$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa File: 451b289c-43de-3e80-bb28-59eca9431a1b.roa (raw, json) Hash identifier: dr70/WgKY3kPZrxI6OeRdXz8x9wdYPBg0Utkl+Auu3g= Subject key identifier: 09:F4:0E:AE:98:B1:2D:FE:C7:C3:25:8E:5D:1B:0E:13:37:12:BC:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D4B09BD8EE411EE9AF9F0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 20172 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:4b:09:bd:8e:e4:11:ee:9a:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=2b257815-97f7-4e2b-8285-a26778c67327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:2c:1d:fb:4c:f4:11:15:27:5a:88:48:3a: c1:5b:cb:2e:d6:11:ac:9a:e5:1c:ba:ba:50:91:ac: 02:c7:51:d0:07:a0:93:f7:e5:a3:0d:9b:9d:7a:ee: b5:08:56:b0:9e:49:93:6b:65:47:3e:e9:4c:76:80: a6:85:da:c3:ef:ec:f9:da:e8:19:de:d1:0c:b2:4d: c6:22:70:50:3f:4d:72:9c:5c:99:db:7c:42:5c:19: 89:cc:11:ab:5a:2c:9f:59:b9:20:1a:be:b3:ee:ab: 51:78:84:67:06:83:19:65:70:21:65:9c:62:d5:4d: b3:77:8b:3c:a3:69:09:f5:dd:a9:8c:b1:73:32:f4: ec:77:93:b4:3b:c0:13:bb:8a:d3:57:0e:f8:b2:91: 69:56:f2:5b:33:fe:0c:53:f5:4c:41:cc:79:80:56: 7d:08:55:e8:0a:dd:c7:a7:f6:9e:02:e5:6b:46:07: 0d:32:4c:75:15:70:e4:6f:21:ab:99:ea:d8:73:9e: 9a:b5:75:55:68:ca:91:0f:2f:70:35:ee:9a:7b:12: ee:f1:aa:3e:e2:2b:32:b2:ca:f8:5d:67:2e:7d:e9: f7:ec:96:99:e9:1e:60:d1:a2:4c:cb:7c:01:d3:02: 7b:d2:34:90:da:89:c8:85:4b:4e:a2:39:0f:f7:d0: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:0E:AE:98:B1:2D:FE:C7:C3:25:8E:5D:1B:0E:13:37:12:BC:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:73:a1:3b:a6:8e:26:08:1a:cb:ed:81:c1:6a:69:f8:66:ee: 7c:30:3d:00:ae:ab:e3:d3:b6:70:4e:b8:d8:2e:80:ec:99:ce: 3b:39:81:d2:31:a6:ef:80:33:8b:94:2f:62:65:19:14:b6:90: 4a:53:4f:84:5d:10:29:bf:7a:84:df:60:38:6a:52:b7:2a:88: 46:c4:8b:a3:de:b8:ae:05:e3:8e:f5:b8:b6:0e:db:44:60:b1: ee:33:52:17:7c:bf:b6:63:6a:12:f0:22:64:80:9d:01:c7:6f: 59:f2:13:50:7f:47:d4:57:63:fc:d0:35:26:b6:53:eb:69:ac: 31:39:e2:77:83:10:5f:7f:9a:de:d1:73:0f:a3:40:bc:24:7a: eb:4a:a1:b4:5e:da:97:f1:1c:86:6c:21:26:8f:13:e8:ee:35: f7:4c:75:2f:a5:66:b6:db:f3:f7:d2:dd:36:0a:94:c0:1c:10: c6:2b:68:5b:38:ab:1c:4f:4a:b4:2a:65:36:1d:d5:3d:82:f2: e2:72:a8:26:7a:35:f7:a1:c7:0c:88:1d:12:7e:75:7e:b4:bf: f1:de:bc:bf:54:c4:9f:c5:5e:2a:0d:2b:9f:f0:41:bb:64:6e: ba:8d:e4:f8:18:ef:bb:7b:39:5f:21:74:e8:58:3a:e9:bb:6c: 3e:7f:c7:89 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUsJvY7kEe6a+fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmIyNTc4MTUtOTdmNy00ZTJiLTgyODUtYTI2Nzc4YzY3MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ksHftM9BEVJ1qISDrBW8su1hGsmuUcurpQ kawCx1HQB6CT9+WjDZudeu61CFawnkmTa2VHPulMdoCmhdrD7+z52ugZ3tEMsk3G InBQP01ynFyZ23xCXBmJzBGrWiyfWbkgGr6z7qtReIRnBoMZZXAhZZxi1U2zd4s8 o2kJ9d2pjLFzMvTsd5O0O8ATu4rTVw74spFpVvJbM/4MU/VMQcx5gFZ9CFXoCt3H p/aeAuVrRgcNMkx1FXDkbyGrmerYc56atXVVaMqRDy9wNe6aexLu8ao+4isyssr4 XWcufen37JaZ6R5g0aJMy3wB0wJ70jSQ2onIhUtOojkP99Ab3QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAn0Dq6YsS3+x8Mljl0bDhM3Erx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDUxYjI4OWMtNDNkZS0z ZTgwLWJiMjgtNTllY2E5NDMxYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKc6E7po4mCBrL7YHBamn4Zu58MD0Arqvj07Zw TrjYLoDsmc47OYHSMabvgDOLlC9iZRkUtpBKU0+EXRApv3qE32A4alK3KohGxIuj 3riuBeOO9bi2DttEYLHuM1IXfL+2Y2oS8CJkgJ0Bx29Z8hNQf0fUV2P80DUmtlPr aawxOeJ3gxBff5re0XMPo0C8JHrrSqG0XtqX8RyGbCEmjxPo7jX3THUvpWa22/P3 0t02CpTAHBDGK2hbOKscT0q0KmU2HdU9gvLicqgmejX3occMiB0SfnV+tL/x3ry/ VMSfxV4qDSuf8EG7ZG66jeT4GO+7ezlfIXToWDrpu2w+f8eJ -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:06 2025 by rpki-client