$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa File: 3008bdb1-9f79-34fc-88d6-2982a3603d83.roa (raw, json) Hash identifier: oz32Sk3Q75h/+gbzD7YpPa3N7fL/TMePVBfnnpsgTEA= Subject key identifier: D6:AB:35:E1:DC:30:6D:53:F5:E3:69:4D:C5:65:F4:A0:23:5A:AF:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270AB7DF225E63F72569140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 397205 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:ab:7d:f2:25:e6:3f:72:56:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=8eadf442-e62c-4abe-9fc8-e39a2ac7c35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ee:cb:a8:99:cd:74:60:1b:b7:71:26:df:f6: 72:de:db:6f:8e:34:29:53:f6:78:44:c9:de:1f:98: 85:a5:6a:18:ac:2e:df:e8:88:f7:59:e2:c6:f2:e6: 1a:b7:2e:ac:8c:8e:a5:75:20:55:2b:64:cd:43:b4: 58:41:d3:d4:5a:10:3c:bd:a1:f7:7f:89:ce:07:4e: 96:e7:1e:ca:d5:e6:83:04:12:76:c1:94:96:af:7a: 75:dc:1f:a0:7e:ed:3c:99:0c:ec:ab:37:c5:ee:26: ae:84:87:c2:45:b6:29:ad:61:40:a3:97:8c:85:1c: 2d:02:19:ba:01:58:4c:0e:a2:f3:7f:f2:0f:c8:81: ec:0c:b9:b2:87:ec:8e:7c:b7:7f:27:d1:2b:9e:7b: 5e:51:08:7f:95:a3:6e:52:8f:3a:2b:ae:df:56:85: 31:60:2a:19:ce:46:d1:c6:2a:7b:70:d0:37:38:8a: ec:01:e6:d7:77:52:9e:8f:69:3e:f3:67:93:86:a0: 66:4d:2d:55:c5:f7:ad:16:08:00:a5:42:20:a0:25: 1b:91:5b:76:a6:f1:df:75:b9:cd:4d:5b:f5:c8:a2: 7d:42:c3:c8:65:a5:3d:15:1a:4b:be:cb:06:bb:84: 9a:6b:27:65:54:a8:c5:a4:cd:a0:27:93:a4:36:c9: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AB:35:E1:DC:30:6D:53:F5:E3:69:4D:C5:65:F4:A0:23:5A:AF:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ed:b3:e9:24:41:7a:fc:17:a3:f7:f4:43:25:fe:c7:46:47: be:d6:01:23:64:d9:61:ee:2a:67:6e:83:a7:f2:0e:b2:19:d3: b5:2e:37:a6:fd:08:83:c1:06:6c:2e:90:44:51:50:f2:44:4d: d7:fa:85:10:35:aa:70:26:22:80:ec:07:56:49:4a:5b:b1:0c: 5f:2d:07:36:b9:13:44:ad:5c:86:38:dc:1f:9f:b5:75:8c:c3: 4c:e4:f0:04:6c:56:98:8f:00:2a:1f:79:19:e5:eb:82:ff:85: 3f:1e:38:ca:ef:4f:f5:95:ca:f2:22:0d:4d:12:39:03:f6:7c: c9:d9:41:fe:8d:52:af:b3:d5:d3:c5:66:c8:56:72:be:a7:96: 29:bd:34:1c:05:46:6a:9e:a8:63:6d:85:31:6c:da:ef:d4:38: 27:3d:c7:8a:2e:18:fb:ef:a1:f5:7d:f6:c8:9c:d2:cc:d0:8e: 2d:8c:7b:4c:55:8f:62:71:70:14:f1:2f:4d:6c:00:08:55:f7: 86:77:24:92:d1:48:d1:c1:77:90:d8:4f:a0:39:89:c2:35:de: 5c:1b:9a:66:63:13:26:1b:d5:ee:f2:4d:d0:37:74:72:8a:83: ef:b0:be:f7:cb:c8:6a:e4:2d:0e:24:5a:e4:44:f0:69:bb:a7: 14:63:2e:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcKt98iXmP3JWkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk OGVhZGY0NDItZTYyYy00YWJlLTlmYzgtZTM5YTJhYzdjMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke7LqJnNdGAbt3Em3/Zy3ttvjjQpU/Z4RMne H5iFpWoYrC7f6Ij3WeLG8uYaty6sjI6ldSBVK2TNQ7RYQdPUWhA8vaH3f4nOB06W 5x7K1eaDBBJ2wZSWr3p13B+gfu08mQzsqzfF7iauhIfCRbYprWFAo5eMhRwtAhm6 AVhMDqLzf/IPyIHsDLmyh+yOfLd/J9ErnnteUQh/laNuUo86K67fVoUxYCoZzkbR xip7cNA3OIrsAebXd1Kej2k+82eThqBmTS1VxfetFggApUIgoCUbkVt2pvHfdbnN TVv1yKJ9QsPIZaU9FRpLvssGu4SaaydlVKjFpM2gJ5OkNskIhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNarNeHcMG1T9eNpTcVl9KAjWq+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzAwOGJkYjEtOWY3OS0z NGZjLTg4ZDYtMjk4MmEzNjAzZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA57bPpJEF6/Bej9/RDJf7HRke+1gEjZNlh7ipn boOn8g6yGdO1Ljem/QiDwQZsLpBEUVDyRE3X+oUQNapwJiKA7AdWSUpbsQxfLQc2 uRNErVyGONwfn7V1jMNM5PAEbFaYjwAqH3kZ5euC/4U/HjjK70/1lcryIg1NEjkD 9nzJ2UH+jVKvs9XTxWbIVnK+p5YpvTQcBUZqnqhjbYUxbNrv1DgnPceKLhj776H1 ffbInNLM0I4tjHtMVY9icXAU8S9NbAAIVfeGdySS0UjRwXeQ2E+gOYnCNd5cG5pm YxMmG9Xu8k3QN3RyioPvsL73y8hq5C0OJFrkRPBpu6cUYy75 -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:11 2025 by rpki-client