$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52099887-79ed-3b59-8a95-14add684f092.roa File: 52099887-79ed-3b59-8a95-14add684f092.roa (raw, json) Hash identifier: E0YnCkrUYG/2msa6/0JDS4KUAb/qaE1RhT1OGHRai7k= Subject key identifier: 63:3D:12:B7:8A:4B:95:9F:F5:82:F6:2A:52:A1:03:55:AF:66:EE:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D466E27DEABF342C66E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52099887-79ed-3b59-8a95-14add684f092.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 396597 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:46:6e:27:de:ab:f3:42:c6:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=1fafe0b4-46ec-4f00-bdec-5685f369e8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:28:28:87:f5:c3:06:4d:ba:9b:b7:34:44:f3: 24:40:1a:c7:2d:9f:f6:51:be:81:f6:42:c8:fe:73: 5a:16:b4:e5:2c:62:b6:17:8c:36:6a:1a:31:c1:bb: db:de:cf:f6:09:d7:a0:63:8f:89:5e:6a:94:ac:32: b5:38:c8:af:f7:a4:72:57:c8:a0:b8:af:0a:1c:9a: 3a:cf:da:7a:1c:7e:d5:2a:5c:a9:40:28:91:d7:13: 3c:c6:4a:e6:c7:64:cd:5a:c6:b2:51:fa:47:d2:29: 4a:11:12:88:be:ea:6f:8c:26:ee:9f:27:a8:4c:41: c4:43:47:be:9f:14:20:cf:57:03:33:2f:63:6e:69: c3:11:72:b6:73:e7:2a:e6:f5:75:dc:78:7d:27:8f: 08:00:b9:2f:67:a5:f1:2d:b6:40:46:f6:9b:ba:68: b5:83:e4:9c:95:11:1e:7f:bb:7a:f5:ae:45:c1:7d: 1a:cb:1d:d1:8e:bd:50:f5:68:c7:ad:a5:b3:b2:97: 2d:2c:51:53:cc:af:60:3a:ca:5a:d4:46:09:8d:43: ec:76:46:3e:99:be:dd:19:4d:cf:ad:00:83:d2:71: 67:cc:db:5a:07:81:d9:5c:36:85:ca:66:6b:66:15: d3:49:55:41:38:4a:3e:1c:62:4a:7c:c3:32:1c:f9: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3D:12:B7:8A:4B:95:9F:F5:82:F6:2A:52:A1:03:55:AF:66:EE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52099887-79ed-3b59-8a95-14add684f092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ec:97:99:ee:2a:6f:2b:64:2e:b4:a2:42:ed:60:f9:33:0a: 51:c5:95:a3:75:4f:c1:b3:67:1d:4e:b2:c2:5c:d6:5b:7c:46: 2a:af:5c:76:7d:bb:e6:ca:40:a5:7c:32:32:3f:65:5e:c1:df: 49:e8:0d:99:63:12:86:3e:2d:e9:c6:f5:d7:6f:03:db:2f:7e: 0a:2f:64:2d:54:ce:99:2d:01:ad:ed:cb:25:c2:84:45:7b:32: 4a:3a:6f:b0:db:d9:03:bb:0e:00:57:87:55:30:39:4d:92:dd: e3:4c:2c:f7:7f:e6:53:cd:6c:3f:c1:e8:68:8d:70:e3:1c:e9: 8f:40:92:d7:c8:c3:b8:54:c3:21:09:0a:30:4e:b9:58:57:18: 79:24:16:d3:be:f7:3e:6c:30:82:49:f9:25:a1:11:66:1c:99: 9d:51:ce:99:d9:f2:4b:bb:fc:03:a7:15:6f:90:66:79:bb:98: 35:34:f2:c6:00:95:4e:d0:fc:88:cb:bc:22:12:70:15:78:24: b0:b2:8e:d3:26:ac:ee:3b:d5:e3:a5:b5:29:4e:19:34:16:d6: aa:b1:87:93:3c:ac:59:11:48:51:8c:34:c4:6d:46:2d:1a:5f: f6:b8:7f:78:0c:46:41:d3:59:fd:db:ce:e3:71:83:9d:7f:ca: e4:50:7e:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUZuJ96r80LGbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MWZhZmUwYjQtNDZlYy00ZjAwLWJkZWMtNTY4NWYzNjllOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjigoh/XDBk26m7c0RPMkQBrHLZ/2Ub6B9kLI /nNaFrTlLGK2F4w2ahoxwbvb3s/2CdegY4+JXmqUrDK1OMiv96RyV8iguK8KHJo6 z9p6HH7VKlypQCiR1xM8xkrmx2TNWsayUfpH0ilKERKIvupvjCbunyeoTEHEQ0e+ nxQgz1cDMy9jbmnDEXK2c+cq5vV13Hh9J48IALkvZ6XxLbZARvabumi1g+SclREe f7t69a5FwX0ayx3Rjr1Q9WjHraWzspctLFFTzK9gOspa1EYJjUPsdkY+mb7dGU3P rQCD0nFnzNtaB4HZXDaFymZrZhXTSVVBOEo+HGJKfMMyHPkNywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGM9EreKS5Wf9YL2KlKhA1WvZu6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTIwOTk4ODctNzllZC0z YjU5LThhOTUtMTRhZGQ2ODRmMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAw7JeZ7ipvK2QutKJC7WD5MwpRxZWjdU/Bs2cd TrLCXNZbfEYqr1x2fbvmykClfDIyP2Vewd9J6A2ZYxKGPi3pxvXXbwPbL34KL2Qt VM6ZLQGt7cslwoRFezJKOm+w29kDuw4AV4dVMDlNkt3jTCz3f+ZTzWw/wehojXDj HOmPQJLXyMO4VMMhCQowTrlYVxh5JBbTvvc+bDCCSfkloRFmHJmdUc6Z2fJLu/wD pxVvkGZ5u5g1NPLGAJVO0PyIy7wiEnAVeCSwso7TJqzuO9XjpbUpThk0FtaqsYeT PKxZEUhRjDTEbUYtGl/2uH94DEZB01n9287jcYOdf8rkUH4d -----END CERTIFICATE-----Generated at Wed Nov 5 08:30:12 2025 by rpki-client