$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/932a26f0-0e41-38b3-95ff-b139432d2bd2.roa File: 932a26f0-0e41-38b3-95ff-b139432d2bd2.roa (raw, json) Hash identifier: xlgq/fcxBxM/XAy8d0i000ctxrQfVPVEMIdt3k73fG0= Subject key identifier: BD:F5:0D:E6:2B:26:67:91:B0:17:AF:A6:9C:D8:C2:27:88:75:CA:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270DF1CC3D552A7AF078500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/932a26f0-0e41-38b3-95ff-b139432d2bd2.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 36617 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:df:1c:c3:d5:52:a7:af:07:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=fdcadbb6-01da-4bd4-9e5d-b01d604e6ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:0e:be:f5:97:59:86:33:59:3c:0b:97:ce: 2c:fc:0f:f3:ad:23:65:93:9e:fb:63:29:d0:0c:1b: 2b:df:ac:e6:2e:51:96:97:ab:7f:17:cf:7e:87:62: d6:ce:35:5b:6a:4c:2a:ac:c3:61:91:b7:42:2e:e0: 6e:fc:03:1e:79:3e:29:ad:54:81:27:93:c5:9c:62: eb:4d:d8:2b:8f:4b:87:0f:b2:ca:47:ea:97:a1:74: 50:76:44:40:64:f4:e5:31:53:0e:57:9c:7f:1b:eb: c3:29:62:7a:65:c8:d7:af:c7:44:f4:61:ef:3f:5e: f1:d2:cc:98:54:f0:93:c5:3a:43:43:3d:1c:96:5b: 91:e5:41:f7:3f:96:51:54:5c:82:8f:71:7d:d6:67: d3:c1:f1:69:c9:57:76:25:9a:54:95:b8:95:c5:9c: 49:3d:c3:cf:c1:77:fe:1c:87:a3:55:04:85:ff:66: f5:92:fd:25:ea:43:5c:9f:6c:af:4b:e7:80:99:76: 36:7b:22:eb:4e:ca:77:99:1b:cd:25:ab:10:ba:2e: 3b:9f:b9:7f:b3:78:7e:14:74:95:19:d4:73:44:96: 32:57:e4:ad:fc:76:20:79:4c:6b:f9:8e:31:d1:4b: 90:ad:71:80:50:db:02:d9:b4:97:4b:84:fd:03:e4: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:0D:E6:2B:26:67:91:B0:17:AF:A6:9C:D8:C2:27:88:75:CA:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/932a26f0-0e41-38b3-95ff-b139432d2bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:31:76:6c:ce:7e:64:6d:fb:a2:5d:8f:5b:a8:b1:57:a1:f9: b4:99:29:a9:e5:8d:66:2b:25:b7:31:d6:34:a4:d6:8c:4e:b6: 16:6b:9a:ea:3e:b2:6a:91:f1:55:5d:c7:2b:81:3c:9e:4a:1a: 5d:81:df:df:b6:c8:87:83:ed:1b:b4:00:7f:39:cd:26:92:09: 3f:be:bf:61:6f:52:c4:b7:65:f8:4a:2b:4b:8a:c5:69:17:a5: 20:cb:cb:1a:93:54:d2:1f:41:79:d5:83:ca:57:c1:de:ab:19: db:eb:a9:53:0a:b2:ae:d0:19:46:39:7c:aa:82:3a:db:84:a7: a2:2c:c9:56:a0:d5:d1:9b:99:3b:9b:29:65:c2:aa:9b:93:24: c2:83:cc:27:97:b0:64:ad:b5:a2:21:5a:e5:2b:16:f4:b4:6b: d9:a4:c7:54:95:65:0a:5d:a4:8e:bf:73:20:bd:ad:cb:e0:58: dc:9f:60:69:ce:25:8d:0d:68:1e:65:39:1a:46:72:d2:86:93: b5:f5:27:f9:94:1a:f2:53:cf:a3:44:c9:03:49:cb:24:4f:a1: 28:25:3b:b1:3f:d9:6c:44:1e:d6:c3:b4:22:b2:c9:e2:04:f9: c0:6b:7a:0d:3b:63:3c:b8:be:e3:98:8c:74:98:ba:b5:be:e3: ce:f7:ef:4c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcN8cw9VSp68HhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZmRjYWRiYjYtMDFkYS00YmQ0LTllNWQtYjAxZDYwNGU2ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDwOvvWXWYYzWTwLl84s/A/zrSNlk577YynQ DBsr36zmLlGWl6t/F89+h2LWzjVbakwqrMNhkbdCLuBu/AMeeT4prVSBJ5PFnGLr Tdgrj0uHD7LKR+qXoXRQdkRAZPTlMVMOV5x/G+vDKWJ6ZcjXr8dE9GHvP17x0syY VPCTxTpDQz0clluR5UH3P5ZRVFyCj3F91mfTwfFpyVd2JZpUlbiVxZxJPcPPwXf+ HIejVQSF/2b1kv0l6kNcn2yvS+eAmXY2eyLrTsp3mRvNJasQui47n7l/s3h+FHSV GdRzRJYyV+St/HYgeUxr+Y4x0UuQrXGAUNsC2bSXS4T9A+RPZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL31DeYrJmeRsBevppzYwieIdcphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTMyYTI2ZjAtMGU0MS0z OGIzLTk1ZmYtYjEzOTQzMmQyYmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5MXZszn5kbfuiXY9bqLFXofm0mSmp5Y1mKyW3 MdY0pNaMTrYWa5rqPrJqkfFVXccrgTyeShpdgd/ftsiHg+0btAB/Oc0mkgk/vr9h b1LEt2X4SitLisVpF6Ugy8sak1TSH0F51YPKV8Heqxnb66lTCrKu0BlGOXyqgjrb hKeiLMlWoNXRm5k7myllwqqbkyTCg8wnl7BkrbWiIVrlKxb0tGvZpMdUlWUKXaSO v3Mgva3L4Fjcn2BpziWNDWgeZTkaRnLShpO19Sf5lBryU8+jRMkDScskT6EoJTux P9lsRB7Ww7QissniBPnAa3oNO2M8uL7jmIx0mLq1vuPO9+9M -----END CERTIFICATE-----Generated at Wed Nov 5 16:22:01 2025 by rpki-client