$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa File: ddc02893-df28-3f75-97c1-785b64e1dafd.roa (raw, json) Hash identifier: OH/lGJ9VRiz2FqXSZ7rUseZxCknk63lx0FDh6A9YuNI= Subject key identifier: 03:4A:A4:4A:E7:05:1A:84:7E:E6:82:E2:99:BD:38:C0:8F:A9:17:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD444619039B665CA1080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 27544 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d4:44:61:90:39:b6:65:ca:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=02cefa1a-c119-4c3d-8fbd-360f61249e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a0:4c:85:d0:95:e9:f8:36:d9:16:75:6f:a2: 5a:43:96:4e:89:29:29:9f:e0:83:46:1b:a0:08:7e: 0e:f3:a4:13:bb:93:40:fc:b1:8e:83:8e:f7:7e:0f: ad:ff:37:35:38:28:8c:d0:03:cd:0a:49:c6:b1:93: 85:7f:8f:ba:5b:d4:10:0a:d8:37:92:5e:ed:85:b9: c6:aa:b8:40:c4:86:9e:18:93:36:5f:b9:64:98:25: f7:60:6c:f4:c0:e3:c7:df:91:4b:be:c1:ea:0d:95: 25:1f:d9:95:99:75:31:31:75:20:81:98:b4:44:af: 6b:42:08:87:a2:b2:29:7a:d7:ac:85:16:92:32:77: f7:53:85:f3:c6:75:54:f3:7a:d6:70:60:c8:34:10: a1:46:72:3a:5d:34:da:fa:5e:19:cc:76:23:f1:e8: ee:0a:cf:cf:cd:13:f1:ed:66:c4:27:88:99:0b:98: 89:ab:5b:1c:09:de:2f:39:f0:2b:8f:5f:65:06:09: 6b:38:74:20:2c:4d:09:d2:4d:36:f1:b1:fc:d1:42: 2f:cd:95:a8:82:be:31:fb:9d:96:5b:e8:3f:93:a2: 51:d0:20:bb:33:fe:8c:7f:40:31:59:6c:40:a5:68: c7:54:ab:6f:3d:89:07:63:d8:f0:1f:3b:9c:3f:27: a5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4A:A4:4A:E7:05:1A:84:7E:E6:82:E2:99:BD:38:C0:8F:A9:17:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:14:14:24:cf:7c:70:73:82:1f:47:02:95:67:f7:c8:75:ce: 3a:01:37:fd:f7:a8:5f:10:5e:f3:fb:71:61:90:08:5f:89:16: 5a:c5:d5:6e:9b:03:b4:dd:32:cd:65:af:91:58:c8:1d:26:fc: b6:cc:8d:69:0b:15:94:5c:6c:86:b1:2d:a0:c5:a0:e0:83:ed: be:b8:ab:fd:ac:df:a8:31:02:11:cd:fd:c1:25:d3:52:f9:2d: bb:6c:4d:5f:4c:04:28:9a:50:a0:a2:8a:63:a1:cb:5d:d0:4f: 6c:3e:5c:b0:46:38:91:8e:78:a9:d7:12:07:d1:6b:27:2e:22: f7:6d:15:a6:e4:50:a0:e4:6f:74:50:eb:3c:b1:a3:e6:79:94: 27:a3:10:57:bd:e9:6e:01:2e:a3:3c:4b:92:6d:42:03:9a:dd: 55:d4:86:ac:b3:98:03:7a:00:4c:62:6b:96:ae:df:83:6a:c2: 33:b5:00:e2:65:66:94:37:4c:a0:e3:40:26:5f:e5:d9:36:fa: 6f:39:58:ed:db:50:4e:d5:ba:0f:8f:9a:74:8e:d0:0e:66:91: 10:36:8a:23:1c:04:2d:7c:e6:e9:2a:41:69:86:e2:8d:d5:66: e2:55:20:54:18:0d:1e:75:62:52:79:7a:07:28:04:ad:43:3d: 34:44:cd:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNREYZA5tmXKEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MDJjZWZhMWEtYzExOS00YzNkLThmYmQtMzYwZjYxMjQ5ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKBMhdCV6fg22RZ1b6JaQ5ZOiSkpn+CDRhug CH4O86QTu5NA/LGOg473fg+t/zc1OCiM0APNCknGsZOFf4+6W9QQCtg3kl7thbnG qrhAxIaeGJM2X7lkmCX3YGz0wOPH35FLvsHqDZUlH9mVmXUxMXUggZi0RK9rQgiH orIpeteshRaSMnf3U4XzxnVU83rWcGDINBChRnI6XTTa+l4ZzHYj8ejuCs/PzRPx 7WbEJ4iZC5iJq1scCd4vOfArj19lBglrOHQgLE0J0k028bH80UIvzZWogr4x+52W W+g/k6JR0CC7M/6Mf0AxWWxApWjHVKtvPYkHY9jwHzucPyelQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFANKpErnBRqEfuaC4pm9OMCPqRc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRjMDI4OTMtZGYyOC0z Zjc1LTk3YzEtNzg1YjY0ZTFkYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALQUFCTPfHBzgh9HApVn98h1zjoBN/33qF8QXvP7cWGQCF+JFlrF 1W6bA7TdMs1lr5FYyB0m/LbMjWkLFZRcbIaxLaDFoOCD7b64q/2s36gxAhHN/cEl 01L5LbtsTV9MBCiaUKCiimOhy13QT2w+XLBGOJGOeKnXEgfRaycuIvdtFabkUKDk b3RQ6zyxo+Z5lCejEFe96W4BLqM8S5JtQgOa3VXUhqyzmAN6AExia5au34NqwjO1 AOJlZpQ3TKDjQCZf5dk2+m85WO3bUE7Vug+PmnSO0A5mkRA2iiMcBC185ukqQWmG 4o3VZuJVIFQYDR51YlJ5egcoBK1DPTREzXQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:39 2025 by rpki-client