$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c733fd5-0677-3a02-b6df-28a5ae913bf3.roa File: 8c733fd5-0677-3a02-b6df-28a5ae913bf3.roa (raw, json) Hash identifier: b5jMwn1PQZ9UUcRWiFTOJ2wiQumvSfYRznT0x6no1kY= Subject key identifier: 6A:48:F6:08:0A:19:7F:57:B5:5C:21:84:AA:B4:E3:D8:45:01:42:CA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270A50DFB11DC0995511D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c733fd5-0677-3a02-b6df-28a5ae913bf3.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 396563 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:a5:0d:fb:11:dc:09:95:51:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=e599ef8a-fb1d-413c-bbfe-0f0a040e8f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:db:e2:b6:36:34:54:ff:75:99:92:4c:85: fc:92:51:ca:eb:fd:9b:58:4b:39:74:91:80:e9:89: 76:93:ca:3b:b8:99:0b:60:9c:b2:f4:4d:35:d2:f8: 4e:a2:a9:30:0b:99:8b:e9:df:a7:b7:35:c7:91:b9: 84:31:f1:8e:9a:64:3e:c9:2d:ad:8f:ab:49:db:9e: e0:7a:33:7f:c4:5d:bb:3c:f0:aa:22:a2:8b:f8:16: 99:53:33:14:fb:0d:11:c6:5e:fb:2a:8b:b2:0a:f5: c9:05:d7:92:96:19:37:7b:81:d7:b7:4a:2b:b7:07: e2:58:31:e0:22:ae:c3:24:33:10:49:fe:83:0a:29: 47:7f:e8:d2:47:07:b5:25:c9:02:fb:a8:1a:52:93: b2:0a:32:c9:58:58:ba:c7:62:71:d5:2c:ed:37:ab: a3:ca:e3:7a:c7:8a:93:19:7f:3d:1f:78:c9:b4:95: 5c:86:2c:63:07:18:62:30:30:bd:b3:24:1f:5f:51: 35:c4:4b:ad:14:36:7d:1e:57:f1:ff:57:93:a3:02: b0:c7:95:5f:d1:d1:49:91:bc:4a:9e:89:c3:3b:29: 2b:50:8c:68:16:5f:a4:cc:86:88:74:e4:7c:9b:d4: 11:44:d4:39:55:60:b5:1d:c7:f9:e7:32:10:87:08: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:48:F6:08:0A:19:7F:57:B5:5C:21:84:AA:B4:E3:D8:45:01:42:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c733fd5-0677-3a02-b6df-28a5ae913bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:32:33:86:c6:b6:f3:be:b8:26:bc:81:4e:37:84:2e:b6:10: 2a:f7:c9:e7:6d:c3:4d:ae:38:15:17:f7:d1:6f:ac:07:04:b7: dc:ee:3d:b1:52:48:c9:8c:45:68:f5:b1:12:02:33:77:38:7c: 48:36:19:6b:f2:95:d1:c5:94:e2:16:c0:a4:69:50:dc:66:81: 09:5c:5b:ee:82:db:5d:d8:13:30:16:fe:73:92:fe:e2:31:4f: 6e:f4:ae:7c:d3:c9:96:f1:cb:ce:84:e2:65:99:18:cd:06:39: a4:b6:7c:39:87:a5:e1:8b:bf:3a:ed:47:6e:50:cc:7e:3c:d0: f8:a9:c5:3e:cb:af:ea:16:0c:e1:d4:e9:f7:26:de:b6:4d:38: 5b:3f:0e:b8:18:79:a6:4c:01:ea:71:56:99:f2:c9:c1:01:da: f3:2f:84:c2:d3:41:17:7d:4d:a3:8e:f4:eb:9a:7a:89:58:1e: 40:f1:12:dd:90:39:55:61:a5:f6:91:9e:44:29:43:ad:cd:3a: 72:0a:cb:32:b7:93:3a:87:72:26:70:3d:a4:f7:70:bd:94:c0: 29:71:0f:76:6f:7b:aa:51:a9:49:6d:08:41:64:4a:4d:c2:4b: c9:24:75:64:63:10:4e:a1:89:d8:77:fc:6b:c5:d4:41:6b:49: 7b:dd:c6:84 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcKUN+xHcCZVRHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTU5OWVmOGEtZmIxZC00MTNjLWJiZmUtMGYwYTA0MGU4ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJHb4rY2NFT/dZmSTIX8klHK6/2bWEs5dJGA 6Yl2k8o7uJkLYJyy9E010vhOoqkwC5mL6d+ntzXHkbmEMfGOmmQ+yS2tj6tJ257g ejN/xF27PPCqIqKL+BaZUzMU+w0Rxl77KouyCvXJBdeSlhk3e4HXt0ortwfiWDHg Iq7DJDMQSf6DCilHf+jSRwe1JckC+6gaUpOyCjLJWFi6x2Jx1SztN6ujyuN6x4qT GX89H3jJtJVchixjBxhiMDC9syQfX1E1xEutFDZ9Hlfx/1eTowKwx5Vf0dFJkbxK nonDOykrUIxoFl+kzIaIdOR8m9QRRNQ5VWC1Hcf55zIQhwiNyQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGpI9ggKGX9XtVwhhKq049hFAULKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGM3MzNmZDUtMDY3Ny0z YTAyLWI2ZGYtMjhhNWFlOTEzYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlMjOGxrbzvrgmvIFON4QuthAq98nnbcNNrjgV F/fRb6wHBLfc7j2xUkjJjEVo9bESAjN3OHxINhlr8pXRxZTiFsCkaVDcZoEJXFvu gttd2BMwFv5zkv7iMU9u9K5808mW8cvOhOJlmRjNBjmktnw5h6Xhi7867UduUMx+ PND4qcU+y6/qFgzh1On3Jt62TThbPw64GHmmTAHqcVaZ8snBAdrzL4TC00EXfU2j jvTrmnqJWB5A8RLdkDlVYaX2kZ5EKUOtzTpyCssyt5M6h3ImcD2k93C9lMApcQ92 b3uqUalJbQhBZEpNwkvJJHVkYxBOoYnYd/xrxdRBa0l73caE -----END CERTIFICATE-----Generated at Wed Nov 5 16:35:25 2025 by rpki-client