$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def06a2c-71f6-3aa4-b81e-553137073104.roa File: def06a2c-71f6-3aa4-b81e-553137073104.roa (raw, json) Hash identifier: 8Rot3xYY1UKTRFIaBIaGC+RElUMnneHGRfQoSV/J67A= Subject key identifier: 3C:CD:CF:55:FD:29:9E:79:EF:D7:EA:48:FD:6B:B6:A8:7B:B1:7F:63 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5262F71BECCF7AF40D9EB8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def06a2c-71f6-3aa4-b81e-553137073104.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396551 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:62:f7:1b:ec:cf:7a:f4:0d:9e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d3e11723-09f4-4c2f-8cda-40e30819e802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0e:d3:97:6b:5e:a7:07:4b:fa:da:70:0a:be: f7:47:21:46:f9:25:c9:f0:51:11:2d:4b:eb:2d:75: 79:4d:9b:4b:df:91:67:9a:93:56:b1:c5:0a:b5:59: 00:d9:1c:76:28:08:0c:99:c1:87:d3:77:5f:bf:69: bc:4a:8f:9c:7d:7f:b4:1f:52:2c:ce:af:3c:3e:14: 70:80:f0:13:09:06:92:0f:e9:64:03:49:97:c0:a1: a8:44:9e:78:1f:42:85:c2:21:45:ae:ae:a9:f4:2f: a9:78:2d:81:6c:61:b3:d2:ed:c9:d1:3f:7c:59:77: 25:c0:c9:34:9c:c8:c8:04:e9:59:72:af:3b:cf:bc: e4:d5:4c:7a:c2:07:30:fb:3d:68:81:f7:de:8e:84: 5c:90:fb:85:16:ac:09:5d:05:38:37:88:62:e7:f5: 7a:06:6f:75:e3:45:8f:91:7a:6b:eb:1c:fd:78:af: c4:fc:85:0b:af:86:2e:b4:6f:44:7d:01:45:9b:a2: 91:c4:a1:fa:ef:15:ee:47:5e:84:2e:48:49:35:d3: 3a:2b:2b:1b:9b:8e:d3:26:4e:f3:68:86:a0:17:11: d5:95:af:86:11:a1:7f:50:30:69:6a:94:b6:43:39: 35:a1:15:7b:6e:9b:a5:01:ae:63:4c:28:78:ae:8d: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CD:CF:55:FD:29:9E:79:EF:D7:EA:48:FD:6B:B6:A8:7B:B1:7F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def06a2c-71f6-3aa4-b81e-553137073104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:bd:3c:94:55:bf:ad:ed:24:ca:2f:1b:21:bc:7d:27:80:8b: 11:47:d9:0c:eb:cc:d0:41:cf:cd:0f:a4:a2:bc:a5:ca:eb:e9: 17:12:82:23:5c:36:1f:be:46:36:16:1d:c5:8a:ee:5b:50:f7: 21:8f:37:ab:3f:eb:c5:12:6f:02:d4:71:92:96:bc:07:3c:da: d4:e1:48:07:be:21:85:cf:e6:a4:6a:71:c3:6b:88:a6:06:49: 40:21:b4:6b:da:79:c7:7f:de:57:1b:96:d0:a7:2d:f1:22:7e: 52:ba:75:15:ff:cd:41:1f:2d:3d:f8:92:08:ca:29:4c:90:42: dd:eb:5c:ee:ae:3b:30:f7:c9:51:ba:74:46:83:9c:34:ab:a3: 7f:96:6e:c8:3c:d7:08:91:5d:d0:9a:00:a3:1b:a7:a3:0d:b6: 3b:2d:71:0c:cb:bc:70:f3:34:7f:21:5c:64:aa:f1:96:a3:46: 26:32:84:1b:f4:4d:01:fa:10:15:41:7e:37:58:25:9f:6c:5d: 8f:90:a7:01:98:02:2d:28:39:41:0e:89:0a:74:f8:d8:56:bb: ad:50:f3:7e:62:a5:ea:70:c8:57:a9:b9:0a:79:0a:24:07:8c: 7d:bb:b4:c2:c3:f0:a3:41:1d:d5:87:a4:1b:37:32:9b:0d:74: f5:2c:ff:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UmL3G+zPevQNnrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDNlMTE3MjMtMDlmNC00YzJmLThjZGEtNDBlMzA4MTllODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g7Tl2tepwdL+tpwCr73RyFG+SXJ8FERLUvr LXV5TZtL35FnmpNWscUKtVkA2Rx2KAgMmcGH03dfv2m8So+cfX+0H1Iszq88PhRw gPATCQaSD+lkA0mXwKGoRJ54H0KFwiFFrq6p9C+peC2BbGGz0u3J0T98WXclwMk0 nMjIBOlZcq87z7zk1Ux6wgcw+z1ogffejoRckPuFFqwJXQU4N4hi5/V6Bm9140WP kXpr6xz9eK/E/IULr4YutG9EfQFFm6KRxKH67xXuR16ELkhJNdM6Kysbm47TJk7z aIagFxHVla+GEaF/UDBpapS2Qzk1oRV7bpulAa5jTCh4ro0kCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzNz1X9KZ5579fqSP1rtqh7sX9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVmMDZhMmMtNzFmNi0z YWE0LWI4MWUtNTUzMTM3MDczMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL29PJRVv63tJMovGyG8fSeAixFH2QzrzNBBz80PpKK8pcrr6RcS giNcNh++RjYWHcWK7ltQ9yGPN6s/68USbwLUcZKWvAc82tThSAe+IYXP5qRqccNr iKYGSUAhtGvaecd/3lcbltCnLfEiflK6dRX/zUEfLT34kgjKKUyQQt3rXO6uOzD3 yVG6dEaDnDSro3+Wbsg81wiRXdCaAKMbp6MNtjstcQzLvHDzNH8hXGSq8ZajRiYy hBv0TQH6EBVBfjdYJZ9sXY+QpwGYAi0oOUEOiQp0+NhWu61Q835ipepwyFepuQp5 CiQHjH27tMLD8KNBHdWHpBs3MpsNdPUs/+g= -----END CERTIFICATE-----Generated at Mon Oct 20 03:27:29 2025 by rpki-client