$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5b97968-e9fa-3cc5-a0c4-87a148defcb5.roa File: a5b97968-e9fa-3cc5-a0c4-87a148defcb5.roa (raw, json) Hash identifier: 5bcsy7mlcKdRj9l8DmjVHKP2a4IKsudR66eBKe92hdk= Subject key identifier: 99:86:30:B4:0E:88:83:97:ED:04:83:A3:88:0A:FF:EE:12:4C:E7:AA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B838213F9C19CC90CAFC62200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5b97968-e9fa-3cc5-a0c4-87a148defcb5.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396549 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:13:f9:c1:9c:c9:0c:af:c6:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=bbc5c762-4ace-43bc-bec8-715a7f11c03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:6a:1d:48:fe:06:38:1a:5f:81:11:61:d9: b0:e9:a9:cf:9f:f5:17:65:02:61:9b:ae:ea:5a:df: 60:bf:0b:69:a2:d8:a1:67:96:52:2b:ad:3c:8f:af: f8:4c:26:d9:0b:b1:f4:d4:f2:88:d3:fe:71:1c:bf: 18:b8:77:e1:55:b2:ea:3a:fc:9c:8e:0b:f8:cd:0a: 0b:3b:49:9e:c8:55:96:e6:d8:21:dd:bf:c3:13:f2: 75:9c:5c:14:43:21:f9:33:40:0d:1a:76:25:22:68: 1c:e4:75:21:0b:46:54:24:58:dd:76:b6:ea:a6:61: 6f:2d:b9:0f:b8:45:ed:e0:b1:ce:24:f0:88:16:51: 1f:0e:5a:ff:4d:07:70:0c:43:c5:1a:79:06:df:21: fe:bc:e2:49:b9:ad:30:f0:8e:49:ba:e4:db:94:02: 18:28:71:90:bc:27:b0:4b:a6:5c:50:70:52:b8:ec: ee:9a:74:ea:0a:48:6f:d4:96:65:25:38:f8:00:51: 15:81:c5:43:e0:63:d6:58:e3:2b:10:da:7d:14:0b: 19:4f:1e:c6:56:d2:e0:f6:d6:63:fe:c1:50:1c:1f: 83:fe:44:8c:47:a8:ff:77:63:11:db:eb:7e:20:88: 34:47:82:20:eb:5e:53:40:bf:78:64:ed:9f:58:87: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:86:30:B4:0E:88:83:97:ED:04:83:A3:88:0A:FF:EE:12:4C:E7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5b97968-e9fa-3cc5-a0c4-87a148defcb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a5:22:c1:62:80:53:71:77:a8:ea:74:a2:0a:33:73:6e:b8: 5d:7d:7f:62:35:4b:9e:62:34:30:34:74:18:9e:c6:10:21:55: f5:2b:0f:ec:39:05:82:f3:79:1e:81:1c:3c:db:eb:78:ac:12: 26:e3:73:a4:3d:34:df:b9:b4:37:26:47:bb:47:9e:aa:52:6b: 06:83:97:00:7d:c5:33:99:d1:fa:b5:70:0d:86:c4:2a:06:93: fe:18:fb:64:cb:5e:20:a2:54:d2:3f:56:31:07:0e:77:01:d2: 5f:c7:94:ae:59:bd:db:20:87:75:b0:d8:c5:fb:6d:13:c1:de: 87:10:20:f3:63:d9:3c:de:2c:dd:d8:29:2b:3d:62:e5:19:9c: 05:4f:af:69:43:58:62:80:b5:a4:00:fc:9d:5b:a1:d5:52:bd: a6:75:ac:1d:a7:8c:2a:32:0b:7f:4e:8d:90:fd:29:ed:6d:2d: 5c:9e:5c:0e:7f:77:09:95:2c:a2:42:e2:33:78:82:dd:d6:0c: 35:33:2c:a3:27:c5:c2:56:07:02:8a:1a:b9:c0:72:7b:30:8b: 43:87:23:4d:be:b4:b8:57:7a:f8:d9:d8:46:7b:e3:37:94:a9: d7:ff:f3:6c:69:09:8f:90:90:2e:4f:68:49:55:71:13:36:05: f3:41:38:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDghP5wZzJDK/GIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YmJjNWM3NjItNGFjZS00M2JjLWJlYzgtNzE1YTdmMTFjMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhxqHUj+BjgaX4ERYdmw6anPn/UXZQJhm67q Wt9gvwtpotihZ5ZSK608j6/4TCbZC7H01PKI0/5xHL8YuHfhVbLqOvycjgv4zQoL O0meyFWW5tgh3b/DE/J1nFwUQyH5M0ANGnYlImgc5HUhC0ZUJFjddrbqpmFvLbkP uEXt4LHOJPCIFlEfDlr/TQdwDEPFGnkG3yH+vOJJua0w8I5JuuTblAIYKHGQvCew S6ZcUHBSuOzumnTqCkhv1JZlJTj4AFEVgcVD4GPWWOMrENp9FAsZTx7GVtLg9tZj /sFQHB+D/kSMR6j/d2MR2+t+IIg0R4Ig615TQL94ZO2fWIeN2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJmGMLQOiIOX7QSDo4gK/+4STOeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTViOTc5NjgtZTlmYS0z Y2M1LWEwYzQtODdhMTQ4ZGVmY2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmlIsFigFNxd6jqdKIKM3NuuF19f2I1S55iNDA0dBiexhAhVfUr D+w5BYLzeR6BHDzb63isEibjc6Q9NN+5tDcmR7tHnqpSawaDlwB9xTOZ0fq1cA2G xCoGk/4Y+2TLXiCiVNI/VjEHDncB0l/HlK5Zvdsgh3Ww2MX7bRPB3ocQIPNj2Tze LN3YKSs9YuUZnAVPr2lDWGKAtaQA/J1bodVSvaZ1rB2njCoyC39OjZD9Ke1tLVye XA5/dwmVLKJC4jN4gt3WDDUzLKMnxcJWBwKKGrnAcnswi0OHI02+tLhXevjZ2EZ7 4zeUqdf/82xpCY+QkC5PaElVcRM2BfNBOIU= -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:33 2025 by rpki-client