$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cef66cb-fe01-304e-a930-737a32c51560.roa File: 0cef66cb-fe01-304e-a930-737a32c51560.roa (raw, json) Hash identifier: X3W69Tx1l2Tfz9Mn7cfD+mdgRDet5PQ2CUrUd3yhGg4= Subject key identifier: CC:75:26:75:A4:66:DA:C6:38:A3:E6:1A:7C:B2:96:B0:02:C3:81:8C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D46A235FC1B270ECC2980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cef66cb-fe01-304e-a930-737a32c51560.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 397205 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:46:a2:35:fc:1b:27:0e:cc:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=5b36f3ff-a765-4903-b9ee-25412e3f77eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:73:df:b8:bc:06:de:47:81:a8:e1:4a:27: af:cd:0f:71:d9:5e:42:7c:db:95:6b:e0:90:a0:97: b0:b1:a5:a7:81:8d:61:ef:b9:92:e6:41:12:51:1d: c9:07:35:a5:fd:63:60:02:d3:76:69:02:b0:7b:a3: 59:4e:45:09:3f:90:1b:c3:d2:a5:c5:0b:ea:02:64: e2:cf:d6:64:32:2d:93:70:e9:2b:30:49:d3:36:19: 73:f9:cc:06:72:88:ad:8b:39:31:af:64:f8:b8:38: 62:77:b5:ce:fc:ba:3d:12:cd:be:bf:b6:98:17:c6: 92:57:0e:79:6b:a4:2c:bd:f0:a2:41:28:c1:fe:36: 33:c8:c7:6a:11:de:6a:ae:44:d4:df:7e:91:92:3c: a2:a6:e4:db:e1:bc:05:81:4d:b7:73:a3:7d:21:4c: 42:1e:7b:c7:38:13:0e:38:f3:0f:ad:6f:79:c9:0c: 84:ae:5b:c3:36:7c:63:bf:6e:8b:ac:6d:1c:04:74: c2:9c:61:b4:8e:32:ea:6c:36:28:b0:62:6b:35:89: 24:eb:69:eb:ca:0f:c7:1d:a0:99:71:c6:b5:8c:01: e3:42:a7:16:29:fd:05:43:67:9a:91:3a:1a:c1:37: f3:72:6c:1c:83:5a:e2:ea:a9:c6:2b:78:bb:2d:3f: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:75:26:75:A4:66:DA:C6:38:A3:E6:1A:7C:B2:96:B0:02:C3:81:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cef66cb-fe01-304e-a930-737a32c51560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b2:b6:f3:cc:29:86:47:0b:c0:80:fa:dc:8f:93:51:76:47: 4e:e0:8b:db:cb:35:96:4c:9f:eb:5b:cc:46:79:4a:28:f3:fd: 4a:20:4d:63:df:46:ff:92:33:c2:bf:bb:bf:61:c0:8f:c3:1f: 06:31:28:a3:2d:c0:ff:5f:55:30:8a:20:43:30:ba:52:4f:80: f9:c0:59:f2:99:12:9d:df:39:37:98:39:8a:dc:8d:5e:d1:8f: c3:e1:d6:ee:a2:46:78:63:fb:fa:a1:bc:78:a7:a1:34:bc:f1: ff:83:cd:aa:3b:d8:0d:e5:94:64:b3:7f:ee:3c:fd:4a:9e:72: 30:57:e8:47:82:3d:fb:24:d8:51:f3:37:52:2b:4e:a4:f3:1d: e0:cf:3f:48:92:55:a5:d0:f5:b1:33:a1:cb:0b:ba:36:13:47: cd:1a:85:67:f9:55:15:5b:23:c8:97:6b:f0:cb:ed:78:47:8b: 1e:83:82:c4:3b:ec:0f:14:fe:32:bf:0f:2b:98:34:5a:d7:b2: 47:a3:d0:54:97:10:bc:c4:51:44:66:ee:25:f7:62:77:c9:ca: e7:9b:3e:31:1a:4d:95:d2:71:53:dd:63:53:f4:94:77:b7:2a: ea:6a:ef:ec:17:35:ed:37:bb:3e:b4:87:a6:0d:52:ce:8a:a9: 77:4c:75:c3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUaiNfwbJw7MKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NWIzNmYzZmYtYTc2NS00OTAzLWI5ZWUtMjU0MTJlM2Y3N2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Rz37i8Bt5HgajhSievzQ9x2V5CfNuVa+CQ oJewsaWngY1h77mS5kESUR3JBzWl/WNgAtN2aQKwe6NZTkUJP5Abw9KlxQvqAmTi z9ZkMi2TcOkrMEnTNhlz+cwGcoitizkxr2T4uDhid7XO/Lo9Es2+v7aYF8aSVw55 a6QsvfCiQSjB/jYzyMdqEd5qrkTU336RkjyipuTb4bwFgU23c6N9IUxCHnvHOBMO OPMPrW95yQyErlvDNnxjv26LrG0cBHTCnGG0jjLqbDYosGJrNYkk62nryg/HHaCZ cca1jAHjQqcWKf0FQ2eakToawTfzcmwcg1ri6qnGK3i7LT+OqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMx1JnWkZtrGOKPmGnyylrACw4GMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGNlZjY2Y2ItZmUwMS0z MDRlLWE5MzAtNzM3YTMyYzUxNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCXsrbzzCmGRwvAgPrcj5NRdkdO4IvbyzWWTJ/r W8xGeUoo8/1KIE1j30b/kjPCv7u/YcCPwx8GMSijLcD/X1UwiiBDMLpST4D5wFny mRKd3zk3mDmK3I1e0Y/D4dbuokZ4Y/v6obx4p6E0vPH/g82qO9gN5ZRks3/uPP1K nnIwV+hHgj37JNhR8zdSK06k8x3gzz9IklWl0PWxM6HLC7o2E0fNGoVn+VUVWyPI l2vwy+14R4seg4LEO+wPFP4yvw8rmDRa17JHo9BUlxC8xFFEZu4l92J3ycrnmz4x Gk2V0nFT3WNT9JR3tyrqau/sFzXtN7s+tIemDVLOiql3THXD -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:54 2025 by rpki-client