash identifier: LFM2wg38V0IZZLnm5Z9BUo3NDdCKADTknZJW9has/C4= Subject key identifier: E8:59:79:91:2D:50:A4:86:F6:54:02:8A:60:63:DF:AA:09:13:CE:52 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526C27D84FA9809DB0F640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/904d401e-64b7-3085-8be8-a80257c038a8.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396552 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6c:27:d8:4f:a9:80:9d:b0:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=132b5d1f-4042-45f0-937e-872d144b2537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:9c:49:cc:98:ef:33:42:ee:2c:fa:48:1b:18: 97:fa:da:d9:13:2b:a2:63:ab:79:01:5c:a5:79:3d: 8b:58:e4:f3:0e:d6:1b:3b:33:07:42:88:5a:87:d2: 29:9c:5f:44:73:3e:06:cd:eb:37:0d:06:02:f8:9a: b9:94:37:df:d2:ac:c1:9b:84:f8:96:db:26:d9:60: cb:dd:47:8f:0a:6b:8d:01:17:8d:7f:b8:9a:22:64: b4:d5:7f:76:33:3c:fa:55:b5:e2:38:ae:76:9d:60: 50:d2:ec:21:5a:24:76:7b:6c:19:ee:94:60:62:5e: c5:b1:17:0f:c8:5b:93:8b:f8:b2:b5:4f:e9:35:a6: 02:e2:7a:9c:a8:f1:f4:61:db:51:09:46:c2:bc:a3: 94:a3:e7:1f:90:60:a6:85:dd:cd:14:e2:b9:b3:bf: 71:d2:78:ba:79:50:7f:4a:35:e5:30:2d:b6:19:ed: 18:f3:99:e4:47:4f:44:b3:94:30:0a:13:1b:51:b4: 52:a6:d5:21:92:22:1d:c9:ad:81:0e:4b:a4:af:57: d4:6c:cf:1a:43:c7:4a:99:25:6a:aa:15:a0:ac:15: bc:fb:c7:bd:2d:07:66:4a:86:fb:a1:9d:fb:d3:f6: e5:3e:c6:45:28:4f:42:de:78:b7:d0:31:a9:20:8a: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:79:91:2D:50:A4:86:F6:54:02:8A:60:63:DF:AA:09:13:CE:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/904d401e-64b7-3085-8be8-a80257c038a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e6:0f:7c:58:fd:fd:6c:83:f9:4f:5e:b7:4d:41:c2:c2:0f: 2b:07:6b:27:bc:c5:78:f6:33:31:39:8c:09:82:17:36:60:d7: f0:4f:ee:43:01:8c:df:c7:f4:95:d5:20:27:10:7e:9a:29:f7: 3a:29:60:f4:b4:9a:2e:73:1c:de:57:76:37:7d:5b:c6:be:7d: 63:82:01:dc:d4:c7:a8:c9:88:19:0d:ab:ae:f5:f5:2a:c1:00: 5f:f9:1d:bb:1f:7e:fa:f6:1c:7c:30:44:14:b6:d1:fd:52:9f: 0a:54:3a:a9:69:7f:5a:8b:07:5c:99:d8:1d:1e:db:cf:39:d1: f3:33:3a:ab:db:78:30:42:a9:fc:83:13:78:6a:1e:4c:52:5f: 97:1d:81:7f:4b:59:82:3e:27:a2:36:ab:bf:0a:eb:5a:d7:c5: 73:09:97:fe:f2:a8:a1:23:82:b9:50:b4:ee:fc:68:8d:de:ff: e8:59:dd:6b:58:54:40:98:19:b1:3d:57:5d:7b:be:47:64:96: 78:7f:44:1b:a5:69:c8:f3:6f:63:da:93:f4:64:ee:fe:8b:96: 19:5d:df:aa:48:cb:20:1e:63:b8:1d:fa:4b:a2:93:01:78:a3: 48:b9:7a:e4:38:aa:84:f4:fa:61:9f:70:d0:7f:02:ae:80:22: 84:3a:c6:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Umwn2E+pgJ2w9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTMyYjVkMWYtNDA0Mi00NWYwLTkzN2UtODcyZDE0NGIyNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ZxJzJjvM0LuLPpIGxiX+trZEyuiY6t5AVyl eT2LWOTzDtYbOzMHQohah9IpnF9Ecz4Gzes3DQYC+Jq5lDff0qzBm4T4ltsm2WDL 3UePCmuNAReNf7iaImS01X92Mzz6VbXiOK52nWBQ0uwhWiR2e2wZ7pRgYl7FsRcP yFuTi/iytU/pNaYC4nqcqPH0YdtRCUbCvKOUo+cfkGCmhd3NFOK5s79x0ni6eVB/ SjXlMC22Ge0Y85nkR09Es5QwChMbUbRSptUhkiIdya2BDkukr1fUbM8aQ8dKmSVq qhWgrBW8+8e9LQdmSob7oZ370/blPsZFKE9C3ni30DGpIIrtiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOhZeZEtUKSG9lQCimBj36oJE85SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTA0ZDQwMWUtNjRiNy0z MDg1LThiZTgtYTgwMjU3YzAzOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGTmD3xY/f1sg/lPXrdNQcLCDysHaye8xXj2MzE5jAmCFzZg1/BP 7kMBjN/H9JXVICcQfpop9zopYPS0mi5zHN5Xdjd9W8a+fWOCAdzUx6jJiBkNq671 9SrBAF/5Hbsffvr2HHwwRBS20f1SnwpUOqlpf1qLB1yZ2B0e28850fMzOqvbeDBC qfyDE3hqHkxSX5cdgX9LWYI+J6I2q78K61rXxXMJl/7yqKEjgrlQtO78aI3e/+hZ 3WtYVECYGbE9V117vkdklnh/RBulacjzb2Pak/Rk7v6Llhld36pIyyAeY7gd+kui kwF4o0i5euQ4qoT0+mGfcNB/Aq6AIoQ6xpc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:10 2025 by rpki-client