$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa File: 8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa (raw, json) Hash identifier: UCHJLbGGa1HKNuhFbZmiKj+WchgcD05QYYBRH0T2ZMA= Subject key identifier: 33:1F:37:25:4F:82:09:F6:2A:20:64:EF:86:16:C5:EB:CF:69:BF:41 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270D1FCD1FFBD4B1D7AC200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 396550 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:d1:fc:d1:ff:bd:4b:1d:7a:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=393039fc-9f08-43fa-be2d-feaa028f2d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:db:0d:3b:08:db:21:12:37:0b:69:06:c9:e6: 57:b5:8b:35:89:1d:a1:70:79:f6:d4:c5:4b:04:72: b3:70:b1:d3:de:83:85:0b:0c:12:40:b3:d0:a1:b7: a7:f8:f6:f4:ad:8c:8d:c2:1d:0d:82:c5:b1:a3:59: 9b:18:60:6d:8a:bd:8c:15:fc:af:f6:0a:00:dd:fc: 23:9d:cb:58:e4:ec:8b:77:fc:c3:e4:24:71:b1:27: c8:54:3f:23:7f:62:61:c2:a3:99:09:6c:65:f9:97: 1e:f3:29:d1:b8:86:2d:54:fc:74:02:a6:ef:37:b9: 91:b6:12:12:9e:35:aa:96:85:a4:5d:0b:c0:aa:b3: 67:ec:84:2f:80:ec:c6:ea:88:26:5e:87:f7:d8:63: da:94:e9:bb:b1:82:da:04:dd:d2:a3:47:3f:66:4e: 5a:76:c4:f8:09:82:86:ed:88:93:f1:67:5c:39:42: 08:43:16:20:6e:45:8c:9f:33:27:84:2a:8c:40:a3: 10:32:1f:6c:6c:a1:91:7d:4c:e6:13:91:0e:9a:2e: 78:b5:b7:b7:47:f2:40:d6:3c:02:ec:97:04:60:7b: 6e:82:c0:a8:4b:6b:2b:83:ce:a0:df:f4:f7:c9:a4: 8e:be:3a:72:af:9a:ee:ab:53:31:93:7e:2d:6c:db: 02:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1F:37:25:4F:82:09:F6:2A:20:64:EF:86:16:C5:EB:CF:69:BF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8efa3a51-cbe6-3a98-9357-1c4742a0f8cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:25:6f:51:f7:5c:3f:b6:a8:64:06:a3:87:8e:8a:12:06:7e: c5:9e:5e:23:fd:40:d5:5b:2d:34:8f:c7:7f:8e:6a:5e:5a:fd: 34:01:f9:24:a4:e7:15:c9:74:10:52:13:48:a5:1b:fb:62:07: d3:3a:68:82:fb:46:fd:24:05:cf:51:1e:3c:86:25:09:4d:79: 3f:d6:71:f5:7d:40:2e:e2:f6:b4:62:fb:f3:c1:3e:21:2b:21: 49:24:87:1c:74:75:a3:06:71:17:2f:05:49:7c:43:c4:f3:49: 06:f8:95:8c:f0:8e:88:5c:f5:b9:44:df:e9:aa:37:4a:32:57: b5:d2:3e:4d:49:b9:f1:81:74:60:a7:ed:36:c9:c7:77:74:35: 5f:61:04:7f:c7:82:cd:30:92:4a:42:b6:62:ff:3f:bc:34:a4: d0:4b:de:7e:84:32:3a:e4:08:08:89:45:0c:ac:33:08:c3:0c: 62:00:97:b8:5f:70:a0:3b:16:41:e7:41:cf:17:c5:40:a1:0f: d1:76:b1:7e:02:0b:76:f0:7e:1e:1c:6f:0a:ec:60:7a:c2:d0: 47:f3:a9:cf:46:73:f7:a6:66:81:e1:92:1d:eb:57:7b:ce:fd: 20:68:46:13:13:dc:9a:fe:bd:bf:f0:38:35:b5:70:07:90:f1: 02:2f:34:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcNH80f+9Sx16wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzkzMDM5ZmMtOWYwOC00M2ZhLWJlMmQtZmVhYTAyOGYyZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dsNOwjbIRI3C2kGyeZXtYs1iR2hcHn21MVL BHKzcLHT3oOFCwwSQLPQoben+Pb0rYyNwh0NgsWxo1mbGGBtir2MFfyv9goA3fwj nctY5OyLd/zD5CRxsSfIVD8jf2JhwqOZCWxl+Zce8ynRuIYtVPx0AqbvN7mRthIS njWqloWkXQvAqrNn7IQvgOzG6ogmXof32GPalOm7sYLaBN3So0c/Zk5adsT4CYKG 7YiT8WdcOUIIQxYgbkWMnzMnhCqMQKMQMh9sbKGRfUzmE5EOmi54tbe3R/JA1jwC 7JcEYHtugsCoS2srg86g3/T3yaSOvjpyr5ruq1Mxk34tbNsCgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDMfNyVPggn2KiBk74YWxevPab9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGVmYTNhNTEtY2JlNi0z YTk4LTkzNTctMWM0NzQyYTBmOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARJW9R91w/tqhkBqOHjooSBn7Fnl4j/UDVWy00 j8d/jmpeWv00AfkkpOcVyXQQUhNIpRv7YgfTOmiC+0b9JAXPUR48hiUJTXk/1nH1 fUAu4va0YvvzwT4hKyFJJIccdHWjBnEXLwVJfEPE80kG+JWM8I6IXPW5RN/pqjdK Mle10j5NSbnxgXRgp+02ycd3dDVfYQR/x4LNMJJKQrZi/z+8NKTQS95+hDI65AgI iUUMrDMIwwxiAJe4X3CgOxZB50HPF8VAoQ/RdrF+Agt28H4eHG8K7GB6wtBH86nP RnP3pmaB4ZId61d7zv0gaEYTE9ya/r2/8Dg1tXAHkPECLzQB -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:59 2025 by rpki-client