$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b9f8d2c-7898-32ea-b4fe-3f3f1d202206.roa File: 4b9f8d2c-7898-32ea-b4fe-3f3f1d202206.roa (raw, json) Hash identifier: 1hKE26oMKMscXeAIpLwe7QYjUg7MJ/zNsc3AXDZ1WpI= Subject key identifier: 0F:91:44:01:88:3E:9F:2C:96:1F:F8:2E:E5:79:6E:53:C3:7E:DB:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270D6F6383684E75C9FA280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b9f8d2c-7898-32ea-b4fe-3f3f1d202206.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 396541 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:d6:f6:38:36:84:e7:5c:9f:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=b25cafc4-cff9-4dad-9a45-c2efac5ba2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:a8:a6:d4:88:6f:76:8d:e6:cd:87:e3:86: 84:8f:ed:6d:4d:1c:0a:1f:ee:8b:2a:a3:46:a3:10: fd:74:9d:14:8b:c8:bc:78:b5:8f:07:42:ad:b1:55: 6b:fc:0d:b9:43:4c:9a:2c:2f:8b:79:12:ae:e2:e4: cd:29:7c:d4:38:b9:b4:6b:73:97:4c:a2:49:8a:60: da:6c:82:90:43:3e:c5:3c:22:65:08:6d:82:2a:2c: 64:d9:0f:e9:6e:92:c0:49:5c:b0:47:5e:7c:ce:99: 8c:75:48:9b:78:94:26:06:0d:2a:0c:1c:03:4a:1a: 4e:98:c5:3f:c6:99:9d:ac:9d:db:f8:1f:d4:cf:16: dd:7e:47:e7:e1:79:f6:f0:19:f1:fc:d3:3e:92:51: f4:bc:89:08:3b:ca:a6:17:5a:4b:9b:83:59:bd:a6: b6:7a:5b:64:49:7e:59:e8:6a:e7:17:24:06:c5:68: 36:0f:5a:18:74:cb:3c:a4:e9:92:83:13:89:5b:2b: 51:3e:8d:4b:e6:4a:44:8e:d3:a1:90:a1:8f:ca:e5: 6e:1e:08:cd:68:93:dc:ee:a7:ae:25:4e:3d:3b:fd: 9b:c7:8b:68:cd:76:1b:53:52:e3:db:36:da:cc:92: 9b:59:f0:fa:d9:a3:98:3c:42:4c:ba:e1:be:07:5f: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:91:44:01:88:3E:9F:2C:96:1F:F8:2E:E5:79:6E:53:C3:7E:DB:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b9f8d2c-7898-32ea-b4fe-3f3f1d202206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1d:59:4a:14:33:d6:46:54:ba:62:4f:47:f4:71:43:49:e0: 86:93:78:57:a6:3e:ad:02:1f:d5:cf:1e:c6:ba:77:9f:b2:e5: d3:c9:fe:35:f0:af:1d:ea:da:d8:5b:3f:56:aa:f3:de:f2:2a: 49:9f:4a:87:18:dd:02:39:5a:c3:bd:7f:44:73:71:27:95:da: 1c:f6:33:b7:ca:f7:28:26:62:c2:2f:8e:3d:78:e2:5a:20:25: dc:4e:05:da:1f:a8:5d:6c:ba:d3:99:ef:85:d5:cf:6e:61:62: a6:8e:6d:42:f2:cc:c7:6f:84:91:40:27:6c:16:eb:9e:dc:0f: ec:38:1f:19:a4:4c:a5:f8:8a:c4:d5:05:f9:b2:e4:ed:82:23: 79:05:32:99:27:78:7a:16:77:37:b6:97:ed:2d:6c:1f:c3:5f: 4a:a1:38:6f:2a:99:55:fb:7d:c8:88:ac:88:89:be:a5:07:f9: c7:ca:94:0f:b7:0f:94:15:88:1f:75:d6:b3:6a:8b:5c:e4:0c: 07:21:5c:24:c6:23:e5:84:c5:72:cb:0c:37:d9:2b:c4:14:5f: c1:96:56:6c:a2:b6:2d:34:94:af:84:bc:6b:73:54:c1:fa:b3: 2a:0d:1c:fe:07:c9:a8:0c:e3:79:57:0a:3d:d0:dc:cb:ee:4a: 76:52:66:2b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcNb2ODaE51yfooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk YjI1Y2FmYzQtY2ZmOS00ZGFkLTlhNDUtYzJlZmFjNWJhMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsueoptSIb3aN5s2H44aEj+1tTRwKH+6LKqNG oxD9dJ0Ui8i8eLWPB0KtsVVr/A25Q0yaLC+LeRKu4uTNKXzUOLm0a3OXTKJJimDa bIKQQz7FPCJlCG2CKixk2Q/pbpLASVywR158zpmMdUibeJQmBg0qDBwDShpOmMU/ xpmdrJ3b+B/Uzxbdfkfn4Xn28Bnx/NM+klH0vIkIO8qmF1pLm4NZvaa2eltkSX5Z 6GrnFyQGxWg2D1oYdMs8pOmSgxOJWytRPo1L5kpEjtOhkKGPyuVuHgjNaJPc7qeu JU49O/2bx4tozXYbU1Lj2zbazJKbWfD62aOYPEJMuuG+B181bwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA+RRAGIPp8slh/4LuV5blPDftviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGI5ZjhkMmMtNzg5OC0z MmVhLWI0ZmUtM2YzZjFkMjAyMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASHVlKFDPWRlS6Yk9H9HFDSeCGk3hXpj6tAh/V zx7GunefsuXTyf418K8d6trYWz9WqvPe8ipJn0qHGN0COVrDvX9Ec3Enldoc9jO3 yvcoJmLCL449eOJaICXcTgXaH6hdbLrTme+F1c9uYWKmjm1C8szHb4SRQCdsFuue 3A/sOB8ZpEyl+IrE1QX5suTtgiN5BTKZJ3h6Fnc3tpftLWwfw19KoThvKplV+33I iKyIib6lB/nHypQPtw+UFYgfddazaotc5AwHIVwkxiPlhMVyyww32SvEFF/BllZs orYtNJSvhLxrc1TB+rMqDRz+B8moDON5Vwo90NzL7kp2UmYr -----END CERTIFICATE-----Generated at Wed Nov 5 16:06:51 2025 by rpki-client