$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa File: df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa (raw, json) Hash identifier: Yf4R1hfJzcPKg0CTgq/B7PGwSH0+cDzPdmtBEVHDqbA= Subject key identifier: F3:39:8C:83:01:5F:C7:00:40:AD:AB:22:F2:B3:E7:2F:AD:7F:DD:B9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270B1A43C6AC96782343200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 396587 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:b1:a4:3c:6a:c9:67:82:34:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=30f860f9-a75a-4a78-b350-c8a6f7bfb3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cf:18:63:fe:2f:cc:28:9c:0b:30:62:40:4e: dc:bd:8d:24:b0:4d:93:20:da:4f:82:4c:5a:db:b4: 95:28:10:af:2a:6e:a1:f6:3e:5c:55:a0:27:1b:f9: 29:4d:69:31:c9:e3:69:49:10:ac:04:8d:ab:0b:a9: 0b:de:30:28:66:99:3c:89:94:d8:4c:03:2e:26:f0: a7:e4:bf:0f:38:f2:98:d6:b1:18:02:83:ef:a3:ea: 90:e4:99:99:77:88:4d:9d:70:9a:e4:c4:b2:ca:2d: ba:29:dc:28:3c:45:fc:e3:a7:86:3b:79:4d:7b:0b: 08:a4:32:a2:81:1d:e1:96:b2:cc:51:dd:3b:02:c8: a8:78:6e:ff:ee:81:ef:9f:81:40:c5:b6:56:fc:4e: f2:9d:af:19:3b:f6:de:36:cf:9f:5d:95:60:8b:9f: 5c:5c:9c:2e:6c:a3:19:b6:39:ec:60:78:76:57:b1: 4b:f2:5f:65:ba:68:12:17:b8:67:2c:ac:0e:ee:88: 54:76:00:c9:37:a8:cc:ac:ac:b1:27:16:15:c9:e1: d4:f5:af:cb:a2:cd:29:49:b4:86:a2:6b:6f:e5:c0: c1:4f:98:60:07:cf:20:62:66:38:1a:1d:92:41:e3: aa:98:9a:11:a8:cd:b8:56:0b:b7:10:a7:06:ea:6a: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:39:8C:83:01:5F:C7:00:40:AD:AB:22:F2:B3:E7:2F:AD:7F:DD:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fe:25:fc:a8:64:39:3d:18:d3:d2:41:bb:1e:26:9b:6a:b5: 01:39:55:3c:f7:d8:2e:50:a8:7b:98:49:d6:f5:13:a9:71:2c: 3d:a4:cf:1d:46:d6:05:b6:a0:73:8f:53:e2:7f:7c:f8:6e:a9: cb:f5:6f:ba:fb:0b:0e:9a:48:c7:33:43:e0:34:08:3b:01:06: 37:e3:cd:9f:99:2d:b1:7e:12:39:9b:4c:73:fa:74:ba:1f:f3: 13:f7:91:87:a7:0b:5b:0c:03:55:e9:6f:6c:49:b5:34:25:fd: c3:6e:07:d1:bd:18:c4:72:9e:5b:78:47:c2:c9:e9:05:04:79: f1:09:e8:3d:0a:88:a4:74:8a:1c:e6:5f:f8:b1:b7:a0:37:1c: e7:55:a9:9a:32:30:e9:d4:ae:14:7a:55:10:17:aa:3b:a9:51: 97:24:c0:49:d7:13:e5:a7:98:61:09:69:a9:b4:d5:f6:30:d8: 27:85:0e:3a:1b:c2:a7:c8:c4:87:8d:ab:70:2f:22:52:02:32: 50:de:3f:95:52:84:7c:ca:d2:d4:ca:e1:a7:41:c9:db:1e:09: d0:2c:b4:4d:22:8c:54:23:ad:83:dc:1c:ba:16:78:ba:18:09: 6f:35:c2:f5:4c:18:9e:f5:6c:27:8b:b4:d4:ec:3e:1b:b1:27: b3:3e:43:35 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcLGkPGrJZ4I0MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzBmODYwZjktYTc1YS00YTc4LWIzNTAtYzhhNmY3YmZiM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM8YY/4vzCicCzBiQE7cvY0ksE2TINpPgkxa 27SVKBCvKm6h9j5cVaAnG/kpTWkxyeNpSRCsBI2rC6kL3jAoZpk8iZTYTAMuJvCn 5L8POPKY1rEYAoPvo+qQ5JmZd4hNnXCa5MSyyi26KdwoPEX846eGO3lNewsIpDKi gR3hlrLMUd07AsioeG7/7oHvn4FAxbZW/E7yna8ZO/beNs+fXZVgi59cXJwubKMZ tjnsYHh2V7FL8l9lumgSF7hnLKwO7ohUdgDJN6jMrKyxJxYVyeHU9a/Los0pSbSG omtv5cDBT5hgB88gYmY4Gh2SQeOqmJoRqM24Vgu3EKcG6mrc1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPM5jIMBX8cAQK2rIvKz5y+tf925MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGYwZmQzYjMtYzViOS0z NjBhLWFmMWQtMmU4Njg5M2EzZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAC/iX8qGQ5PRjT0kG7HiabarUBOVU899guUKh7 mEnW9ROpcSw9pM8dRtYFtqBzj1Pif3z4bqnL9W+6+wsOmkjHM0PgNAg7AQY3482f mS2xfhI5m0xz+nS6H/MT95GHpwtbDANV6W9sSbU0Jf3DbgfRvRjEcp5beEfCyekF BHnxCeg9CoikdIoc5l/4sbegNxznVamaMjDp1K4UelUQF6o7qVGXJMBJ1xPlp5hh CWmptNX2MNgnhQ46G8KnyMSHjatwLyJSAjJQ3j+VUoR8ytLUyuGnQcnbHgnQLLRN IoxUI62D3By6Fni6GAlvNcL1TBie9Wwni7TU7D4bsSezPkM1 -----END CERTIFICATE-----Generated at Wed Nov 5 19:44:34 2025 by rpki-client