$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67baa352-ea73-3c64-b519-a9fea954be3e.roa File: 67baa352-ea73-3c64-b519-a9fea954be3e.roa (raw, json) Hash identifier: 6OhhY7/uLthrLYswvj3gz+bNhzBNHdVxcD91NL6HwIg= Subject key identifier: C4:A1:E1:B1:32:58:D0:A0:4C:28:3C:93:0D:A7:8A:1E:6B:2C:10:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D4D111ABA91C56562FD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67baa352-ea73-3c64-b519-a9fea954be3e.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 396591 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:4d:11:1a:ba:91:c5:65:62:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=3b9bb3a6-1b82-48b2-a5d5-53c9e92ee569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:a5:bd:9d:78:dd:d9:11:2e:37:27:a9:0c:23: 90:dc:34:bc:e6:5b:62:d1:c4:8e:b2:ed:c6:2c:ad: d3:25:59:de:58:f5:8a:0b:b1:62:a7:1c:a8:30:e3: bb:2a:05:99:15:b5:a7:a9:05:03:bd:76:8e:6b:69: 96:ec:8e:68:0b:4c:8a:64:6a:0a:14:32:86:e9:27: 8a:e2:9f:ef:da:b0:83:ae:cc:30:26:41:45:6c:9d: 53:76:9a:66:ed:c0:d3:62:c7:e6:0d:ea:99:08:2f: ea:ce:70:40:c1:0d:7d:7e:f9:b3:cc:e9:e3:10:2e: ab:d9:07:7f:d7:fd:96:86:e3:54:57:b3:d2:8a:b1: 1e:d4:e8:31:d6:f8:49:d7:75:bd:69:c3:78:9b:b9: d1:90:bc:7e:69:41:3e:22:2b:e2:1f:8e:51:96:a3: 9d:ab:4f:89:0f:b1:88:db:e8:a4:9e:1d:ff:f0:2d: 5c:69:c7:56:ca:f9:bb:9f:5c:4d:ca:f3:28:12:39: 4c:be:88:e1:74:68:3d:93:79:90:b7:14:99:c6:32: d1:8e:6b:a5:bc:89:ba:5c:79:23:3c:dc:ec:3d:c8: 8c:f1:18:e6:9b:d9:a6:ef:0e:77:60:c3:ca:78:c6: e4:37:60:50:63:d6:ca:36:c9:89:85:15:3f:08:a8: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:E1:B1:32:58:D0:A0:4C:28:3C:93:0D:A7:8A:1E:6B:2C:10:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67baa352-ea73-3c64-b519-a9fea954be3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:45:29:32:af:c9:a4:47:21:17:1f:c2:50:09:a4:1d:93:ff: ba:99:7f:18:a1:46:85:d6:03:9c:e4:ce:d2:da:b5:2e:e0:e3: d5:6b:43:b5:af:f5:eb:ed:0c:4d:ee:30:06:65:f8:5c:22:82: a1:98:b2:58:46:d0:ff:0e:98:24:04:04:9e:87:c9:cd:f0:40: 84:c6:3c:d3:ee:50:e4:45:61:d2:a3:6e:e6:33:13:1a:51:19: 62:37:9e:a7:ef:0f:5c:87:28:98:6b:06:93:05:51:37:07:fa: 79:b8:4e:55:7a:47:c7:21:86:79:d9:de:68:b3:c4:52:f7:44: 1a:22:31:5d:57:d2:7c:ea:f8:19:9a:35:34:89:b0:3e:f2:5f: 10:7e:c8:9e:72:09:88:d6:39:91:71:81:d3:1c:09:82:50:7f: 6b:01:89:03:b6:c8:88:e5:fe:8f:cc:5c:7f:bf:c9:40:bd:b5: 2f:6b:89:a6:0f:9b:bc:b4:a5:d0:c3:fb:03:a4:f3:16:dd:6e: 13:b1:fd:62:c4:27:0e:a9:e3:e8:41:97:85:0a:8d:30:ad:1a: 67:21:93:96:68:bf:e2:34:79:bd:8f:1a:79:bb:03:ec:b2:1f: 32:a2:78:48:a2:e9:2a:71:c9:af:1a:6e:1d:41:0a:49:66:3b: de:88:ad:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jU0RGrqRxWVi/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk M2I5YmIzYTYtMWI4Mi00OGIyLWE1ZDUtNTNjOWU5MmVlNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/aW9nXjd2REuNyepDCOQ3DS85lti0cSOsu3G LK3TJVneWPWKC7FipxyoMOO7KgWZFbWnqQUDvXaOa2mW7I5oC0yKZGoKFDKG6SeK 4p/v2rCDrswwJkFFbJ1Tdppm7cDTYsfmDeqZCC/qznBAwQ19fvmzzOnjEC6r2Qd/ 1/2WhuNUV7PSirEe1Ogx1vhJ13W9acN4m7nRkLx+aUE+IiviH45RlqOdq0+JD7GI 2+iknh3/8C1cacdWyvm7n1xNyvMoEjlMvojhdGg9k3mQtxSZxjLRjmulvIm6XHkj PNzsPciM8Rjmm9mm7w53YMPKeMbkN2BQY9bKNsmJhRU/CKjd9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMSh4bEyWNCgTCg8kw2nih5rLBCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjdiYWEzNTItZWE3My0z YzY0LWI1MTktYTlmZWE5NTRiZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAWRSkyr8mkRyEXH8JQCaQdk/+6mX8YoUaF1gOc 5M7S2rUu4OPVa0O1r/Xr7QxN7jAGZfhcIoKhmLJYRtD/DpgkBASeh8nN8ECExjzT 7lDkRWHSo27mMxMaURliN56n7w9chyiYawaTBVE3B/p5uE5VekfHIYZ52d5os8RS 90QaIjFdV9J86vgZmjU0ibA+8l8QfsiecgmI1jmRcYHTHAmCUH9rAYkDtsiI5f6P zFx/v8lAvbUva4mmD5u8tKXQw/sDpPMW3W4Tsf1ixCcOqePoQZeFCo0wrRpnIZOW aL/iNHm9jxp5uwPssh8yonhIoukqccmvGm4dQQpJZjveiK2l -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:02 2025 by rpki-client