$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa File: f09e69da-b086-3a26-b789-5a8b5ddee439.roa (raw, json) Hash identifier: crXWWRH9R+sUb/f5JdKKBQa7XVaYRs4+N/YazUTh8oM= Subject key identifier: 42:2A:14:59:28:73:39:34:07:C7:3C:A2:61:F7:50:65:34:81:36:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAEC7C62B5FA7F1367224F000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 2001:502:be98::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c6:2b:5f:a7:f1:36:72:24:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=5f6ee584-7e1f-48dd-8581-7e7eea0f6b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:35:96:5a:b5:b7:28:70:a9:c4:bb:e7:f0: 16:e7:1a:50:46:8c:6c:5e:98:4c:8f:86:30:a3:91: 32:5f:d8:9c:fd:9e:79:51:23:be:c2:df:3d:41:fd: 1e:e7:12:e8:8d:17:f6:08:fa:68:6d:29:6b:6f:91: 33:9d:70:77:10:63:1c:44:18:fc:82:83:03:65:13: d4:40:27:28:b9:82:10:01:af:71:f8:e8:83:fa:f9: f0:fd:17:d8:15:1a:b4:75:00:01:21:3b:2d:ed:d8: 81:ce:43:5b:33:71:37:d5:7f:51:ed:3f:02:60:3d: 46:e5:20:d1:3a:ad:ef:1b:a4:1a:c7:c8:45:b5:2c: e0:7c:40:b8:78:59:68:e7:28:f7:55:36:19:6b:e2: 79:67:47:21:61:ad:0b:dc:cd:c3:c5:ea:ad:ae:47: 61:44:2b:ae:69:28:6c:5a:20:16:80:71:3c:a8:c4: 0b:16:d0:7e:32:22:98:4c:99:69:00:5e:58:d9:5d: 70:9f:3a:49:ff:51:0a:a1:dc:41:a2:df:45:54:d1: e4:b0:6c:32:c9:3c:c2:28:99:a0:93:83:36:f5:ea: 7c:ed:d9:35:a8:bd:49:0c:e0:69:30:e3:13:5a:38: b2:5e:24:f4:10:ff:96:d0:9c:51:4d:9b:6e:d0:31: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2A:14:59:28:73:39:34:07:C7:3C:A2:61:F7:50:65:34:81:36:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:be98::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ac:57:3c:c1:a4:09:9f:97:ba:15:30:f0:77:69:14:ff:0c: e6:d8:7b:bd:a4:00:b6:d8:bf:b6:96:d6:ce:31:69:df:ee:df: a6:5c:48:e0:27:c5:f1:a6:b8:a3:6a:40:08:2c:45:67:4f:b6: 0c:57:99:43:fa:53:01:4b:d6:d0:59:56:50:a1:41:d1:5f:97: 40:0e:65:6f:08:9f:1b:bc:6c:88:58:15:00:b1:18:22:5d:3d: 05:a1:c5:bd:7a:99:1c:64:27:ab:a6:57:5c:80:d4:90:9d:9c: 53:8d:c8:6a:92:09:be:b0:b2:ee:0d:66:fb:93:25:cb:c4:0f: cd:36:f9:b8:b0:a1:84:c8:42:69:bc:38:55:43:02:32:e0:35: 0d:3d:ca:70:9e:19:2c:e0:28:f7:69:2b:7b:fc:1f:a5:16:46: db:15:82:dd:87:30:71:28:e8:f9:fd:97:d8:25:b2:08:5e:19: 99:68:ea:63:8c:e1:ad:7c:ca:c8:b2:b9:f2:3f:7e:b1:68:e0: 83:ff:55:a2:cc:0f:fa:87:bd:6a:cf:d2:cd:af:a4:a6:73:4c: 90:8a:14:c1:7a:e1:04:ef:ed:91:78:16:03:45:31:8a:21:b6: 3f:8b:49:3f:b2:09:09:44:8e:d2:73:58:a8:1b:7b:af:08:3c: 7b:14:d4:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuux8YrX6fxNnIk8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NWY2ZWU1ODQtN2UxZi00OGRkLTg1ODEtN2U3ZWVhMGY2YjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvc1llq1tyhwqcS75/AW5xpQRoxsXphMj4Yw o5EyX9ic/Z55USO+wt89Qf0e5xLojRf2CPpobSlrb5EznXB3EGMcRBj8goMDZRPU QCcouYIQAa9x+OiD+vnw/RfYFRq0dQABITst7diBzkNbM3E31X9R7T8CYD1G5SDR Oq3vG6Qax8hFtSzgfEC4eFlo5yj3VTYZa+J5Z0chYa0L3M3DxeqtrkdhRCuuaShs WiAWgHE8qMQLFtB+MiKYTJlpAF5Y2V1wnzpJ/1EKodxBot9FVNHksGwyyTzCKJmg k4M29ep87dk1qL1JDOBpMOMTWjiyXiT0EP+W0JxRTZtu0DEngQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEIqFFkoczk0B8c8omH3UGU0gTYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjA5ZTY5ZGEtYjA4Ni0z YTI2LWI3ODktNWE4YjVkZGVlNDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAr6Y MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKqsVzzBpAmfl7oVMPB3aRT/DObYe72kALbYv7aW1s4xad/u36Zc SOAnxfGmuKNqQAgsRWdPtgxXmUP6UwFL1tBZVlChQdFfl0AOZW8Inxu8bIhYFQCx GCJdPQWhxb16mRxkJ6umV1yA1JCdnFONyGqSCb6wsu4NZvuTJcvED802+biwoYTI Qmm8OFVDAjLgNQ09ynCeGSzgKPdpK3v8H6UWRtsVgt2HMHEo6Pn9l9glsgheGZlo 6mOM4a18ysiyufI/frFo4IP/VaLMD/qHvWrP0s2vpKZzTJCKFMF64QTv7ZF4FgNF MYohtj+LST+yCQlEjtJzWKgbe68IPHsU1CQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:46 2025 by rpki-client