$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb02b090-a739-3970-8df1-845d0e185476.roa File: fb02b090-a739-3970-8df1-845d0e185476.roa (raw, json) Hash identifier: mMWzYQaYlCdUs84XDdyVYe1U0exxwCAuL6sIf8ZSQ7Q= Subject key identifier: 9B:8F:C8:97:4A:13:73:0E:DA:84:BB:7D:37:7E:C0:FA:98:F5:23:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB88D4C1B82D6F71810456E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb02b090-a739-3970-8df1-845d0e185476.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 396540 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:4c:1b:82:d6:f7:18:10:45:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=04a624fc-bac7-4ccd-9065-7afe13a240d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:fb:57:23:ac:4e:3e:e8:53:e4:08:7c:13: 8f:62:7f:50:9d:c5:2a:9c:e8:70:37:c9:87:99:75: a0:9a:eb:6d:01:8a:3c:e0:ae:a6:a9:04:fd:a5:92: 57:b5:ad:7d:d5:2d:e6:4d:37:23:d0:83:ba:de:8a: 2c:d5:94:9e:e3:95:07:48:42:ff:78:68:48:6a:b7: 48:29:c0:65:1d:21:60:99:9a:1b:0d:78:78:6a:5e: 95:37:f8:d0:38:32:33:6b:7c:34:56:fc:3c:08:ad: d8:77:d3:67:9d:bc:62:fd:56:1c:2b:0b:a5:3e:3f: 76:af:c1:e5:62:30:9f:2c:23:ee:85:56:cb:1b:ab: 8d:3d:73:83:f2:07:4e:6e:ea:7a:8b:64:dd:2c:23: fc:04:f0:78:01:15:fd:1e:93:7d:d6:e3:85:99:fe: 21:11:93:63:74:28:3a:d0:6f:85:23:c2:97:dc:bf: 55:c2:57:6f:b9:d4:64:ca:20:70:c3:69:ed:44:6d: c2:5e:96:e6:4d:bb:73:9f:50:37:18:9c:1e:b1:1a: 52:53:52:00:72:31:85:17:74:ef:f1:ad:e5:39:8d: c8:73:6a:a2:40:c3:24:d7:d5:96:05:ea:c3:66:b0: 1d:e8:f2:d5:28:54:0e:e4:bc:3d:21:0a:d6:91:a0: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8F:C8:97:4A:13:73:0E:DA:84:BB:7D:37:7E:C0:FA:98:F5:23:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb02b090-a739-3970-8df1-845d0e185476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3f:bb:7b:1f:04:c0:84:8b:cd:a5:28:76:eb:33:61:78:0e: f1:8c:ff:d2:43:e6:7e:2f:54:6c:a2:37:aa:29:dc:91:28:65: 31:5f:e8:9d:57:69:20:cd:c5:c0:ca:51:72:b3:46:a4:27:6d: 99:d9:32:ab:37:8e:f7:ca:0f:da:44:28:e2:1d:22:46:0e:1e: 02:4c:5d:57:68:49:29:3b:48:63:45:d3:9b:45:32:9a:d9:8e: be:2a:68:ef:b7:7d:6e:3b:94:34:e7:4d:82:9e:7a:64:f8:b3: aa:8d:29:a8:f7:d8:10:46:a5:14:7a:e4:6f:09:a9:da:1b:d5: eb:f4:33:85:39:fb:ad:ba:ff:f6:f9:b4:85:e8:52:b4:ac:96: 77:dc:e6:dd:9b:d2:22:94:62:09:60:14:f6:69:d6:cd:ef:f0: 8e:d3:88:32:18:39:cd:25:0b:04:c2:03:9f:c0:f8:c6:83:04: 05:e2:7b:81:e8:5a:79:30:f1:7b:4e:ba:38:a1:56:87:dd:d9: 95:06:06:b3:ef:c7:82:bc:01:26:d2:c0:96:82:17:40:b0:17: 1c:0b:f4:5a:df:d1:0f:1e:5b:35:fb:89:1b:e9:50:65:93:c0: 57:e5:ce:f2:02:e3:6d:6a:10:42:d8:a9:3e:06:cf:b3:60:ad: ca:68:1d:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUwbgtb3GBBFboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDRhNjI0ZmMtYmFjNy00Y2NkLTkwNjUtN2FmZTEzYTI0MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/b7VyOsTj7oU+QIfBOPYn9QncUqnOhwN8mH mXWgmuttAYo84K6mqQT9pZJXta191S3mTTcj0IO63oos1ZSe45UHSEL/eGhIardI KcBlHSFgmZobDXh4al6VN/jQODIza3w0Vvw8CK3Yd9Nnnbxi/VYcKwulPj92r8Hl YjCfLCPuhVbLG6uNPXOD8gdObup6i2TdLCP8BPB4ARX9HpN91uOFmf4hEZNjdCg6 0G+FI8KX3L9VwldvudRkyiBww2ntRG3CXpbmTbtzn1A3GJwesRpSU1IAcjGFF3Tv 8a3lOY3Ic2qiQMMk19WWBerDZrAd6PLVKFQO5Lw9IQrWkaD0ZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJuPyJdKE3MO2oS7fTd+wPqY9SPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmIwMmIwOTAtYTczOS0z OTcwLThkZjEtODQ1ZDBlMTg1NDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAfP7t7HwTAhIvNpSh26zNheA7xjP/SQ+Z+L1Rs ojeqKdyRKGUxX+idV2kgzcXAylFys0akJ22Z2TKrN473yg/aRCjiHSJGDh4CTF1X aEkpO0hjRdObRTKa2Y6+Kmjvt31uO5Q0502Cnnpk+LOqjSmo99gQRqUUeuRvCana G9Xr9DOFOfutuv/2+bSF6FK0rJZ33Obdm9IilGIJYBT2adbN7/CO04gyGDnNJQsE wgOfwPjGgwQF4nuB6Fp5MPF7Tro4oVaH3dmVBgaz78eCvAEm0sCWghdAsBccC/Ra 39EPHls1+4kb6VBlk8BX5c7yAuNtahBC2Kk+Bs+zYK3KaB2O -----END CERTIFICATE-----Generated at Wed Nov 5 06:09:44 2025 by rpki-client