$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1018dce4-1105-3b5e-ab3a-4779ce3b90e1.roa File: 1018dce4-1105-3b5e-ab3a-4779ce3b90e1.roa (raw, json) Hash identifier: WPUcvu1eJNPw1qOvzsXOVuaLPjJEx4ETPxaiYON7WuQ= Subject key identifier: B2:FE:32:56:5F:85:E3:91:B1:1C:7B:C9:C0:34:DE:BA:45:3F:F1:28 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9872495007F2E6322D358B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1018dce4-1105-3b5e-ab3a-4779ce3b90e1.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 397210 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:49:50:07:f2:e6:32:2d:35:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=15481a29-096e-4df0-aad6-37df5e685d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:c9:73:b7:a0:30:ed:87:ed:6d:03:0b:ac: ff:03:09:ad:b0:ca:36:7d:28:54:33:03:ae:74:a5: d2:c9:c7:d4:c9:b6:3e:da:37:0a:e4:0a:8b:8d:39: 4c:99:ba:ca:6f:bc:a0:1f:fb:8a:0c:58:60:d0:45: 12:11:6b:a7:08:2c:08:51:8c:b9:13:33:91:3a:fa: 35:4c:73:99:7d:3f:10:87:b4:01:fc:70:1e:c2:69: f0:a8:32:3f:79:af:b0:ce:f4:08:80:1a:db:53:12: 89:f4:02:be:93:20:36:94:46:7f:a2:fc:a1:20:1b: 1e:00:0a:ee:f8:f1:d4:b5:f5:61:d3:0e:90:b8:00: 43:68:3d:ea:1e:d1:83:dc:06:74:c8:50:2a:1a:ab: 8f:3b:42:53:fd:1d:d1:9f:f4:5f:07:00:66:c2:2c: fc:58:d7:4d:1f:ec:fc:99:b9:7a:e2:83:64:87:76: a2:9b:e5:ad:6f:e7:ab:54:9a:d8:2f:73:24:66:35: bf:3a:05:7f:54:ce:43:ce:3e:43:3e:80:6a:d0:82: 2f:c1:2c:e5:39:69:d5:ac:e1:f0:86:94:3c:98:17: bd:01:3d:34:de:17:fd:53:8f:4e:39:78:1f:2f:5e: 35:b5:6d:c5:d6:79:65:b5:d1:40:88:15:b9:9c:6f: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FE:32:56:5F:85:E3:91:B1:1C:7B:C9:C0:34:DE:BA:45:3F:F1:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1018dce4-1105-3b5e-ab3a-4779ce3b90e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5b:1f:3e:6a:cd:da:f5:a0:96:7e:b9:27:7c:24:8e:06:64: b9:4a:63:53:7d:db:4d:29:09:dd:79:ef:92:55:70:70:a0:c4: c0:79:0d:06:bb:b5:89:37:e4:72:d2:2e:3e:61:ae:b4:22:44: 89:23:c8:76:6a:f4:8a:7b:3e:e8:fe:1d:da:f4:6d:1c:81:7b: 83:80:23:00:ce:69:2e:07:04:97:48:75:61:be:3c:db:e9:d1: 2d:2f:7c:42:55:80:26:a3:16:ac:76:c7:4e:c7:50:6f:a9:50: f3:2a:ee:a2:81:cd:8c:b2:d9:fc:f5:bc:d7:4b:c3:ef:b8:f3: 70:aa:54:44:d7:0a:1d:fd:da:9d:8c:82:f0:32:41:24:54:6f: a0:6a:d3:9a:1c:3a:0a:2f:ec:55:ae:52:f1:82:10:3b:30:56: f8:8f:67:d5:fc:8e:d5:ca:69:01:01:4d:54:f4:de:16:f8:c6: a6:ae:1a:22:00:5f:68:b5:91:0e:bc:d9:90:d6:a4:3b:bd:fe: 51:98:69:10:7c:6f:f8:8c:bb:30:fd:4f:a3:12:4e:6d:be:7f: 14:19:5b:8c:5a:d5:e4:2f:d3:38:02:f9:50:70:1f:cf:4b:33: 06:c8:8c:53:ba:84:dc:9b:70:e0:fa:2f:bb:07:3a:9f:ae:7b: 52:f0:20:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcklQB/LmMi01i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MTU0ODFhMjktMDk2ZS00ZGYwLWFhZDYtMzdkZjVlNjg1ZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RjJc7egMO2H7W0DC6z/AwmtsMo2fShUMwOu dKXSycfUybY+2jcK5AqLjTlMmbrKb7ygH/uKDFhg0EUSEWunCCwIUYy5EzOROvo1 THOZfT8Qh7QB/HAewmnwqDI/ea+wzvQIgBrbUxKJ9AK+kyA2lEZ/ovyhIBseAAru +PHUtfVh0w6QuABDaD3qHtGD3AZ0yFAqGquPO0JT/R3Rn/RfBwBmwiz8WNdNH+z8 mbl64oNkh3aim+Wtb+erVJrYL3MkZjW/OgV/VM5Dzj5DPoBq0IIvwSzlOWnVrOHw hpQ8mBe9AT003hf9U49OOXgfL141tW3F1nlltdFAiBW5nG9MYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLL+MlZfheORsRx7ycA03rpFP/EoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTAxOGRjZTQtMTEwNS0z YjVlLWFiM2EtNDc3OWNlM2I5MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5bHz5qzdr1oJZ+uSd8JI4GZLlKY1N9200pCd1575JVcHCgxMB5 DQa7tYk35HLSLj5hrrQiRIkjyHZq9Ip7Puj+Hdr0bRyBe4OAIwDOaS4HBJdIdWG+ PNvp0S0vfEJVgCajFqx2x07HUG+pUPMq7qKBzYyy2fz1vNdLw++483CqVETXCh39 2p2MgvAyQSRUb6Bq05ocOgov7FWuUvGCEDswVviPZ9X8jtXKaQEBTVT03hb4xqau GiIAX2i1kQ682ZDWpDu9/lGYaRB8b/iMuzD9T6MSTm2+fxQZW4xa1eQv0zgC+VBw H89LMwbIjFO6hNybcOD6L7sHOp+ue1LwIJQ= -----END CERTIFICATE-----Generated at Wed Oct 29 07:22:59 2025 by rpki-client