$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa File: 5693ddaf-862c-3eab-933e-286d3ed8f589.roa (raw, json) Hash identifier: h6f7uP/nGXTbeumRtJrzMmcPm2Q12tyTQ0RcLaq6kgc= Subject key identifier: 61:E7:DD:90:AD:2B:2F:35:B6:5F:81:CF:9D:FB:E0:03:57:7D:BC:94 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D4D8DC6307304D20DC600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 396555 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:4d:8d:c6:30:73:04:d2:0d:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=67ae09a8-9c14-434d-8cb6-e51380c5f930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:37:5b:82:2d:e3:48:a2:d3:52:2d:e3:46:d4: d5:2a:78:06:d3:c9:19:6c:4f:02:0f:c1:93:ae:7b: a8:ed:84:d1:de:33:d4:f8:d8:62:97:64:03:6b:54: 9a:8c:56:fd:53:df:16:80:d6:ec:e5:68:7b:09:3a: f4:4b:2c:0c:b8:60:ed:0c:45:37:0d:d3:17:ca:c4: fa:9e:84:fa:1f:ed:f1:77:d3:49:dd:fd:ea:1a:4c: c5:1d:7d:99:dd:6d:b0:77:d6:37:bf:d7:b3:25:a8: 2f:79:c3:37:d2:02:90:ac:40:72:9f:8a:a2:88:52: 94:ec:42:80:4a:90:76:86:31:e4:d7:59:51:2b:64: 3b:1e:a2:92:cd:f2:98:ca:06:7e:4b:64:db:34:f3: aa:45:42:cd:9c:74:7e:6c:d8:ff:3d:d9:63:4d:4d: 70:3a:73:ee:02:6c:f2:38:c7:5f:dd:4f:52:70:e4: ed:22:86:95:ff:77:4b:08:0c:20:d7:a7:1f:76:3d: dc:ab:3c:b1:96:c3:91:01:44:61:9c:5f:ca:03:a6: 9b:fa:0c:ba:b5:b2:39:7e:b3:22:d6:fa:e1:06:32: ec:81:e9:98:f4:4a:9d:fc:97:bc:43:a2:81:bf:a9: 0b:54:db:d0:c9:0d:e7:af:c4:ee:a1:70:fc:04:fc: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E7:DD:90:AD:2B:2F:35:B6:5F:81:CF:9D:FB:E0:03:57:7D:BC:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5a:8f:42:d2:2a:c1:dd:6b:e2:24:76:39:02:5b:66:94:fe: 44:b0:9b:d4:a9:4c:17:c1:72:18:74:fe:69:46:5a:ad:73:e8: c4:b6:b6:0f:ce:15:c7:43:11:93:0c:70:9d:ab:bd:2c:12:c8: 63:1a:cb:35:11:d5:b1:28:5a:cb:56:7a:3c:f7:26:df:eb:93: 36:fb:b3:56:14:2f:fd:7f:84:de:d3:ce:08:02:58:4a:7d:e2: 18:db:11:e9:62:a7:8d:80:b4:21:f6:a0:76:6f:6f:2c:08:8e: e2:9c:6d:55:00:27:70:d4:7f:0d:ca:41:54:00:42:2f:d1:7f: 17:8a:30:e1:75:de:b2:8c:30:79:36:c1:0e:97:34:af:5f:01: 9b:8f:26:31:3b:08:b6:c2:91:a7:4e:3c:30:23:8b:70:a0:d6: 07:38:90:5b:d0:61:88:2c:95:3b:bd:c1:8b:fd:4a:15:01:f2: 21:0b:b5:06:1c:ff:40:d2:4e:da:c3:62:a5:1a:14:da:ab:87: 88:87:28:66:0e:be:69:ba:03:9d:63:1d:73:47:74:af:07:c7: 20:4b:7f:70:6f:bd:15:d2:4d:4f:8b:30:4a:94:45:76:2b:41: 0a:25:48:f8:60:97:db:2e:7e:21:c2:17:09:9b:8b:25:29:16: c1:ff:e5:63 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jU2NxjBzBNINxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjdhZTA5YTgtOWMxNC00MzRkLThjYjYtZTUxMzgwYzVmOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zdbgi3jSKLTUi3jRtTVKngG08kZbE8CD8GT rnuo7YTR3jPU+Nhil2QDa1SajFb9U98WgNbs5Wh7CTr0SywMuGDtDEU3DdMXysT6 noT6H+3xd9NJ3f3qGkzFHX2Z3W2wd9Y3v9ezJagvecM30gKQrEByn4qiiFKU7EKA SpB2hjHk11lRK2Q7HqKSzfKYygZ+S2TbNPOqRULNnHR+bNj/PdljTU1wOnPuAmzy OMdf3U9ScOTtIoaV/3dLCAwg16cfdj3cqzyxlsORAURhnF/KA6ab+gy6tbI5frMi 1vrhBjLsgemY9Eqd/Je8Q6KBv6kLVNvQyQ3nr8TuoXD8BPzU9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGHn3ZCtKy81tl+Bz5374ANXfbyUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTY5M2RkYWYtODYyYy0z ZWFiLTkzM2UtMjg2ZDNlZDhmNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQArWo9C0irB3WviJHY5AltmlP5EsJvUqUwXwXIY dP5pRlqtc+jEtrYPzhXHQxGTDHCdq70sEshjGss1EdWxKFrLVno89ybf65M2+7NW FC/9f4Te084IAlhKfeIY2xHpYqeNgLQh9qB2b28sCI7inG1VACdw1H8NykFUAEIv 0X8XijDhdd6yjDB5NsEOlzSvXwGbjyYxOwi2wpGnTjwwI4twoNYHOJBb0GGILJU7 vcGL/UoVAfIhC7UGHP9A0k7aw2KlGhTaq4eIhyhmDr5pugOdYx1zR3SvB8cgS39w b70V0k1PizBKlEV2K0EKJUj4YJfbLn4hwhcJm4slKRbB/+Vj -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:19 2025 by rpki-client