$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7ad407-4605-3142-85e4-03f3cc2ea893.roa File: 0c7ad407-4605-3142-85e4-03f3cc2ea893.roa (raw, json) Hash identifier: 7THB7uuYBOrIgkOXuBPQ1u30Cm8ZsKmcCZTuYeYZsMc= Subject key identifier: 22:37:58:04:C1:A4:7B:17:E3:8F:00:CB:8A:8F:82:01:7E:B6:2D:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270E13689562EAEAC347980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7ad407-4605-3142-85e4-03f3cc2ea893.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 397207 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:e1:36:89:56:2e:ae:ac:34:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=d19d7705-f15c-40da-bcc9-8561746212dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:61:df:f1:53:fe:1d:d9:7c:b0:fd:11:bf: 44:a3:d6:83:80:35:62:b2:49:7f:15:79:5e:70:d4: 7e:96:6f:4d:0e:6c:79:25:4f:69:78:85:bc:50:a3: 69:e2:a5:56:03:f5:3e:9c:71:56:8c:d4:b3:8e:ec: d0:e0:df:ff:23:20:a2:ed:e8:21:f7:b5:4c:ff:be: ee:ec:c1:d5:91:bb:5b:44:e3:62:1d:ce:85:53:89: 81:08:8d:ea:6e:c7:63:89:08:75:a0:eb:6b:89:28: 68:d2:6f:87:e2:c6:26:f4:0f:3b:2c:76:1d:e3:fc: 3d:62:76:13:e3:51:56:f8:b1:af:6f:11:90:78:06: f3:92:fe:d0:c4:0f:d1:d5:9c:1a:09:91:88:ec:4f: 58:71:ba:ac:6c:32:89:a9:96:6b:11:d8:c9:8c:2c: d1:03:5c:2d:09:cd:3c:64:00:7f:2e:b7:01:62:ac: 8c:07:7a:6e:18:f0:db:6f:66:82:5c:e6:f4:c3:1b: 93:7f:d5:35:b3:f8:6d:ae:b3:f6:72:8d:d3:1e:e3: 30:8b:ef:45:19:e0:4f:c8:e3:9a:f3:d1:64:2e:86: a0:72:eb:91:33:0b:3c:2b:ee:f5:3a:3b:19:c4:a0: 56:f1:20:8e:b6:56:77:2f:a1:1d:2c:70:e8:0a:ed: 1d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:37:58:04:C1:A4:7B:17:E3:8F:00:CB:8A:8F:82:01:7E:B6:2D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c7ad407-4605-3142-85e4-03f3cc2ea893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:4f:e0:9b:d3:ad:99:d8:df:c8:53:9c:24:ed:86:0f:40:fb: 13:7b:9e:6c:49:a8:36:5a:a5:dd:ea:62:23:6b:d9:e5:dd:59: eb:83:76:09:2e:3c:96:c9:7b:dd:32:fe:d5:ab:67:05:e5:08: 7a:7f:64:e6:43:03:73:70:cd:2d:14:d4:66:1c:8b:f6:31:37: 10:0e:ad:4d:e8:19:33:69:0f:88:77:75:9e:06:3c:90:10:59: 40:f1:fe:e4:5f:c1:f5:a0:09:87:d2:bf:27:69:8c:41:98:4d: ef:87:74:5d:68:64:f3:e2:2f:87:b4:3a:18:d2:e6:75:dc:cd: d0:b1:4a:24:06:68:37:02:70:d8:b6:a1:19:95:ca:34:1b:cc: b9:a4:6a:19:bc:37:20:cf:b9:37:ad:b3:ea:17:9e:6e:fa:b1: 48:f0:9a:38:49:48:f6:a4:1f:af:9c:b5:1f:d6:3b:59:6d:e9: e0:bb:ba:38:38:ac:51:ab:08:82:40:44:fb:79:a4:e6:ec:48: 68:d7:42:bc:b0:5a:78:92:62:c6:f8:95:5d:50:d4:6e:6e:b1: 0f:25:30:f1:78:df:4c:87:a9:eb:28:15:14:7f:3b:57:58:83: f3:38:cc:a9:29:da:48:95:a9:bf:8c:b2:bd:9b:6d:b5:e0:87: 4d:9a:e4:83 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcOE2iVYurqw0eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZDE5ZDc3MDUtZjE1Yy00MGRhLWJjYzktODU2MTc0NjIxMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+9h3/FT/h3ZfLD9Eb9Eo9aDgDViskl/FXle cNR+lm9NDmx5JU9peIW8UKNp4qVWA/U+nHFWjNSzjuzQ4N//IyCi7egh97VM/77u 7MHVkbtbRONiHc6FU4mBCI3qbsdjiQh1oOtriSho0m+H4sYm9A87LHYd4/w9YnYT 41FW+LGvbxGQeAbzkv7QxA/R1ZwaCZGI7E9YcbqsbDKJqZZrEdjJjCzRA1wtCc08 ZAB/LrcBYqyMB3puGPDbb2aCXOb0wxuTf9U1s/htrrP2co3THuMwi+9FGeBPyOOa 89FkLoagcuuRMws8K+71OjsZxKBW8SCOtlZ3L6EdLHDoCu0dawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCI3WATBpHsX448Ay4qPggF+ti0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGM3YWQ0MDctNDYwNS0z MTQyLTg1ZTQtMDNmM2NjMmVhODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCpT+Cb062Z2N/IU5wk7YYPQPsTe55sSag2WqXd 6mIja9nl3Vnrg3YJLjyWyXvdMv7Vq2cF5Qh6f2TmQwNzcM0tFNRmHIv2MTcQDq1N 6BkzaQ+Id3WeBjyQEFlA8f7kX8H1oAmH0r8naYxBmE3vh3RdaGTz4i+HtDoY0uZ1 3M3QsUokBmg3AnDYtqEZlco0G8y5pGoZvDcgz7k3rbPqF55u+rFI8Jo4SUj2pB+v nLUf1jtZbengu7o4OKxRqwiCQET7eaTm7Eho10K8sFp4kmLG+JVdUNRubrEPJTDx eN9Mh6nrKBUUfztXWIPzOMypKdpIlam/jLK9m2214IdNmuSD -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:01 2025 by rpki-client