$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa File: cbc90a26-c772-3421-9661-4d4303ec6b8f.roa (raw, json) Hash identifier: TKBF7PI1a1tHv4oddc3k2EPK3BvBy8ZOvLjCo3qneNQ= Subject key identifier: 38:5B:F2:57:2E:42:88:68:35:BC:FA:B0:FA:4A:98:22:3F:E7:FC:09 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D4D9F1CE881B1322FFC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 396616 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:4d:9f:1c:e8:81:b1:32:2f:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=012a6c23-358b-4b63-868f-81dcf90e91be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:14:95:09:1b:e2:c1:04:2a:ce:fd:0c:53:bb: f6:ca:9b:cf:5a:bf:65:8b:22:f3:59:e6:de:c8:54: 93:09:19:5f:f3:35:ef:3e:46:0a:4b:a9:74:9a:af: d1:c1:a5:ff:38:19:eb:6e:73:b5:8a:a7:66:77:be: 1a:de:69:9a:af:2a:12:bc:ac:ff:c6:a9:07:cd:c6: 79:45:30:2d:9d:a5:5e:e2:b8:f2:2c:1f:a5:e7:13: ca:3f:74:71:bb:c4:d6:50:95:b2:53:f6:11:34:19: d6:29:19:3a:e7:0a:6b:e9:44:e3:4b:c2:dc:c7:61: 97:a9:59:0b:f4:62:b4:cf:47:6b:72:35:7a:0d:6a: 1a:96:56:41:b3:9c:47:82:03:7a:87:4d:09:f6:6f: 57:86:d4:00:3c:9b:81:52:59:d4:7c:a2:e1:77:5c: a1:7c:58:9d:13:a5:a2:77:62:6a:ee:e0:89:0d:84: a9:38:8e:57:dd:7c:a8:bd:b0:60:46:82:59:6e:97: cd:6b:a5:dc:f6:66:f1:7f:58:c2:ab:57:a5:4b:12: 26:74:75:ba:2b:3b:6f:15:c1:92:45:79:6e:de:fc: 04:e7:6f:48:81:03:a2:b0:53:47:f9:cf:d7:a9:01: e2:ea:e5:fc:d5:6a:73:1b:86:15:f9:29:2e:55:d7: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5B:F2:57:2E:42:88:68:35:BC:FA:B0:FA:4A:98:22:3F:E7:FC:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbc90a26-c772-3421-9661-4d4303ec6b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b8:54:91:f1:c7:8b:a9:96:e0:24:13:a0:71:e4:1f:96:31: 5b:1e:0c:7c:aa:b9:a5:24:96:42:02:ab:37:27:f2:6f:33:9c: 9f:8c:03:ce:4e:14:30:30:5b:fe:bb:a5:e7:95:d6:d2:e1:f4: 77:cc:01:e6:3e:12:d0:c2:6b:dc:e5:bf:b9:f8:f5:7f:56:2e: f7:d4:68:7e:fa:3b:fa:6d:96:14:03:f1:18:65:53:49:51:69: d6:d7:04:cc:83:45:c0:ab:cc:d5:12:44:0d:ab:c8:34:52:5a: 3b:37:c2:f9:6f:8b:ef:e3:b4:c5:21:ff:9c:12:b4:65:63:5a: 02:72:cd:a7:9b:17:4c:2f:d4:9d:19:89:de:4c:c0:9d:2d:86: 09:44:99:d2:ce:66:15:10:aa:e0:de:3d:de:e5:d0:01:de:3c: 94:88:c3:d6:0d:e1:a1:28:c7:01:c6:04:98:99:2f:c7:68:34: 8d:d9:c3:16:b8:61:bb:13:93:28:41:0c:ef:66:d2:57:0e:1c: cf:a9:b1:b1:4b:a6:5e:f2:fc:85:6f:3e:3f:01:f9:70:84:fe: f6:b4:b1:1c:4c:6a:28:d6:77:b5:44:ce:0d:30:e8:09:18:4a: 7d:8b:08:96:cd:53:34:58:7e:70:8c:85:b4:02:66:59:2e:70: 43:02:76:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jU2fHOiBsTIv/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDEyYTZjMjMtMzU4Yi00YjYzLTg2OGYtODFkY2Y5MGU5MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphSVCRviwQQqzv0MU7v2ypvPWr9liyLzWebe yFSTCRlf8zXvPkYKS6l0mq/RwaX/OBnrbnO1iqdmd74a3mmaryoSvKz/xqkHzcZ5 RTAtnaVe4rjyLB+l5xPKP3Rxu8TWUJWyU/YRNBnWKRk65wpr6UTjS8Lcx2GXqVkL 9GK0z0drcjV6DWoallZBs5xHggN6h00J9m9XhtQAPJuBUlnUfKLhd1yhfFidE6Wi d2Jq7uCJDYSpOI5X3XyovbBgRoJZbpfNa6Xc9mbxf1jCq1elSxImdHW6KztvFcGS RXlu3vwE529IgQOisFNH+c/XqQHi6uX81WpzG4YV+SkuVddhjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDhb8lcuQohoNbz6sPpKmCI/5/wJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2JjOTBhMjYtYzc3Mi0z NDIxLTk2NjEtNGQ0MzAzZWM2YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsuFSR8ceLqZbgJBOgceQfljFbHgx8qrmlJJZC Aqs3J/JvM5yfjAPOThQwMFv+u6XnldbS4fR3zAHmPhLQwmvc5b+5+PV/Vi731Gh+ +jv6bZYUA/EYZVNJUWnW1wTMg0XAq8zVEkQNq8g0Ulo7N8L5b4vv47TFIf+cErRl Y1oCcs2nmxdML9SdGYneTMCdLYYJRJnSzmYVEKrg3j3e5dAB3jyUiMPWDeGhKMcB xgSYmS/HaDSN2cMWuGG7E5MoQQzvZtJXDhzPqbGxS6Ze8vyFbz4/AflwhP72tLEc TGoo1ne1RM4NMOgJGEp9iwiWzVM0WH5wjIW0AmZZLnBDAnZU -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:11 2025 by rpki-client