$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb6990b-f055-3be2-949b-f6055130bc1f.roa File: bfb6990b-f055-3be2-949b-f6055130bc1f.roa (raw, json) Hash identifier: YrpBd0gHl+08cjoPGoZTQ3EH+Kjh3YNUOfW3ZfcGDLw= Subject key identifier: C5:25:1E:9F:A0:37:48:EA:68:CD:1D:BB:A9:0A:58:AE:98:54:08:D2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526489660DAA9933D71A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb6990b-f055-3be2-949b-f6055130bc1f.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396540 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:64:89:66:0d:aa:99:33:d7:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=e5a05c61-ea7d-4d52-b755-4f74a964c2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:20:73:49:2e:c1:fc:c5:1a:2a:7d:03:de: cf:ba:f7:e7:c8:4c:e1:ce:89:f2:2a:fa:3e:98:0e: e6:3f:14:0e:bb:9e:04:26:37:f4:49:2c:52:c4:af: c1:74:75:af:e5:04:34:ce:58:8d:10:3c:50:e1:c9: 53:98:68:15:31:0e:40:72:6c:02:1b:b3:73:3c:76: 2b:5e:9f:ec:9b:85:08:50:9b:cf:54:98:65:9c:95: 78:27:20:8a:27:fa:07:d4:1e:80:8d:fe:8d:43:68: d3:fa:19:5e:ac:ec:c6:a1:59:78:23:f5:87:10:2c: 17:e9:b4:e1:87:63:38:1b:47:aa:43:44:9d:29:3d: 3b:a8:ef:32:17:0c:58:f4:7b:b3:47:81:7a:62:6c: 98:be:99:fb:bd:b3:79:f4:7f:9a:f7:43:82:9b:17: 68:d2:fc:fa:7d:8c:10:bb:c0:47:8f:1d:b2:2a:71: 33:fd:bf:53:39:37:7f:9c:b5:ef:a6:67:df:9e:ab: c7:fa:83:a2:8e:eb:ad:a7:cb:51:14:d6:7c:c7:c2: 94:09:ff:15:d8:85:46:59:70:5f:e7:d0:e4:78:cc: 5c:5a:b8:31:37:ec:54:f1:35:32:f7:b5:39:75:0f: 1a:4f:ab:31:b8:bd:97:56:8c:43:ec:0b:70:f1:ab: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:25:1E:9F:A0:37:48:EA:68:CD:1D:BB:A9:0A:58:AE:98:54:08:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb6990b-f055-3be2-949b-f6055130bc1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:bf:f3:1c:2f:e1:10:53:28:0e:13:af:20:85:6f:ab:5b:18: 09:8a:8b:0c:6d:d0:6f:9a:ea:b6:7c:57:25:68:d7:68:de:41: 30:d4:a8:ea:37:39:c3:09:9e:9c:ba:03:c9:0b:b0:35:56:68: 08:58:e3:e6:09:39:76:1c:5f:99:f5:ab:24:67:28:e3:c3:9e: de:5e:e5:30:27:6e:0c:8c:b2:ca:f1:ff:19:60:83:ae:9c:c3: 93:82:65:b0:46:ea:12:e1:c9:91:5d:36:37:44:b4:61:1a:e4: a5:13:bb:f3:ca:d7:07:bb:c3:5b:72:58:05:97:f3:2e:18:88: 21:64:ab:e6:17:c7:3d:9c:94:db:75:0f:71:a6:77:5c:33:b6: 29:58:8c:e2:46:e4:dc:d2:e1:c4:e8:14:46:9f:e8:86:49:d7: d0:dd:be:31:eb:da:ab:dc:b6:e7:e9:c8:b4:ee:0d:83:67:07: 87:f9:81:a4:f2:b5:7d:ea:82:22:ae:d6:58:13:77:77:4e:5e: 51:0f:f6:b8:9f:05:57:ff:fa:e2:23:96:60:1d:92:ae:d7:7a: 7a:54:95:c2:92:a5:6b:89:0a:0c:6c:92:a0:88:b6:bb:99:f5: d7:7b:49:00:b8:09:6e:6a:0a:9c:e8:00:90:15:f2:77:c6:32: 6c:c9:44:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UmSJZg2qmTPXGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZTVhMDVjNjEtZWE3ZC00ZDUyLWI3NTUtNGY3NGE5NjRjMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yIgc0kuwfzFGip9A97PuvfnyEzhzonyKvo+ mA7mPxQOu54EJjf0SSxSxK/BdHWv5QQ0zliNEDxQ4clTmGgVMQ5AcmwCG7NzPHYr Xp/sm4UIUJvPVJhlnJV4JyCKJ/oH1B6Ajf6NQ2jT+hlerOzGoVl4I/WHECwX6bTh h2M4G0eqQ0SdKT07qO8yFwxY9HuzR4F6YmyYvpn7vbN59H+a90OCmxdo0vz6fYwQ u8BHjx2yKnEz/b9TOTd/nLXvpmffnqvH+oOijuutp8tRFNZ8x8KUCf8V2IVGWXBf 59DkeMxcWrgxN+xU8TUy97U5dQ8aT6sxuL2XVoxD7Atw8avVlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUlHp+gN0jqaM0du6kKWK6YVAjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZiNjk5MGItZjA1NS0z YmUyLTk0OWItZjYwNTUxMzBiYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2/8xwv4RBTKA4TryCFb6tbGAmKiwxt0G+a6rZ8VyVo12jeQTDU qOo3OcMJnpy6A8kLsDVWaAhY4+YJOXYcX5n1qyRnKOPDnt5e5TAnbgyMssrx/xlg g66cw5OCZbBG6hLhyZFdNjdEtGEa5KUTu/PK1we7w1tyWAWX8y4YiCFkq+YXxz2c lNt1D3Gmd1wztilYjOJG5NzS4cToFEaf6IZJ19DdvjHr2qvctufpyLTuDYNnB4f5 gaTytX3qgiKu1lgTd3dOXlEP9rifBVf/+uIjlmAdkq7XenpUlcKSpWuJCgxskqCI truZ9dd7SQC4CW5qCpzoAJAV8nfGMmzJRDs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:06 2025 by rpki-client