$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa File: 9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa (raw, json) Hash identifier: jBpGeXbDdLVH0Ef1J+LvjCvBxdWPH4B1pkI+ZFTIn9I= Subject key identifier: EE:71:87:37:00:D8:49:4E:5B:60:E7:33:BB:46:EC:F8:99:3F:24:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD62E6BE8CEB9389CB1C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396604 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d6:2e:6b:e8:ce:b9:38:9c:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=db457ba5-3e08-4690-9738-69fffd94ba4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:35:0d:99:e4:77:0b:c5:57:3c:63:af:21: 27:a9:7f:2f:95:9f:44:03:c1:d1:0a:19:15:76:ce: b9:5f:9d:13:1c:df:b2:0b:74:27:82:43:dc:ed:1c: d1:c3:6d:7d:ed:2b:00:3d:ba:a4:95:4e:9b:a2:ca: 04:5e:4e:99:56:ec:11:ad:41:5a:1e:86:29:91:92: 13:e8:3a:df:e1:b7:e2:26:da:5d:87:e1:33:29:31: 40:91:68:10:86:28:98:bb:09:04:07:c4:4b:39:43: 2a:16:bf:6e:91:da:03:73:df:06:2c:3c:56:df:fa: 7f:54:03:9f:06:2c:2e:3c:3c:ae:5b:18:0a:79:b0: 1a:3f:e1:c9:0b:28:ce:fa:ec:9c:a3:a4:b3:72:5d: 6b:49:ea:66:6c:43:c9:3d:3f:1b:1b:9e:a4:bf:53: de:ec:77:e3:ed:5a:7a:63:cf:6e:e8:70:0c:ea:e4: bd:f2:a1:c0:a9:5d:b6:81:14:66:e1:56:02:2f:f7: 1f:5e:08:3f:76:02:77:d2:7b:91:1f:09:2d:38:1d: b3:d7:cf:1b:fd:2b:a0:c5:89:91:d7:20:7a:36:da: da:75:f8:f4:77:bf:37:9c:f0:c8:8e:25:54:e7:47: 6b:ea:aa:c7:83:49:0b:58:45:cf:f6:be:4b:49:a6: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:71:87:37:00:D8:49:4E:5B:60:E7:33:BB:46:EC:F8:99:3F:24:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:25:fd:e0:d5:98:11:b7:7f:f5:17:bb:8a:e0:e2:7d:39:2e: cd:0d:36:7e:ff:81:9e:d0:1e:9e:7c:c9:92:ac:4d:ec:ad:3d: 25:a2:c9:11:fa:ce:71:54:fa:de:10:61:02:88:a7:b7:c2:3c: d4:ea:01:07:8d:7b:77:ea:c4:1b:69:8f:90:43:d2:b4:f0:4f: f6:6a:e6:30:95:b7:8b:75:45:57:88:1d:43:25:30:a0:ea:4a: 37:29:93:f6:de:92:c5:64:f8:79:e5:c3:f5:99:4b:6c:6c:ec: b5:d7:7d:ad:a9:07:8f:6f:ec:7f:e2:a7:3a:02:d2:b3:8f:fb: da:aa:f1:0b:72:86:b8:f2:4a:56:27:14:51:f9:19:e6:ff:75: 7c:83:f8:b6:ce:28:08:b4:0f:cb:02:61:4d:e9:5b:e5:72:e9: 61:79:ef:3f:11:31:67:c4:c8:98:f9:de:62:8c:03:a5:48:72: 4e:74:bf:b5:6c:59:9a:1a:83:b3:c2:d6:df:0e:c4:bd:04:36: 49:7d:02:2a:08:ed:93:c7:55:5a:f7:87:4d:47:ba:d3:fd:f6: aa:e4:5e:8b:bd:be:9b:0b:d8:20:b8:68:73:13:fe:1c:1f:11: bc:f5:35:b6:38:d8:bf:a8:ef:b9:5c:4b:fd:58:ae:ad:a0:88: 05:12:f4:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNYua+jOuTicscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZGI0NTdiYTUtM2UwOC00NjkwLTk3MzgtNjlmZmZkOTRiYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYM1DZnkdwvFVzxjryEnqX8vlZ9EA8HRChkV ds65X50THN+yC3QngkPc7RzRw2197SsAPbqklU6bosoEXk6ZVuwRrUFaHoYpkZIT 6Drf4bfiJtpdh+EzKTFAkWgQhiiYuwkEB8RLOUMqFr9ukdoDc98GLDxW3/p/VAOf BiwuPDyuWxgKebAaP+HJCyjO+uyco6Szcl1rSepmbEPJPT8bG56kv1Pe7Hfj7Vp6 Y89u6HAM6uS98qHAqV22gRRm4VYCL/cfXgg/dgJ30nuRHwktOB2z188b/SugxYmR 1yB6Ntradfj0d783nPDIjiVU50dr6qrHg0kLWEXP9r5LSabWPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO5xhzcA2ElOW2DnM7tG7PiZPyRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTE3NGNiOTQtODBkMi0z MmFhLTkwMWMtMGU3ZTFjMTI2YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4l/eDVmBG3f/UXu4rg4n05Ls0NNn7/gZ7QHp58yZKsTeytPSWi yRH6znFU+t4QYQKIp7fCPNTqAQeNe3fqxBtpj5BD0rTwT/Zq5jCVt4t1RVeIHUMl MKDqSjcpk/beksVk+Hnlw/WZS2xs7LXXfa2pB49v7H/ipzoC0rOP+9qq8Qtyhrjy SlYnFFH5Geb/dXyD+LbOKAi0D8sCYU3pW+Vy6WF57z8RMWfEyJj53mKMA6VIck50 v7VsWZoag7PC1t8OxL0ENkl9AioI7ZPHVVr3h01HutP99qrkXou9vpsL2CC4aHMT /hwfEbz1NbY42L+o77lcS/1Yrq2giAUS9D4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:03 2025 by rpki-client