$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e574e91c-0139-3208-ae77-fcab11d8460b.roa File: e574e91c-0139-3208-ae77-fcab11d8460b.roa (raw, json) Hash identifier: pw0KGtZqcfnSU9BMcwdmaRGA5jqx7cml7eaBexG2zUc= Subject key identifier: 71:E0:78:B3:1A:EA:47:7E:4D:EB:6A:A8:A6:1D:BD:F9:A6:E0:46:D0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5276FCB9A8469FAB16C980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e574e91c-0139-3208-ae77-fcab11d8460b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397201 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:76:fc:b9:a8:46:9f:ab:16:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a7bf052c-faaf-4c68-964e-de3e85359c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e6:df:b7:ec:58:33:28:d4:cd:f3:b9:5c:0c: 1d:2f:91:9f:b2:6c:b4:45:a5:d8:3f:f5:63:bb:5d: 4a:55:2a:94:f0:7a:b7:08:a2:69:e4:14:98:89:07: 6c:f2:c3:11:87:25:f0:24:30:8b:6c:b7:97:c2:59: 39:f0:f4:19:e4:27:a3:2c:8a:c4:26:92:d5:7e:af: cb:21:b0:92:ec:5a:1c:d3:19:08:f5:47:28:bc:25: 7f:38:66:d4:6a:ee:a2:e4:05:24:33:71:42:17:83: 4e:72:55:ea:f4:6e:5a:94:60:73:e2:c2:0c:dd:87: 1a:17:23:fd:59:bd:67:e3:68:e2:4e:90:48:37:e7: 4d:77:c5:22:5e:09:08:97:4f:1a:08:fc:6c:84:fa: ed:d8:f3:f4:f3:bf:44:08:1e:84:75:f7:7e:4b:a6: bf:4c:01:e0:e7:8e:b2:c1:e0:c9:71:a2:10:e2:32: 1c:4b:b7:21:3c:7a:8c:92:5e:85:f3:97:2b:5b:73: 1c:81:ae:36:e2:45:0b:3a:68:a7:5c:84:20:6a:e2: cd:01:b5:b8:fe:9b:ed:d4:db:80:9d:af:ff:13:bb: 5d:93:d5:e5:35:50:f2:28:9b:27:6c:ad:68:ce:39: 07:75:99:b3:cf:c1:ae:d6:c3:c6:ef:20:c3:ee:e3: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E0:78:B3:1A:EA:47:7E:4D:EB:6A:A8:A6:1D:BD:F9:A6:E0:46:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e574e91c-0139-3208-ae77-fcab11d8460b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a2:48:3a:b4:06:77:66:19:6e:db:ec:93:6a:0e:8f:5c:5e: 91:34:47:90:16:89:fd:fd:87:54:04:e5:db:db:02:f9:4a:9d: 89:ac:44:e1:97:39:2e:0e:0f:61:a3:3f:ec:88:d3:9a:15:43: 72:70:2b:ad:58:4f:0e:8d:17:30:90:dd:1a:78:41:de:04:1f: 96:67:cd:e7:e7:6c:68:25:77:06:a5:e4:1e:e6:db:4f:ec:44: 3b:d6:bc:8d:56:7c:cc:de:a8:b1:28:e8:79:9b:9f:d3:d0:c8: b8:80:ad:86:cf:86:23:f4:7f:cd:d5:83:81:61:50:c5:02:99: 72:a5:eb:58:b9:d5:d0:fa:be:47:80:ff:2d:f8:43:b2:b3:8b: 03:f3:7e:f3:d1:72:90:ef:bf:a3:73:8e:f1:07:2f:60:24:9a: 4f:80:e2:57:35:48:5b:75:8c:18:c8:cf:48:d2:74:f7:01:f1: a4:e8:1f:90:68:7c:8a:db:e3:12:6f:70:54:5e:73:7d:75:28: 1e:03:45:28:90:03:d1:d1:b4:c6:51:d5:9a:aa:b1:c5:d4:9d: c4:1a:27:04:2a:38:68:a4:46:b0:dd:ee:1f:3d:e9:07:92:51: bd:c9:9d:cd:57:a6:49:84:3a:05:80:ff:84:16:ea:3e:dd:dd: c0:3f:c8:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Unb8uahGn6sWyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTdiZjA1MmMtZmFhZi00YzY4LTk2NGUtZGUzZTg1MzU5YzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiubft+xYMyjUzfO5XAwdL5Gfsmy0RaXYP/Vj u11KVSqU8Hq3CKJp5BSYiQds8sMRhyXwJDCLbLeXwlk58PQZ5CejLIrEJpLVfq/L IbCS7Foc0xkI9UcovCV/OGbUau6i5AUkM3FCF4NOclXq9G5alGBz4sIM3YcaFyP9 Wb1n42jiTpBIN+dNd8UiXgkIl08aCPxshPrt2PP0879ECB6Edfd+S6a/TAHg546y weDJcaIQ4jIcS7chPHqMkl6F85crW3Mcga424kULOminXIQgauLNAbW4/pvt1NuA na//E7tdk9XlNVDyKJsnbK1ozjkHdZmzz8Gu1sPG7yDD7uOb5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHHgeLMa6kd+TetqqKYdvfmm4EbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTU3NGU5MWMtMDEzOS0z MjA4LWFlNzctZmNhYjExZDg0NjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK+iSDq0BndmGW7b7JNqDo9cXpE0R5AWif39h1QE5dvbAvlKnYms ROGXOS4OD2GjP+yI05oVQ3JwK61YTw6NFzCQ3Rp4Qd4EH5ZnzefnbGgldwal5B7m 20/sRDvWvI1WfMzeqLEo6Hmbn9PQyLiArYbPhiP0f83Vg4FhUMUCmXKl61i51dD6 vkeA/y34Q7KziwPzfvPRcpDvv6NzjvEHL2Akmk+A4lc1SFt1jBjIz0jSdPcB8aTo H5BofIrb4xJvcFRec311KB4DRSiQA9HRtMZR1ZqqscXUncQaJwQqOGikRrDd7h89 6QeSUb3Jnc1XpkmEOgWA/4QW6j7d3cA/yDs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:33:04 2025 by rpki-client