$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a30906ae-f599-35b5-95bf-ac848f1e011e.roa File: a30906ae-f599-35b5-95bf-ac848f1e011e.roa (raw, json) Hash identifier: cJ2YE9tWaZaRKK5zP9ck6yOJ/yVBnHT1Qm/dCaM62x4= Subject key identifier: DF:24:20:D8:08:15:47:20:94:9D:B6:6A:F3:25:A9:A4:96:F8:D8:D7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCC0003C08B1B456ED400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a30906ae-f599-35b5-95bf-ac848f1e011e.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396596 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:cc:00:03:c0:8b:1b:45:6e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=6b4fbad1-8abe-4dc8-b797-06612224ca75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:94:0a:89:1f:a5:c5:54:d0:37:5e:95:ef: 22:34:eb:8c:07:09:0e:97:97:9b:8c:3b:88:af:9f: d6:56:a7:fa:cb:e2:35:b4:0b:c7:d0:0f:5f:6c:fc: cf:21:57:c1:cd:af:9c:0b:76:ca:b9:5f:ca:7d:25: 0d:16:b0:ae:b5:cf:f3:9f:68:69:4b:95:f2:d4:8d: cc:5a:71:60:25:10:7f:be:47:ed:d1:6e:be:02:42: 0a:66:e3:7e:f2:3d:45:2b:02:f6:24:70:64:54:ae: fe:54:74:3a:fa:f4:d6:e3:c5:b1:bf:69:5b:bf:88: c1:1f:54:5c:dc:00:a7:de:75:0c:6c:6f:f7:f3:51: 69:dc:3a:55:67:85:05:84:4b:84:c7:a4:f0:ec:4a: f4:ba:4d:04:55:59:e7:97:85:88:04:5c:23:29:2f: 3f:c6:ee:1b:20:a0:72:f2:fb:0d:a6:ac:a2:72:29: 76:eb:5f:73:9d:fa:07:b2:64:bf:e7:9d:a8:81:e2: 19:e5:b6:48:1a:f1:17:0e:af:4f:3d:01:41:7e:95: f6:d5:1f:02:d0:b0:5d:92:a6:e7:cd:b4:b1:c8:bb: 90:b1:11:51:b3:bd:dc:2d:e8:b6:03:fa:00:e9:a6: 41:6f:c8:6b:4e:65:ce:aa:be:71:df:4e:73:52:36: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:24:20:D8:08:15:47:20:94:9D:B6:6A:F3:25:A9:A4:96:F8:D8:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a30906ae-f599-35b5-95bf-ac848f1e011e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:f2:55:44:49:54:40:34:d5:a0:9a:70:26:c6:c5:fa:fa:56: ae:c0:e1:8c:7f:86:bb:99:9d:8e:f1:3b:94:78:32:60:c9:8b: be:b6:d2:60:b9:14:65:98:03:9a:54:17:39:73:5b:da:54:56: 31:c4:6e:b2:59:19:20:82:f5:0d:28:74:f6:d9:a0:20:be:ca: 42:2f:2e:c2:7b:d1:4d:f8:01:79:31:48:5d:13:cd:94:db:a1: 75:4b:08:c8:3b:d9:25:dc:fe:f7:cc:5c:60:e5:fc:8a:d4:e6: ea:0e:96:b0:f5:53:3b:9c:d8:70:06:1e:79:03:2f:09:78:42: e0:6a:df:81:a3:4a:77:09:ba:d6:77:1e:20:cb:21:63:69:f2: 29:44:fd:fe:8b:0f:7b:c1:c0:bb:88:9c:3c:4a:1d:3c:58:0c: 09:f4:59:5d:9d:55:5c:39:26:15:3d:94:f4:55:a8:0e:0e:ec: fc:ae:7c:6a:76:06:29:2d:cb:e7:63:20:b4:26:75:75:43:9b: 20:c7:f4:08:8d:fa:84:d4:05:b1:b3:d3:94:96:89:09:0d:29: 83:4c:d8:80:93:2f:05:c2:f2:1a:e6:13:40:d8:22:70:18:b1: 93:bd:e2:8e:16:20:fa:d1:f1:fd:fa:af:80:9c:7e:35:5b:8c: 1c:83:e4:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMwAA8CLG0Vu1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NmI0ZmJhZDEtOGFiZS00ZGM4LWI3OTctMDY2MTIyMjRjYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoiUCokfpcVU0Ddele8iNOuMBwkOl5ebjDuI r5/WVqf6y+I1tAvH0A9fbPzPIVfBza+cC3bKuV/KfSUNFrCutc/zn2hpS5Xy1I3M WnFgJRB/vkft0W6+AkIKZuN+8j1FKwL2JHBkVK7+VHQ6+vTW48Wxv2lbv4jBH1Rc 3ACn3nUMbG/381Fp3DpVZ4UFhEuEx6Tw7Er0uk0EVVnnl4WIBFwjKS8/xu4bIKBy 8vsNpqyicil2619znfoHsmS/552ogeIZ5bZIGvEXDq9PPQFBfpX21R8C0LBdkqbn zbSxyLuQsRFRs73cLei2A/oA6aZBb8hrTmXOqr5x305zUjaD2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN8kINgIFUcglJ22avMlqaSW+NjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTMwOTA2YWUtZjU5OS0z NWI1LTk1YmYtYWM4NDhmMWUwMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKvyVURJVEA01aCacCbGxfr6Vq7A4Yx/hruZnY7xO5R4MmDJi762 0mC5FGWYA5pUFzlzW9pUVjHEbrJZGSCC9Q0odPbZoCC+ykIvLsJ70U34AXkxSF0T zZTboXVLCMg72SXc/vfMXGDl/IrU5uoOlrD1Uzuc2HAGHnkDLwl4QuBq34GjSncJ utZ3HiDLIWNp8ilE/f6LD3vBwLuInDxKHTxYDAn0WV2dVVw5JhU9lPRVqA4O7Pyu fGp2Bikty+djILQmdXVDmyDH9AiN+oTUBbGz05SWiQkNKYNM2ICTLwXC8hrmE0DY InAYsZO94o4WIPrR8f36r4CcfjVbjByD5I4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:35 2025 by rpki-client