$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b94b228-71a1-3fba-8eca-9578d46a11dd.roa File: 3b94b228-71a1-3fba-8eca-9578d46a11dd.roa (raw, json) Hash identifier: dXTPUOEG4XF5BQTzFqvsKicUxJLBjd6Mzbpdx4RuWWY= Subject key identifier: 1B:15:25:4F:49:FA:7B:37:04:58:25:B7:FA:C5:39:07:BD:44:9E:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270C75011F4311719AA9280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b94b228-71a1-3fba-8eca-9578d46a11dd.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 36624 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:c7:50:11:f4:31:17:19:aa:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=2e70efe4-ac6f-4c3f-9acf-017209aac5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:ca:58:6e:14:fe:fc:44:47:31:cb:d6:eb: c4:c6:92:21:0a:5c:d6:c1:44:d7:77:cc:24:47:82: fe:ae:15:76:87:c7:1d:f3:55:54:e8:c6:13:fb:2c: 03:87:e1:53:28:ef:f9:74:91:f0:f6:8d:bd:05:7b: 65:5b:d0:9d:5e:80:4b:ce:29:19:2e:b8:7d:72:da: 5e:5c:5c:1d:47:df:c9:6f:26:34:2e:fd:59:29:d4: dd:62:df:50:33:03:56:97:8d:d3:91:87:f2:7b:9f: 63:1d:29:16:e9:2b:30:42:ac:5d:63:af:67:50:1d: 24:02:fa:c8:e7:97:f4:6f:b0:13:90:44:73:b5:d9: cc:19:bd:d8:8d:63:9f:4d:85:b7:33:0f:a4:00:96: b9:79:78:a7:fd:f4:ee:3a:32:c6:57:f2:3d:3e:7a: a0:71:5d:95:51:96:15:bb:92:a4:9d:16:b2:5f:de: c3:39:ed:c9:c8:02:f3:98:61:7b:b2:f7:f0:59:c1: 77:c1:76:bb:48:33:7b:d5:69:0a:57:33:f9:23:ac: 85:9c:73:c2:2e:09:03:57:2d:a4:f8:c4:7e:89:e0: ce:85:50:1c:03:3a:7b:a3:03:11:cd:66:69:bb:3c: 39:1d:33:42:5e:76:1a:6a:4e:48:fa:1b:39:8d:87: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:25:4F:49:FA:7B:37:04:58:25:B7:FA:C5:39:07:BD:44:9E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b94b228-71a1-3fba-8eca-9578d46a11dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:99:15:cd:86:57:8f:4f:d5:19:4d:10:1c:46:13:0a:98:84: 5b:e5:e2:e9:9f:5d:0b:fc:d0:ea:44:30:f7:82:7b:44:6b:6e: f1:53:8f:38:ff:45:c8:7b:33:93:59:e7:9a:7a:94:dc:44:fc: df:55:f0:93:fe:14:26:91:0d:2e:b1:f2:8e:ae:c3:32:71:1b: 5f:a7:dd:ac:e6:b8:db:dd:0a:17:12:c2:10:6a:d7:bc:de:dc: f1:8c:92:17:a1:a1:db:86:60:15:42:59:27:df:3d:90:75:86: 95:72:e4:d2:16:6c:da:fa:fb:95:1a:e4:09:92:7d:4b:18:3f: 54:b9:a1:36:92:af:08:7a:ec:83:a7:f3:e1:13:e4:91:c2:02: a5:54:e7:00:2b:6e:00:e2:76:5e:85:2c:f3:ea:d1:a4:23:69: c1:c0:86:b8:a7:6e:ec:37:0d:78:dc:ef:88:f0:0b:35:2a:96: 1e:a9:2d:e7:de:10:86:89:13:79:0c:8b:98:08:f2:c5:88:2d: 13:d1:bc:58:87:29:f2:0a:fa:2b:d1:14:c9:69:58:94:95:78: 20:ed:06:1a:67:94:a5:25:0c:67:d1:80:eb:85:fe:09:8a:1a: 6f:a2:68:dc:90:de:ef:ba:fc:a5:6b:9c:8a:26:35:6b:e7:03: 9b:78:01:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcMdQEfQxFxmqkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MmU3MGVmZTQtYWM2Zi00YzNmLTlhY2YtMDE3MjA5YWFjNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuPKWG4U/vxERzHL1uvExpIhClzWwUTXd8wk R4L+rhV2h8cd81VU6MYT+ywDh+FTKO/5dJHw9o29BXtlW9CdXoBLzikZLrh9ctpe XFwdR9/JbyY0Lv1ZKdTdYt9QMwNWl43TkYfye59jHSkW6SswQqxdY69nUB0kAvrI 55f0b7ATkERztdnMGb3YjWOfTYW3Mw+kAJa5eXin/fTuOjLGV/I9PnqgcV2VUZYV u5KknRayX97DOe3JyALzmGF7svfwWcF3wXa7SDN71WkKVzP5I6yFnHPCLgkDVy2k +MR+ieDOhVAcAzp7owMRzWZpuzw5HTNCXnYaak5I+hs5jYeFKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBsVJU9J+ns3BFglt/rFOQe9RJ6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2I5NGIyMjgtNzFhMS0z ZmJhLThlY2EtOTU3OGQ0NmExMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+mRXNhlePT9UZTRAcRhMKmIRb5eLpn10L/NDq RDD3gntEa27xU484/0XIezOTWeeaepTcRPzfVfCT/hQmkQ0usfKOrsMycRtfp92s 5rjb3QoXEsIQate83tzxjJIXoaHbhmAVQlkn3z2QdYaVcuTSFmza+vuVGuQJkn1L GD9UuaE2kq8IeuyDp/PhE+SRwgKlVOcAK24A4nZehSzz6tGkI2nBwIa4p27sNw14 3O+I8As1KpYeqS3n3hCGiRN5DIuYCPLFiC0T0bxYhynyCvor0RTJaViUlXgg7QYa Z5SlJQxn0YDrhf4JihpvomjckN7vuvyla5yKJjVr5wObeAGl -----END CERTIFICATE-----Generated at Wed Nov 5 16:19:11 2025 by rpki-client