$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa File: 89c06455-1970-3ace-94ff-3ae3d7e39c35.roa (raw, json) Hash identifier: nIPQ7QWt7sUJDpe+XITWZsPv7VUfVwoZHs5AsYZ887A= Subject key identifier: 17:A9:29:9D:84:C2:9B:DF:53:5A:17:C9:B1:A7:E1:BE:B4:CC:8A:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D481DAF17109F296B8180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 396572 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:48:1d:af:17:10:9f:29:6b:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=5b06c57e-ac37-4be9-82cb-ae222257fd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:45:f0:d0:d0:18:e0:0c:d5:55:9f:7a:1d:bc: 9b:f9:d9:bf:78:21:fa:d9:a4:6b:20:e8:82:ab:34: 57:73:0f:0e:ad:8a:2e:ca:f5:25:a6:6e:f4:c4:85: d3:ef:37:00:59:3e:ff:b4:93:5b:52:9e:5b:ee:a6: e3:22:58:c7:30:9f:90:c9:4c:26:8d:e6:f6:aa:f2: 59:f7:91:7e:93:0f:58:1b:8f:c1:d5:c2:77:87:53: 01:44:2a:d3:9b:24:83:4d:03:be:f3:58:ce:8d:b3: a3:1d:84:30:e5:a4:b5:b5:f7:a5:45:dd:8d:4c:f6: e2:59:d9:4f:6a:42:62:b9:b9:dc:ea:e9:52:99:fc: 04:0d:b6:14:77:1e:09:0d:fd:c4:6f:84:b5:2f:72: 7d:a1:0d:c9:de:72:e8:4a:32:50:c7:33:78:98:0c: 92:dd:e9:ea:e3:b3:2a:dc:9d:0d:71:70:8c:fb:1e: ca:7c:fe:0c:f8:be:86:48:f5:93:96:ad:79:c4:fe: c4:30:5d:c6:69:17:c1:7c:05:59:73:6b:ba:33:3e: b7:28:de:a7:36:16:b5:0e:55:7b:71:02:0d:0a:90: 4e:b6:77:3b:7f:2c:b5:2f:2e:56:2c:eb:c5:39:87: 49:f7:b0:ba:81:8c:3e:a5:6e:91:5d:6f:77:df:4c: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A9:29:9D:84:C2:9B:DF:53:5A:17:C9:B1:A7:E1:BE:B4:CC:8A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f6:06:67:60:ea:3a:ea:8c:b2:de:d8:62:a4:5d:ae:1c:8e: f1:59:82:cd:2f:96:80:64:41:27:c2:5f:d3:ca:45:76:1e:d8: b8:85:b9:1a:5b:45:74:6c:e8:66:a2:6c:3f:c3:77:7e:5d:38: ed:9b:3f:ce:7d:be:59:32:ac:f1:c2:01:54:f5:23:a6:5e:a1: 69:c2:af:1d:43:e1:6c:57:b6:9b:79:b4:f7:e1:82:f1:42:9a: 2c:d7:27:1a:ac:99:49:a0:3a:56:bf:7d:b4:a5:bb:03:d0:a6: 92:65:e2:6b:e4:63:0a:cf:29:78:ad:2d:6d:03:8b:bd:fb:71: 4c:c5:f3:ce:fc:22:c3:03:50:78:45:60:fb:c7:69:79:14:67: 69:04:56:76:b4:05:5d:cc:f6:d0:00:7d:77:dd:82:4f:22:c0: ee:55:56:8f:75:3a:c3:29:54:2c:94:55:27:e7:eb:bd:29:47: a3:ce:a8:d8:82:36:d3:16:10:d4:31:54:87:0c:d8:b4:45:cd: 5f:24:75:f8:a0:c4:5a:c1:e6:c4:73:84:fb:e8:49:43:ae:66: 0f:3a:26:be:71:bd:ae:4d:00:f3:5f:47:c5:d3:33:a2:97:be: 6a:68:e4:34:99:5d:da:b4:aa:89:04:4f:cf:72:fe:c3:cb:d8: 38:0a:61:27 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUgdrxcQnylrgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NWIwNmM1N2UtYWMzNy00YmU5LTgyY2ItYWUyMjIyNTdmZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikXw0NAY4AzVVZ96Hbyb+dm/eCH62aRrIOiC qzRXcw8OrYouyvUlpm70xIXT7zcAWT7/tJNbUp5b7qbjIljHMJ+QyUwmjeb2qvJZ 95F+kw9YG4/B1cJ3h1MBRCrTmySDTQO+81jOjbOjHYQw5aS1tfelRd2NTPbiWdlP akJiubnc6ulSmfwEDbYUdx4JDf3Eb4S1L3J9oQ3J3nLoSjJQxzN4mAyS3enq47Mq 3J0NcXCM+x7KfP4M+L6GSPWTlq15xP7EMF3GaRfBfAVZc2u6Mz63KN6nNha1DlV7 cQINCpBOtnc7fyy1Ly5WLOvFOYdJ97C6gYw+pW6RXW9330xBTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBepKZ2EwpvfU1oXybGn4b60zIrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODljMDY0NTUtMTk3MC0z YWNlLTk0ZmYtM2FlM2Q3ZTM5YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAx9gZnYOo66oyy3thipF2uHI7xWYLNL5aAZEEn wl/TykV2Hti4hbkaW0V0bOhmomw/w3d+XTjtmz/Ofb5ZMqzxwgFU9SOmXqFpwq8d Q+FsV7abebT34YLxQpos1ycarJlJoDpWv320pbsD0KaSZeJr5GMKzyl4rS1tA4u9 +3FMxfPO/CLDA1B4RWD7x2l5FGdpBFZ2tAVdzPbQAH133YJPIsDuVVaPdTrDKVQs lFUn5+u9KUejzqjYgjbTFhDUMVSHDNi0Rc1fJHX4oMRawebEc4T76ElDrmYPOia+ cb2uTQDzX0fF0zOil75qaOQ0mV3atKqJBE/Pcv7Dy9g4CmEn -----END CERTIFICATE-----Generated at Wed Nov 5 16:23:13 2025 by rpki-client