$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa File: d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa (raw, json) Hash identifier: c7YM9b1eiYm7eI/lC7Z2ytA9//xyiYdv6LAt1VAJra8= Subject key identifier: B9:CF:6E:C1:B3:01:9C:EE:5E:ED:24:D6:55:BF:30:7C:2E:F0:28:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270BD18FFCBFFDE0FED8F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 396596 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:bd:18:ff:cb:ff:de:0f:ed:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=1e546973-2d10-4934-a690-b38157c5b79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:4c:44:e9:8b:5f:4f:dd:02:f9:ba:06:a6: 6a:7d:d8:8a:40:04:0b:73:d5:a1:dc:0c:52:bf:b8: 3b:2e:de:22:f9:f4:44:32:69:48:8a:06:62:b8:a0: de:fa:c5:26:e2:f2:02:85:f5:1e:57:35:b2:d2:3a: d5:c2:30:93:32:5b:05:db:8b:ba:da:61:03:7a:a7: 21:d8:84:ca:a6:1c:b3:3e:ae:4c:d5:3e:5b:ed:92: 18:cd:04:31:e2:e9:96:f8:ac:ef:ee:d4:f4:9b:46: fb:d5:0f:57:b3:7d:e7:0f:c7:51:7e:d6:fc:1c:5e: ad:9e:34:ea:db:54:b1:79:a4:a1:27:2d:a6:fd:27: ac:86:2a:91:07:be:b0:bf:a2:de:01:a9:0d:65:ac: bd:60:fa:fa:ce:3f:39:1e:19:46:08:09:4a:2b:76: 69:6a:7a:a1:73:32:03:18:7a:d3:a7:5c:74:ff:c8: 0a:8d:18:e6:8b:33:77:51:46:a8:7d:22:b4:cf:75: c4:23:b6:56:c7:59:d9:c4:35:ab:ab:b0:51:6d:96: 1c:a5:5b:83:09:48:c4:7f:b1:12:0f:a3:99:48:b5: 8b:05:ec:ff:65:47:89:b2:1f:da:61:03:d2:78:f9: 11:d8:89:f8:2d:c9:da:93:2d:bd:0d:77:a5:28:02: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CF:6E:C1:B3:01:9C:EE:5E:ED:24:D6:55:BF:30:7C:2E:F0:28:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d67f9c11-9d78-3b93-8e5f-36da655f8d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f7:42:ec:60:3a:7f:ac:4b:c6:5a:df:34:2c:79:bd:18:09: fd:a3:54:fd:36:41:ac:9c:63:f6:8a:33:03:0b:0d:ad:26:00: fe:ff:dd:e1:c7:b8:af:d4:ea:4f:22:81:fb:26:cc:a5:3d:a9: e0:7b:7d:ea:9a:b3:a8:4b:ef:67:c1:ea:b9:9e:2e:5f:a7:aa: a7:b7:16:67:95:e8:41:d3:ce:e8:bb:15:01:67:dc:5c:45:97: 83:ab:f7:75:75:94:83:37:d7:6f:ba:e6:a8:09:9b:75:4c:dc: dd:25:9b:f7:4d:da:89:37:02:d0:07:80:93:14:04:cb:ea:8c: 46:1a:b8:eb:4d:ab:e6:f8:7c:7e:6e:2d:5e:95:79:75:9b:b1: d5:c3:02:01:c6:fb:0f:c7:6b:9c:af:55:e9:4d:b0:b1:6c:3b: 15:35:1d:ab:ef:d1:8c:40:71:fb:d8:e6:71:0e:5d:ca:ba:a3: 43:ab:56:be:a5:0a:0f:c0:12:a2:8c:c2:58:94:59:af:fa:6b: ce:d8:89:09:99:e5:74:51:89:79:a2:b4:d6:67:18:15:ce:e7: f2:a6:f2:57:77:b8:2c:8f:46:d8:7c:07:64:40:6a:cf:89:83: f4:5b:57:aa:ab:8c:eb:33:f3:87:89:53:89:2e:46:2b:fa:de: 0a:b5:13:98 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcL0Y/8v/3g/tj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MWU1NDY5NzMtMmQxMC00OTM0LWE2OTAtYjM4MTU3YzViNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLpMROmLX0/dAvm6BqZqfdiKQAQLc9Wh3AxS v7g7Lt4i+fREMmlIigZiuKDe+sUm4vIChfUeVzWy0jrVwjCTMlsF24u62mEDeqch 2ITKphyzPq5M1T5b7ZIYzQQx4umW+Kzv7tT0m0b71Q9Xs33nD8dRftb8HF6tnjTq 21SxeaShJy2m/SeshiqRB76wv6LeAakNZay9YPr6zj85HhlGCAlKK3ZpanqhczID GHrTp1x0/8gKjRjmizN3UUaofSK0z3XEI7ZWx1nZxDWrq7BRbZYcpVuDCUjEf7ES D6OZSLWLBez/ZUeJsh/aYQPSePkR2In4Lcnaky29DXelKAJIRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLnPbsGzAZzuXu0k1lW/MHwu8CiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDY3ZjljMTEtOWQ3OC0z YjkzLThlNWYtMzZkYTY1NWY4ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAc90LsYDp/rEvGWt80LHm9GAn9o1T9NkGsnGP2 ijMDCw2tJgD+/93hx7iv1OpPIoH7JsylPange33qmrOoS+9nweq5ni5fp6qntxZn lehB087ouxUBZ9xcRZeDq/d1dZSDN9dvuuaoCZt1TNzdJZv3TdqJNwLQB4CTFATL 6oxGGrjrTavm+Hx+bi1elXl1m7HVwwIBxvsPx2ucr1XpTbCxbDsVNR2r79GMQHH7 2OZxDl3KuqNDq1a+pQoPwBKijMJYlFmv+mvO2IkJmeV0UYl5orTWZxgVzufypvJX d7gsj0bYfAdkQGrPiYP0W1eqq4zrM/OHiVOJLkYr+t4KtROY -----END CERTIFICATE-----Generated at Wed Nov 5 16:11:20 2025 by rpki-client