$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/195ed2cb-cdf9-3261-8eba-a1b479f9fb33.roa File: 195ed2cb-cdf9-3261-8eba-a1b479f9fb33.roa (raw, json) Hash identifier: rc+55BeZ1WP7NEIXOzKtpJnC4vwIlc6h+uMrpQxQRFE= Subject key identifier: 70:56:B4:34:E0:02:47:C1:E0:E4:BC:07:86:6F:7E:E7:79:51:9E:30 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D49049A7A9D9A0558B880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/195ed2cb-cdf9-3261-8eba-a1b479f9fb33.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 36629 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:49:04:9a:7a:9d:9a:05:58:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=cafe36bf-a9ab-4d11-84fb-3b138d1f9e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:18:11:33:4d:04:3b:95:1f:2c:0d:8d:d5:28: a5:34:f9:c6:2e:bf:31:9f:59:95:0b:51:74:c1:33: d4:5d:a6:08:bb:5b:2c:e6:60:c3:2f:f7:f9:36:7f: ce:cb:22:23:91:b8:56:63:3d:4e:82:ab:1f:42:5b: 96:c5:fe:6c:94:29:19:f9:a1:c3:3f:2d:51:0d:ba: f4:4f:32:41:f0:09:56:17:37:65:66:79:f6:cc:e7: 6b:aa:d9:90:cf:2e:f6:d4:85:5c:54:25:54:d4:d1: 47:3c:b0:82:47:69:ab:75:8a:d0:18:c8:55:e3:57: ea:ff:5a:21:1b:ce:e5:19:b8:72:bd:ba:61:88:ed: 85:15:ac:40:41:51:81:bc:05:88:2c:ef:8d:3c:1e: df:c1:57:0e:0f:44:0e:15:9e:03:c1:d6:35:8b:6f: d3:4b:73:c8:39:38:8a:cc:a9:d3:78:33:6f:d7:cf: 50:c6:b1:f9:9c:a2:07:e5:ab:5e:9e:1e:f5:36:20: dd:f1:bd:6b:57:74:17:14:f7:a9:42:7d:64:7c:90: d1:4c:a5:0c:0c:84:a2:a3:c3:0b:3f:1a:9d:88:86: 0f:fe:c8:36:8a:06:54:93:f7:e0:da:77:4f:05:ee: d6:8c:44:13:4d:2b:db:1e:ae:84:1d:a9:1b:43:13: f1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:56:B4:34:E0:02:47:C1:E0:E4:BC:07:86:6F:7E:E7:79:51:9E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/195ed2cb-cdf9-3261-8eba-a1b479f9fb33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fe:a6:eb:e6:2a:ac:9e:00:fc:a3:c3:5a:42:f9:a7:58:79: 37:55:bb:8e:ac:93:b0:0d:9c:47:aa:3b:6f:a7:4f:45:f6:c2: 1b:dc:72:ed:d1:98:83:b0:25:4e:5f:e8:68:cc:b0:bf:7f:e0: c4:9a:c6:48:fd:94:d8:52:1f:86:0f:36:6b:48:b4:61:a4:79: 32:86:e7:2f:cc:42:ea:53:d1:71:ba:10:b7:f4:79:29:21:1d: 96:27:4c:74:b6:e0:0e:6f:dd:7e:6c:0f:a3:a4:db:12:fc:48: 5f:19:d2:9d:59:f0:53:68:0f:b0:00:f4:81:4d:6c:75:31:c8: bb:15:9e:1a:e3:df:fd:bb:7b:80:67:27:5e:9d:f6:44:62:ff: ba:fc:eb:d7:f0:66:50:09:c8:92:b2:70:e6:ce:15:43:c7:b6: 3c:42:94:c6:c4:ac:8d:c9:91:e4:d9:26:24:83:2a:76:6a:53: 11:1e:b1:ef:bd:b9:b6:42:7b:80:b1:6e:51:bc:b5:2c:a6:71: d9:5e:7a:75:c6:66:6c:55:5c:8a:8b:92:fe:d9:8e:70:36:7d: fc:74:61:26:a7:77:5d:44:7c:64:49:09:87:51:e9:d1:e1:c1: a3:a7:2b:e8:aa:37:a2:0c:93:46:8a:21:bc:d2:c5:ea:53:5d: a5:60:fc:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUkEmnqdmgVYuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2FmZTM2YmYtYTlhYi00ZDExLTg0ZmItM2IxMzhkMWY5ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RgRM00EO5UfLA2N1SilNPnGLr8xn1mVC1F0 wTPUXaYIu1ss5mDDL/f5Nn/OyyIjkbhWYz1OgqsfQluWxf5slCkZ+aHDPy1RDbr0 TzJB8AlWFzdlZnn2zOdrqtmQzy721IVcVCVU1NFHPLCCR2mrdYrQGMhV41fq/1oh G87lGbhyvbphiO2FFaxAQVGBvAWILO+NPB7fwVcOD0QOFZ4DwdY1i2/TS3PIOTiK zKnTeDNv189QxrH5nKIH5atenh71NiDd8b1rV3QXFPepQn1kfJDRTKUMDISio8ML PxqdiIYP/sg2igZUk/fg2ndPBe7WjEQTTSvbHq6EHakbQxPxcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHBWtDTgAkfB4OS8B4Zvfud5UZ4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTk1ZWQyY2ItY2RmOS0z MjYxLThlYmEtYTFiNDc5ZjlmYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8/qbr5iqsngD8o8NaQvmnWHk3VbuOrJOwDZxH qjtvp09F9sIb3HLt0ZiDsCVOX+hozLC/f+DEmsZI/ZTYUh+GDzZrSLRhpHkyhucv zELqU9FxuhC39HkpIR2WJ0x0tuAOb91+bA+jpNsS/EhfGdKdWfBTaA+wAPSBTWx1 Mci7FZ4a49/9u3uAZydenfZEYv+6/OvX8GZQCciSsnDmzhVDx7Y8QpTGxKyNyZHk 2SYkgyp2alMRHrHvvbm2QnuAsW5RvLUspnHZXnp1xmZsVVyKi5L+2Y5wNn38dGEm p3ddRHxkSQmHUenR4cGjpyvoqjeiDJNGiiG80sXqU12lYPxm -----END CERTIFICATE-----Generated at Wed Nov 5 06:10:33 2025 by rpki-client