$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4d8994-2f38-3c23-8651-2fdba9029a93.roa File: ad4d8994-2f38-3c23-8651-2fdba9029a93.roa (raw, json) Hash identifier: cB708seekXHgAZ3GjuH7G6sr4K0ztV11uWy8/5PVLq8= Subject key identifier: 47:37:9E:BF:B9:01:A6:FE:EE:6D:3C:80:F0:88:05:C6:1E:B1:7B:4E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDD7C21D9A6EB10698700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4d8994-2f38-3c23-8651-2fdba9029a93.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397193 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:dd:7c:21:d9:a6:eb:10:69:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=5cc96d53-073a-4eb0-8321-e762d61b29fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:35:cd:5b:8e:6e:dd:42:1c:c0:83:fb:69: a9:ca:ce:23:0b:e9:e8:e9:49:66:50:14:b6:37:d9: e2:79:e6:59:be:74:fd:2e:1e:10:36:ed:f1:71:1b: 2c:98:93:ef:a5:27:7b:ad:ce:eb:2e:e4:3b:cb:1b: 93:3a:09:e3:b6:b3:01:1a:69:53:99:13:4c:98:5d: 3e:18:13:a0:62:cb:cd:f0:df:75:fe:04:18:36:b6: 40:4d:68:1f:d3:9d:37:57:3e:e2:37:9b:50:57:ec: c5:47:ae:45:64:83:01:1c:d4:5c:99:ab:3c:58:dc: 54:f9:6b:0a:51:8c:b4:c1:3b:25:8c:8a:72:d5:40: c6:46:93:c4:75:55:5b:3b:62:a6:f3:66:fb:dc:29: 2d:fe:53:c6:82:7e:00:47:ef:60:14:81:d6:15:d6: 2c:4d:00:6f:e4:7c:39:63:99:99:91:c6:6e:c0:0a: 7a:04:3a:68:a3:b9:7d:cd:d1:f8:a1:b9:94:2f:4e: 69:65:cd:1f:ab:b8:b3:c7:1e:c9:d9:4e:cc:01:3d: 69:75:3f:52:3d:f0:e2:54:0d:79:3e:57:0b:bc:66: 5e:e6:58:35:29:16:c6:e8:aa:6f:ec:9a:63:22:aa: bd:a0:40:3f:e6:0a:bd:d0:66:d1:38:45:d1:9b:33: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:37:9E:BF:B9:01:A6:FE:EE:6D:3C:80:F0:88:05:C6:1E:B1:7B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad4d8994-2f38-3c23-8651-2fdba9029a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:2c:13:5a:2d:00:9e:60:c0:ca:30:0b:2b:38:fa:10:d1:9c: be:bd:ed:7c:b3:5f:7d:94:cf:18:45:d0:0a:20:5c:0f:d1:07: 1c:d0:59:53:bc:73:03:0a:05:81:9a:f0:87:0d:22:73:2f:09: e2:95:94:36:07:74:b3:37:96:53:d5:e0:b7:23:16:15:8a:a9: fd:0c:69:fe:76:fc:96:70:ed:bf:90:15:62:ea:08:86:87:f4: 8a:7a:13:21:78:ea:75:73:bc:b1:70:37:e8:53:44:b4:e2:3e: 82:9f:d8:73:a7:a9:f1:14:93:04:ad:e3:50:de:98:c6:7d:96: ab:26:d2:47:86:8e:8e:d5:77:55:e1:a1:ec:1e:2e:d9:e1:92: 28:0d:23:46:c9:5b:98:97:f2:51:2e:94:de:88:08:e6:c4:67: ed:a8:ec:7f:8d:57:0d:ed:05:5b:78:54:1d:b1:73:ac:73:fa: 1c:68:85:7a:04:76:ac:8d:e2:ec:03:ea:a8:9c:aa:35:18:d2: d8:b6:0c:04:db:03:fc:a1:3f:a0:6d:f6:46:f6:83:1b:84:55: 4b:63:98:ab:d5:32:fd:0b:ce:a9:2e:27:a7:ef:a8:fe:b5:eb: e6:64:d8:46:64:70:72:17:02:19:83:df:15:fa:e4:28:f2:77: a3:fa:18:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vN18Idmm6xBphwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NWNjOTZkNTMtMDczYS00ZWIwLTgzMjEtZTc2MmQ2MWIyOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGE1zVuObt1CHMCD+2mpys4jC+no6UlmUBS2 N9nieeZZvnT9Lh4QNu3xcRssmJPvpSd7rc7rLuQ7yxuTOgnjtrMBGmlTmRNMmF0+ GBOgYsvN8N91/gQYNrZATWgf0503Vz7iN5tQV+zFR65FZIMBHNRcmas8WNxU+WsK UYy0wTsljIpy1UDGRpPEdVVbO2Km82b73Ckt/lPGgn4AR+9gFIHWFdYsTQBv5Hw5 Y5mZkcZuwAp6BDpoo7l9zdH4obmUL05pZc0fq7izxx7J2U7MAT1pdT9SPfDiVA15 PlcLvGZe5lg1KRbG6Kpv7JpjIqq9oEA/5gq90GbROEXRmzMYHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEc3nr+5Aab+7m08gPCIBcYesXtOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQ0ZDg5OTQtMmYzOC0z YzIzLTg2NTEtMmZkYmE5MDI5YTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKQsE1otAJ5gwMowCys4+hDRnL697XyzX32UzxhF0AogXA/RBxzQ WVO8cwMKBYGa8IcNInMvCeKVlDYHdLM3llPV4LcjFhWKqf0Maf52/JZw7b+QFWLq CIaH9Ip6EyF46nVzvLFwN+hTRLTiPoKf2HOnqfEUkwSt41DemMZ9lqsm0keGjo7V d1XhoeweLtnhkigNI0bJW5iX8lEulN6ICObEZ+2o7H+NVw3tBVt4VB2xc6xz+hxo hXoEdqyN4uwD6qicqjUY0ti2DATbA/yhP6Bt9kb2gxuEVUtjmKvVMv0LzqkuJ6fv qP616+Zk2EZkcHIXAhmD3xX65Cjyd6P6GMU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:13 2025 by rpki-client