$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdfcedba-ab31-35fb-b0d2-97d0c84a93d0.roa File: bdfcedba-ab31-35fb-b0d2-97d0c84a93d0.roa (raw, json) Hash identifier: lqDO7vkrT5uAsHUL+ASW96eEan9IkfTZZmGIomgvh8c= Subject key identifier: 6A:F9:7B:CB:01:AD:29:2E:CC:F6:60:2E:12:6D:E0:2C:8C:4F:7E:75 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D4C7126DDF86C2CFEE3C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdfcedba-ab31-35fb-b0d2-97d0c84a93d0.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 27544 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:4c:71:26:dd:f8:6c:2c:fe:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=ee0c90da-c209-4e63-8a27-c3886719d9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:64:a8:91:b2:5b:00:9d:ef:ce:9f:e5:0d: 22:e8:41:69:f1:74:59:73:63:80:e3:1a:3d:04:4b: 36:1b:ed:a6:db:ce:e1:66:17:96:a1:9b:b2:67:96: f3:6c:c4:a6:66:fb:ce:60:0d:d8:95:19:fb:7a:51: 60:42:7e:3d:dc:1d:2b:1a:0b:6f:ee:6f:d7:fb:a3: 5c:41:08:36:32:61:d1:9d:23:d9:d7:e7:01:ec:0a: c4:7e:3b:4f:42:33:cc:73:f9:0b:25:a0:49:54:bc: b1:73:e2:e1:34:ba:f3:ec:8d:d8:77:fa:6d:18:a6: bc:b1:66:72:4f:99:dc:64:9f:4e:b4:9f:de:c8:85: ee:c4:ad:e9:46:cc:3e:10:8e:c1:5f:9f:5a:de:94: c4:91:1b:4c:65:98:64:f1:36:24:2e:73:8e:b9:f0: 59:53:63:fa:ac:be:8a:49:94:97:20:90:92:d1:58: 8a:59:1a:ac:5e:70:0f:79:51:a6:ae:7c:ca:1a:5e: 9e:0b:97:63:98:d9:3c:ff:79:a2:4c:84:04:53:1e: 86:1d:b8:42:e6:78:d1:04:85:f2:2e:72:3e:2e:06: 58:1d:4b:47:ae:2a:cd:51:5b:1f:4d:a2:b8:4e:cd: cb:5d:47:53:2c:f7:84:fe:71:da:9f:06:25:a2:d8: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F9:7B:CB:01:AD:29:2E:CC:F6:60:2E:12:6D:E0:2C:8C:4F:7E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdfcedba-ab31-35fb-b0d2-97d0c84a93d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:84:1e:ab:6a:b4:b3:b0:52:b0:66:82:94:11:87:b6:4a:87: e9:53:71:c2:07:05:65:75:57:cc:72:97:9c:27:6f:88:6f:d8: ae:d0:e0:a0:83:1e:e6:35:1d:86:e8:4a:2d:28:de:d1:65:e8: 84:d1:d3:cc:a0:cd:03:64:4a:89:24:17:88:0c:dc:76:cd:19: ad:5d:ae:98:13:85:68:01:e4:75:7a:e5:57:16:8a:40:d3:08: 0e:25:fb:a3:3e:b2:bb:b1:d5:0d:19:06:08:c1:c8:55:82:8b: d1:bd:63:a4:53:5c:c1:ba:30:ad:fd:63:90:8f:91:58:d3:f5: bd:9d:08:1f:45:a5:0e:95:26:7b:68:14:90:0d:75:3e:2e:3d: 8b:64:66:48:e3:e3:f1:fb:11:6e:f8:2b:2a:20:60:04:b0:78: 6a:93:c4:06:0a:fb:13:a6:8e:a9:7e:02:b1:ac:46:b6:5b:31: aa:1f:6b:b6:57:8a:5e:7a:5f:9f:01:2f:8e:db:10:42:35:6f: ca:47:b1:33:95:4c:88:25:30:22:4b:69:69:55:9f:17:66:6d: b4:68:98:34:03:e3:cd:1a:18:bf:12:b0:31:23:ee:d9:fe:ab: 4d:ed:96:c8:f4:b1:d9:36:cd:3f:ff:03:34:7e:c9:34:17:e6: 09:d2:b1:5a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUxxJt34bCz+48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWUwYzkwZGEtYzIwOS00ZTYzLThhMjctYzM4ODY3MTlkOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhapkqJGyWwCd786f5Q0i6EFp8XRZc2OA4xo9 BEs2G+2m287hZheWoZuyZ5bzbMSmZvvOYA3YlRn7elFgQn493B0rGgtv7m/X+6Nc QQg2MmHRnSPZ1+cB7ArEfjtPQjPMc/kLJaBJVLyxc+LhNLrz7I3Yd/ptGKa8sWZy T5ncZJ9OtJ/eyIXuxK3pRsw+EI7BX59a3pTEkRtMZZhk8TYkLnOOufBZU2P6rL6K SZSXIJCS0ViKWRqsXnAPeVGmrnzKGl6eC5djmNk8/3miTIQEUx6GHbhC5njRBIXy LnI+LgZYHUtHrirNUVsfTaK4Ts3LXUdTLPeE/nHanwYloth6JQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGr5e8sBrSkuzPZgLhJt4CyMT351MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmRmY2VkYmEtYWIzMS0z NWZiLWIwZDItOTdkMGM4NGE5M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAohB6rarSzsFKwZoKUEYe2SofpU3HCBwVldVfM cpecJ2+Ib9iu0OCggx7mNR2G6EotKN7RZeiE0dPMoM0DZEqJJBeIDNx2zRmtXa6Y E4VoAeR1euVXFopA0wgOJfujPrK7sdUNGQYIwchVgovRvWOkU1zBujCt/WOQj5FY 0/W9nQgfRaUOlSZ7aBSQDXU+Lj2LZGZI4+Px+xFu+CsqIGAEsHhqk8QGCvsTpo6p fgKxrEa2WzGqH2u2V4peel+fAS+O2xBCNW/KR7EzlUyIJTAiS2lpVZ8XZm20aJg0 A+PNGhi/ErAxI+7Z/qtN7ZbI9LHZNs0//wM0fsk0F+YJ0rFa -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:57 2025 by rpki-client