$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cef12c97-dc29-36fb-b536-0e5f4261604d.roa File: cef12c97-dc29-36fb-b536-0e5f4261604d.roa (raw, json) Hash identifier: 8rw4xvXF2hKvKASXeSY5A8hd7dtIAuLLrsmnSAWd2CU= Subject key identifier: 3F:02:F2:AD:B1:9F:46:E3:D1:32:16:F0:00:4C:8A:B8:0A:59:8B:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52687B51CBE15638F78380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cef12c97-dc29-36fb-b536-0e5f4261604d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36622 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:68:7b:51:cb:e1:56:38:f7:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1445df59-4672-4b62-8ba3-fcdc08ef680c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:03:90:89:64:e2:b9:f6:29:38:e1:d8:06:8d: 60:f0:00:3f:32:f8:eb:ae:f7:50:f2:7e:7f:6f:f2: 38:f2:5d:8a:7e:1f:ed:f4:db:2c:6f:75:72:46:7f: c0:2a:c5:72:b2:e1:e3:51:6c:bd:c5:ea:32:f0:5c: fe:cd:86:bd:e6:82:57:0f:19:3b:93:f5:4d:2d:00: 7f:a5:17:f6:75:24:8d:be:e1:0e:d2:2c:59:41:62: 86:af:56:90:dd:34:23:68:2b:c0:82:7c:8b:17:77: 3e:ef:69:8c:55:51:96:20:97:ad:27:9c:57:2b:b6: b4:de:03:e4:c0:f5:b0:b0:d4:0e:ba:bb:21:20:71: fc:6d:4d:bc:b9:23:2e:d8:7f:58:2f:05:aa:fe:bd: 07:0d:3c:2b:92:77:36:5f:0d:1b:90:7c:9c:fd:51: 05:72:c6:1e:49:b8:f3:20:d6:62:eb:90:d8:f9:1d: 64:bd:d5:a7:7c:01:99:b3:29:09:0a:4a:09:57:bc: 87:91:b2:ee:0c:c9:39:d6:bd:a1:21:41:54:a8:d4: b2:dd:12:7e:5e:38:a6:ef:80:16:c2:73:5f:1b:ef: fd:68:49:9b:ff:74:af:fe:1b:14:bf:e1:b3:8a:1e: fb:f1:29:b2:30:e5:1b:44:ac:b1:e8:f1:0f:42:10: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:02:F2:AD:B1:9F:46:E3:D1:32:16:F0:00:4C:8A:B8:0A:59:8B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cef12c97-dc29-36fb-b536-0e5f4261604d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2f:d4:ee:7d:b1:c4:df:ac:e3:3f:a7:d4:4c:11:f6:33:d0: 11:23:47:96:50:df:4e:47:e1:2c:0b:47:25:c1:8a:56:d5:36: 15:76:7b:de:6c:e1:81:f5:73:ac:cb:3f:63:79:90:34:4a:d5: 4b:ab:31:ac:9a:57:b3:36:d6:77:a1:ea:73:ee:76:78:6e:9d: c2:89:eb:00:24:f5:2a:e5:67:a0:e4:cb:96:a3:2b:48:29:0f: fc:23:fb:bb:28:7d:93:f7:b4:ac:dc:5f:5d:d3:47:67:ec:11: 71:0a:d2:53:39:cd:5c:ab:8f:e4:7b:3d:de:07:f6:04:e9:e9: 23:b0:63:83:6c:74:88:13:00:ac:54:52:e6:ca:0b:2d:37:30: 13:19:15:ee:74:1a:ec:b6:ca:0f:5e:fb:71:5c:bc:3d:b2:39: 0e:2d:66:c7:62:b0:4d:ce:89:02:ba:35:14:aa:11:3e:d0:86: e3:27:a8:96:ee:c4:61:37:4c:84:02:f2:70:f5:97:34:f2:f3: ac:1e:73:6c:f2:93:f3:7a:69:d9:17:ad:38:98:c0:ae:44:17: 1d:fe:32:ca:31:f4:53:be:27:c0:14:c2:2e:cd:89:37:4e:e1: 11:8f:67:74:43:2c:9e:32:1d:56:1f:5c:f5:5f:fa:cf:6c:56: 64:f7:95:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Umh7UcvhVjj3g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTQ0NWRmNTktNDY3Mi00YjYyLThiYTMtZmNkYzA4ZWY2ODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwOQiWTiufYpOOHYBo1g8AA/MvjrrvdQ8n5/ b/I48l2Kfh/t9Nssb3VyRn/AKsVysuHjUWy9xeoy8Fz+zYa95oJXDxk7k/VNLQB/ pRf2dSSNvuEO0ixZQWKGr1aQ3TQjaCvAgnyLF3c+72mMVVGWIJetJ5xXK7a03gPk wPWwsNQOurshIHH8bU28uSMu2H9YLwWq/r0HDTwrknc2Xw0bkHyc/VEFcsYeSbjz INZi65DY+R1kvdWnfAGZsykJCkoJV7yHkbLuDMk51r2hIUFUqNSy3RJ+Xjim74AW wnNfG+/9aEmb/3Sv/hsUv+Gzih778SmyMOUbRKyx6PEPQhBqgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8C8q2xn0bj0TIW8ABMirgKWYtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2VmMTJjOTctZGMyOS0z NmZiLWI1MzYtMGU1ZjQyNjE2MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIYv1O59scTfrOM/p9RMEfYz0BEjR5ZQ305H4SwLRyXBilbVNhV2 e95s4YH1c6zLP2N5kDRK1UurMayaV7M21neh6nPudnhuncKJ6wAk9SrlZ6Dky5aj K0gpD/wj+7sofZP3tKzcX13TR2fsEXEK0lM5zVyrj+R7Pd4H9gTp6SOwY4NsdIgT AKxUUubKCy03MBMZFe50Guy2yg9e+3FcvD2yOQ4tZsdisE3OiQK6NRSqET7QhuMn qJbuxGE3TIQC8nD1lzTy86wec2zyk/N6adkXrTiYwK5EFx3+Msox9FO+J8AUwi7N iTdO4RGPZ3RDLJ4yHVYfXPVf+s9sVmT3lcQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:26 2025 by rpki-client