$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa File: ba06575f-6a44-3531-a6b2-4aa363ec1398.roa (raw, json) Hash identifier: ny+hz70vOCUmpsp233+lUyxrJgm7hRA5EKeSZn9/1i0= Subject key identifier: A8:5E:52:7B:87:9D:33:80:F8:03:E6:50:C6:AD:E8:E3:31:99:52:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D46D9789C3E5446515180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 396584 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:46:d9:78:9c:3e:54:46:51:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=42607ce0-a11a-48a3-992a-9145428df3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:a0:fc:0a:76:32:32:e7:cb:db:d1:a8:21: 22:ee:44:af:6c:2b:1b:12:eb:bf:11:12:98:8a:d3: c0:b1:d6:75:26:b5:2c:e1:90:9f:69:4c:89:09:c0: ba:59:8a:c9:a8:3a:95:0b:87:e2:a3:8e:79:d2:96: ca:c7:c1:6d:07:fb:bc:06:6b:e1:fc:45:65:97:ad: 4b:fe:e1:26:1f:d7:ff:dc:c8:89:6d:46:a9:4d:70: b0:70:85:b7:cb:94:0d:8b:21:55:77:ec:0a:e4:b9: 95:40:34:ed:61:6b:07:68:7a:42:28:7a:d0:6f:61: ef:76:79:43:80:25:36:cf:c5:c3:05:5a:ae:f3:d7: 7c:69:46:81:63:52:b1:d1:ec:42:60:d7:43:47:92: a0:3f:79:b6:cf:ec:ef:51:c0:44:4e:6b:13:34:2a: e4:db:6f:08:09:1e:50:07:86:3c:18:54:43:0b:01: 06:c0:0a:7a:4a:9a:8a:5a:78:e5:8a:91:d5:8e:08: e9:06:0f:43:a3:f4:04:cc:de:91:5d:be:f5:88:f9: 4d:58:cc:81:f4:e1:22:65:4f:e3:77:47:01:ed:cf: 3b:7e:fe:e8:85:32:ad:c5:f1:8c:ab:f4:be:90:f8: 71:77:83:7c:85:b4:c7:87:30:b8:7b:21:fc:f1:77: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:52:7B:87:9D:33:80:F8:03:E6:50:C6:AD:E8:E3:31:99:52:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6b:46:39:f7:84:59:14:62:15:de:fc:e9:6e:d9:fb:36:27: b1:a4:15:5b:88:9d:bf:55:ff:2b:79:31:c9:70:d6:b8:eb:0b: 42:ad:e6:c4:16:2b:ae:f8:96:0b:bf:38:df:17:6e:fc:81:a0: e0:d3:0c:9d:db:7b:d6:9c:c4:17:b6:63:1e:15:f1:95:dd:5b: 7d:c3:f0:8f:59:30:e8:d0:b3:16:7e:77:68:9f:7a:9d:5f:a0: 6b:9e:21:85:37:9d:27:bc:a9:f7:47:55:d5:7c:72:4a:85:b9: c7:6f:d0:69:7f:b1:74:6e:20:5c:4c:5a:a9:75:4d:94:f3:07: 20:7e:2b:80:b6:a1:ad:6a:47:b8:65:db:75:66:04:d1:a9:5d: 97:58:b5:0c:b3:ed:b3:d1:6a:08:1c:3a:83:eb:aa:d1:9d:c2: 25:a8:8d:91:ca:2f:d6:44:c1:0c:cf:38:d7:36:03:16:34:48: 4a:32:24:17:74:cf:81:36:a6:27:27:eb:82:55:86:f7:4d:e9: 72:6b:07:0b:9d:80:fe:16:ae:5f:05:e5:9c:95:ad:92:1e:7f: 67:71:92:f1:42:23:ed:95:92:6b:80:3e:08:cf:36:14:95:8c: 5f:60:9f:e3:2f:c1:d1:62:88:02:d5:8c:84:62:65:a3:d8:16: 17:a7:9d:67 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUbZeJw+VEZRUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDI2MDdjZTAtYTExYS00OGEzLTk5MmEtOTE0NTQyOGRmM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Gg/Ap2MjLny9vRqCEi7kSvbCsbEuu/ERKY itPAsdZ1JrUs4ZCfaUyJCcC6WYrJqDqVC4fio4550pbKx8FtB/u8Bmvh/EVll61L /uEmH9f/3MiJbUapTXCwcIW3y5QNiyFVd+wK5LmVQDTtYWsHaHpCKHrQb2HvdnlD gCU2z8XDBVqu89d8aUaBY1Kx0exCYNdDR5KgP3m2z+zvUcBETmsTNCrk228ICR5Q B4Y8GFRDCwEGwAp6SpqKWnjlipHVjgjpBg9Do/QEzN6RXb71iPlNWMyB9OEiZU/j d0cB7c87fv7ohTKtxfGMq/S+kPhxd4N8hbTHhzC4eyH88Xd9lwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKheUnuHnTOA+APmUMat6OMxmVJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEwNjU3NWYtNmE0NC0z NTMxLWE2YjItNGFhMzYzZWMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCRa0Y594RZFGIV3vzpbtn7NiexpBVbiJ2/Vf8r eTHJcNa46wtCrebEFiuu+JYLvzjfF278gaDg0wyd23vWnMQXtmMeFfGV3Vt9w/CP WTDo0LMWfndon3qdX6BrniGFN50nvKn3R1XVfHJKhbnHb9Bpf7F0biBcTFqpdU2U 8wcgfiuAtqGtake4Zdt1ZgTRqV2XWLUMs+2z0WoIHDqD66rRncIlqI2Ryi/WRMEM zzjXNgMWNEhKMiQXdM+BNqYnJ+uCVYb3TelyawcLnYD+Fq5fBeWcla2SHn9ncZLx QiPtlZJrgD4IzzYUlYxfYJ/jL8HRYogC1YyEYmWj2BYXp51n -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:32 2025 by rpki-client