$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa File: 48f87b69-8da1-37e4-90c0-cf2a877ff281.roa (raw, json) Hash identifier: 5MSF5Ycyz+27WQmaKr8dllwFggVf/berf+3T57yMVMA= Subject key identifier: E0:00:8B:7C:9E:9F:2C:34:C6:BA:F2:8D:61:83:8C:E1:0D:A8:C0:B8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D4A423FEB9D7F4A546C30 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 397194 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:4a:42:3f:eb:9d:7f:4a:54:6c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=dfce4a70-c14c-49a1-8913-30af521e18eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:70:77:6a:f1:63:e2:c1:7d:04:65:03:06: d6:b9:d0:b8:12:f0:73:d4:7c:28:5b:46:e7:27:a1: 1f:f3:4a:33:5e:d2:da:00:71:18:d0:be:10:96:21: 52:06:0d:f6:7c:e0:31:fe:3d:21:f0:4c:10:da:f8: 8c:6a:18:91:dc:4a:c7:bd:15:7e:70:86:e3:08:5b: 39:37:b4:31:5d:83:8e:c8:d8:4c:6a:06:34:95:5d: 04:1c:2e:09:da:56:4c:f1:b7:60:6d:e9:46:04:99: 60:41:81:39:17:36:77:e5:f3:22:60:3c:c5:30:bd: 93:62:bb:a6:d3:29:23:86:94:22:52:ec:84:49:1a: 34:85:c0:90:5b:aa:d9:f3:fa:db:be:0e:26:a1:9b: e0:95:47:c7:99:f3:6f:be:5d:92:a7:dc:43:e1:5c: f6:e7:89:9b:53:21:65:17:b6:24:de:a4:78:59:d3: 32:e2:70:7b:36:9c:6e:5e:09:1b:7e:14:12:cc:bb: bb:fc:72:4b:2b:4e:76:88:b0:6c:7f:42:02:f0:8c: 0d:e7:fb:b5:79:78:1f:02:ed:fd:74:dc:82:24:95: 1b:40:18:e6:a9:88:cc:c6:43:c8:31:46:1a:1a:dc: 90:62:5f:13:6d:12:a6:45:f2:48:0a:dc:57:64:e1: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:00:8B:7C:9E:9F:2C:34:C6:BA:F2:8D:61:83:8C:E1:0D:A8:C0:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:12:cc:d5:f3:ee:d8:fc:59:74:46:4f:d2:b1:28:46:be:0c: 08:9c:a5:9a:1f:49:1e:ca:2d:6f:26:9e:81:98:6b:ef:f5:80: 20:bf:65:4e:e3:65:70:55:38:92:25:19:4f:c4:5e:97:fb:70: ec:df:93:27:95:6b:f3:f1:e4:79:50:69:6f:98:f0:b9:3c:d8: a4:9a:db:63:7e:e8:a9:89:a2:85:8a:38:98:de:9e:f5:33:9e: a8:57:e9:4c:75:3a:eb:3c:7b:68:f4:18:b3:bf:0e:7e:6a:8e: 76:2e:77:58:8e:e2:43:84:f4:85:c0:54:76:2b:72:4a:aa:2f: 27:8c:08:67:0c:41:93:10:4c:1f:14:ac:86:bd:7a:2e:0c:b8: e0:cc:bc:1c:d0:f7:55:7c:6d:16:08:94:4b:26:dc:dc:ca:8c: 17:b4:b9:55:16:a1:00:a6:39:61:9c:f8:de:e9:2e:3d:fc:d3: 8f:2f:4a:b3:2f:5e:e8:fb:df:a7:28:b6:9f:4c:e8:67:4d:bf: 6d:05:5e:32:91:1e:b8:a8:eb:1e:73:17:ee:3c:e0:f1:a2:d8: c7:d9:a3:df:1a:22:49:5f:93:cc:f6:3f:e5:54:ab:d1:df:e3: 83:ec:69:65:ee:71:b5:2e:b1:0b:69:56:78:73:af:83:70:04: c5:03:bb:5f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUpCP+udf0pUbDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGZjZTRhNzAtYzE0Yy00OWExLTg5MTMtMzBhZjUyMWUxOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPtwd2rxY+LBfQRlAwbWudC4EvBz1HwoW0bn J6Ef80ozXtLaAHEY0L4QliFSBg32fOAx/j0h8EwQ2viMahiR3ErHvRV+cIbjCFs5 N7QxXYOOyNhMagY0lV0EHC4J2lZM8bdgbelGBJlgQYE5FzZ35fMiYDzFML2TYrum 0ykjhpQiUuyESRo0hcCQW6rZ8/rbvg4moZvglUfHmfNvvl2Sp9xD4Vz254mbUyFl F7Yk3qR4WdMy4nB7NpxuXgkbfhQSzLu7/HJLK052iLBsf0IC8IwN5/u1eXgfAu39 dNyCJJUbQBjmqYjMxkPIMUYaGtyQYl8TbRKmRfJICtxXZOE4vwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOAAi3yenyw0xrryjWGDjOENqMC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhmODdiNjktOGRhMS0z N2U0LTkwYzAtY2YyYTg3N2ZmMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAoEszV8+7Y/Fl0Rk/SsShGvgwInKWaH0keyi1v Jp6BmGvv9YAgv2VO42VwVTiSJRlPxF6X+3Ds35MnlWvz8eR5UGlvmPC5PNikmttj fuipiaKFijiY3p71M56oV+lMdTrrPHto9Bizvw5+ao52LndYjuJDhPSFwFR2K3JK qi8njAhnDEGTEEwfFKyGvXouDLjgzLwc0PdVfG0WCJRLJtzcyowXtLlVFqEApjlh nPje6S49/NOPL0qzL17o+9+nKLafTOhnTb9tBV4ykR64qOsecxfuPODxotjH2aPf GiJJX5PM9j/lVKvR3+OD7Gll7nG1LrELaVZ4c6+DcATFA7tf -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:17 2025 by rpki-client