$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56ddfdc3-156e-3820-9d53-286549944fe0.roa File: 56ddfdc3-156e-3820-9d53-286549944fe0.roa (raw, json) Hash identifier: /PvohdIjzmzuVK4e9OhkDkzKexcZ3vG4fnJhDmFvq+4= Subject key identifier: 65:4D:C2:79:2A:CA:6E:49:74:2D:BB:FF:99:72:A4:99:A6:80:7A:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270C27B88325600D5C22960 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56ddfdc3-156e-3820-9d53-286549944fe0.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 396551 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:c2:7b:88:32:56:00:d5:c2:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=32f1ec82-61b8-4e4a-ba16-be031b1b2e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:b3:25:00:5c:cd:c0:4f:f8:e0:43:87:db: 8c:5a:c6:f8:80:7e:58:98:b3:73:79:aa:db:d4:5a: 28:bf:ae:10:f4:cd:04:bc:2d:74:54:4b:88:f7:8c: 20:b4:7b:0f:95:88:c2:52:02:0c:ae:b1:d6:55:e9: 48:45:fa:0a:53:85:7f:03:b4:91:dd:a8:6f:63:a1: d7:a2:d4:63:8d:dd:85:01:5b:fd:1f:43:00:d0:ab: 84:8e:0f:0d:31:13:17:94:53:b8:a5:05:8b:ed:cf: 09:91:ab:01:28:22:ea:38:9a:ed:ee:cb:9a:6b:1c: 79:93:51:e5:56:1b:a0:c1:5e:50:c7:b8:b2:80:10: 84:27:54:78:e5:b4:2d:c2:c9:a7:a1:84:27:4a:03: c5:a9:8b:c9:ba:44:5f:a0:64:48:38:9b:f7:4f:57: ac:c2:ef:4e:f1:15:50:a7:a8:a6:40:39:17:c8:30: f7:99:fe:a7:95:c4:e7:20:29:c7:0e:03:5d:21:a4: c1:48:62:ba:24:56:a9:79:92:eb:65:0d:2f:07:e7: 8e:96:e0:01:90:86:5d:a9:db:80:68:6d:43:cb:bf: 44:f6:be:5c:62:e5:96:f7:d2:6d:c6:f7:ec:ae:c9: 73:91:75:80:5d:29:9f:c6:1a:76:b5:6b:e4:df:d5: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4D:C2:79:2A:CA:6E:49:74:2D:BB:FF:99:72:A4:99:A6:80:7A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56ddfdc3-156e-3820-9d53-286549944fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cd:db:1f:fa:6e:91:4a:18:9b:25:d5:17:c1:40:dc:1b:62: 56:f2:56:1e:e2:5e:4e:5f:5f:2d:f3:81:d4:ae:fe:b4:8e:56: 68:39:e5:96:4b:4f:fe:d6:57:25:b2:a3:3e:68:0f:fd:ca:c0: 53:b6:ba:bd:7c:5d:6c:2e:73:72:de:f4:74:b4:a9:b8:60:c0: 2b:57:fe:57:4b:fd:41:6f:c8:35:7e:74:2d:60:8c:fa:a0:4e: 54:fa:2a:5c:b1:da:28:b9:e7:93:9d:5e:08:64:c2:9f:76:d7: 8f:0a:72:80:5a:d8:95:f1:bd:06:84:dc:93:45:c8:4b:c8:75: bb:0e:11:da:a9:d7:95:02:33:04:68:ae:1f:12:f5:9e:3e:f2: 01:e2:db:42:43:0b:07:35:4c:c8:2f:1a:5f:8b:7e:fa:12:fd: 8e:29:0a:f5:d8:f2:1e:21:c1:fe:49:f2:bd:16:93:a3:e8:f0: 66:66:5a:81:85:c7:6b:b7:f9:b4:5d:c5:a5:63:1d:82:53:ae: 78:f1:bf:2c:a4:96:71:36:d4:95:27:2b:ca:a6:ff:d6:3f:7d: 5e:0f:f0:cd:a3:37:35:79:e7:32:b2:31:53:6c:59:d5:c2:53: b6:72:e5:bc:86:b5:68:83:fb:71:e9:52:74:30:36:41:2f:0f: 08:34:7a:9f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcMJ7iDJWANXCKWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzJmMWVjODItNjFiOC00ZTRhLWJhMTYtYmUwMzFiMWIyZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp6zJQBczcBP+OBDh9uMWsb4gH5YmLNzearb 1Foov64Q9M0EvC10VEuI94wgtHsPlYjCUgIMrrHWVelIRfoKU4V/A7SR3ahvY6HX otRjjd2FAVv9H0MA0KuEjg8NMRMXlFO4pQWL7c8JkasBKCLqOJrt7suaaxx5k1Hl VhugwV5Qx7iygBCEJ1R45bQtwsmnoYQnSgPFqYvJukRfoGRIOJv3T1eswu9O8RVQ p6imQDkXyDD3mf6nlcTnICnHDgNdIaTBSGK6JFapeZLrZQ0vB+eOluABkIZdqduA aG1Dy79E9r5cYuWW99JtxvfsrslzkXWAXSmfxhp2tWvk39XxFQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGVNwnkqym5JdC27/5lypJmmgHpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTZkZGZkYzMtMTU2ZS0z ODIwLTlkNTMtMjg2NTQ5OTQ0ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBHzdsf+m6RShibJdUXwUDcG2JW8lYe4l5OX18t 84HUrv60jlZoOeWWS0/+1lclsqM+aA/9ysBTtrq9fF1sLnNy3vR0tKm4YMArV/5X S/1Bb8g1fnQtYIz6oE5U+ipcsdooueeTnV4IZMKfdtePCnKAWtiV8b0GhNyTRchL yHW7DhHaqdeVAjMEaK4fEvWePvIB4ttCQwsHNUzILxpfi376Ev2OKQr12PIeIcH+ SfK9FpOj6PBmZlqBhcdrt/m0XcWlYx2CU6548b8spJZxNtSVJyvKpv/WP31eD/DN ozc1eecysjFTbFnVwlO2cuW8hrVog/tx6VJ0MDZBLw8INHqf -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:02 2025 by rpki-client