$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6003ca8-334c-3e22-a382-c2b8de1d25a0.roa File: b6003ca8-334c-3e22-a382-c2b8de1d25a0.roa (raw, json) Hash identifier: zqIKhhcRufarqHOgG3ESYIYJgFZbx+BURlB74Sbf6Yo= Subject key identifier: 2B:5A:8F:4B:00:C1:CC:A6:92:68:9B:54:76:BD:17:71:4D:C0:4C:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD89A997FBC75E9924A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6003ca8-334c-3e22-a382-c2b8de1d25a0.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396545 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d8:9a:99:7f:bc:75:e9:92:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=d1473e3f-0185-4c64-9724-4c27459a8cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:72:e3:a6:d5:29:2c:d7:9b:d6:d3:d4:04: 40:59:d3:d6:67:1e:50:ba:9e:49:f1:ef:66:86:94: 5a:d2:71:48:78:4f:03:63:e2:85:7f:ed:52:50:ca: b3:2e:d9:70:0d:2d:77:ec:d5:68:64:da:56:9c:0a: b2:eb:56:6d:71:4b:4e:0b:44:1e:49:3f:41:50:87: ca:5e:15:ad:0c:4d:d5:34:4f:d7:1c:2b:c5:1a:7d: 95:5e:36:1d:2d:66:4b:55:7d:77:8f:2c:43:de:86: fc:de:4b:7b:05:78:b7:83:78:c7:c4:be:2f:a5:f0: 31:66:19:69:13:91:de:f3:7d:19:92:d8:74:fc:74: 55:a2:9b:cf:3c:bb:03:38:77:9d:ee:5b:49:8e:97: d0:aa:94:92:41:11:9a:e9:98:af:85:ff:94:25:65: dc:6f:f8:eb:b0:c9:35:a3:64:f5:20:68:3f:1f:bd: cc:20:62:81:f5:76:50:12:cc:6d:fb:73:d2:a1:83: 2b:1a:79:1c:24:e9:26:31:16:77:82:cf:b5:06:1d: ad:ad:15:3d:b5:ed:5a:83:d1:10:3f:41:7f:f7:6d: 0e:66:41:4f:e9:42:5c:65:aa:b8:77:bc:b6:ad:ee: c5:df:1c:3f:dc:27:9b:7a:9c:eb:46:a8:0a:e2:ef: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5A:8F:4B:00:C1:CC:A6:92:68:9B:54:76:BD:17:71:4D:C0:4C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6003ca8-334c-3e22-a382-c2b8de1d25a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4d:ee:e5:1b:f3:14:b7:01:fe:4b:57:4d:ff:c1:ea:29:95: 76:84:e2:11:80:23:36:e9:80:cd:21:8c:92:21:9f:e7:3b:46: 8a:c2:0a:13:62:d7:42:45:f4:cb:14:f2:e1:6f:3a:1e:c4:92: d9:fe:9d:bd:13:a7:26:3e:14:7e:57:1e:97:23:9a:1f:c2:18: 6e:79:0d:81:87:84:94:87:70:91:6e:78:a1:99:bb:8f:43:3c: e4:31:d8:6e:11:f3:45:87:ae:5b:ee:dd:96:33:09:4e:bd:0a: 07:50:73:a4:44:ad:2b:6e:4b:29:f1:9a:88:39:5d:7f:30:44: 79:8a:a7:93:cd:f3:c8:c4:ec:20:eb:9c:3f:d1:f5:ba:64:16: 23:9c:82:ce:f1:de:88:34:34:dc:de:e9:01:ef:57:1a:65:cc: 73:d4:1e:8b:e7:db:dc:d8:05:8c:6b:00:73:ff:56:1c:1f:40: 45:e1:5a:29:cf:ad:12:ee:08:b4:76:14:14:1e:e4:24:de:86: 95:f9:d8:8b:79:15:3d:80:69:e5:12:b1:7d:a5:f5:31:69:df: 35:a7:68:1e:d1:bb:1e:26:ba:48:a8:91:ae:9d:2d:b9:a7:9c: 58:18:ff:70:af:45:e3:26:a8:ee:6b:98:f1:e0:3a:51:a8:ed: 7e:43:fa:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNiamX+8demSSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZDE0NzNlM2YtMDE4NS00YzY0LTk3MjQtNGMyNzQ1OWE4Y2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp29y46bVKSzXm9bT1ARAWdPWZx5Qup5J8e9m hpRa0nFIeE8DY+KFf+1SUMqzLtlwDS137NVoZNpWnAqy61ZtcUtOC0QeST9BUIfK XhWtDE3VNE/XHCvFGn2VXjYdLWZLVX13jyxD3ob83kt7BXi3g3jHxL4vpfAxZhlp E5He830Zkth0/HRVopvPPLsDOHed7ltJjpfQqpSSQRGa6Zivhf+UJWXcb/jrsMk1 o2T1IGg/H73MIGKB9XZQEsxt+3PSoYMrGnkcJOkmMRZ3gs+1Bh2trRU9te1ag9EQ P0F/920OZkFP6UJcZaq4d7y2re7F3xw/3CebepzrRqgK4u+MLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCtaj0sAwcymkmibVHa9F3FNwEwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjYwMDNjYTgtMzM0Yy0z ZTIyLWEzODItYzJiOGRlMWQyNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE1N7uUb8xS3Af5LV03/weoplXaE4hGAIzbpgM0hjJIhn+c7RorC ChNi10JF9MsU8uFvOh7Ektn+nb0TpyY+FH5XHpcjmh/CGG55DYGHhJSHcJFueKGZ u49DPOQx2G4R80WHrlvu3ZYzCU69CgdQc6RErStuSynxmog5XX8wRHmKp5PN88jE 7CDrnD/R9bpkFiOcgs7x3og0NNze6QHvVxplzHPUHovn29zYBYxrAHP/VhwfQEXh WinPrRLuCLR2FBQe5CTehpX52It5FT2AaeUSsX2l9TFp3zWnaB7Rux4mukioka6d LbmnnFgY/3CvReMmqO5rmPHgOlGo7X5D+is= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:49 2025 by rpki-client