$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13bfde50-41e0-3cbd-a41f-8029371094d3.roa File: 13bfde50-41e0-3cbd-a41f-8029371094d3.roa (raw, json) Hash identifier: 6VfEdsjqxfMge64wF6qsxYRcxfMw9jyAYfi3Pz1Iw24= Subject key identifier: 53:C5:78:38:A0:E7:8D:A8:FC:04:36:58:60:7B:B4:4D:A8:A3:A2:06 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987233FFCB8D2FE534F85200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13bfde50-41e0-3cbd-a41f-8029371094d3.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396560 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:33:ff:cb:8d:2f:e5:34:f8:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=318eb8fc-ac3c-478b-ab1e-919edafb7789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c0:5a:ec:36:23:77:97:28:bb:1a:5a:9d:a6: d1:05:e3:28:80:18:00:e1:6a:51:5d:77:37:50:d0: 49:72:c6:a3:8f:b4:90:b3:35:9a:bb:76:b9:7e:a2: 5d:96:57:f5:0a:24:54:84:71:d0:2f:61:8d:53:62: 7d:ff:bd:a2:23:79:aa:fa:06:b2:0a:f5:74:ab:23: 28:1b:a2:e7:9b:be:2b:51:d0:a7:89:85:d5:cd:7b: 66:13:75:2d:31:4b:3a:5c:a1:f3:b0:55:cc:97:3e: 4a:24:c7:55:49:f5:45:be:07:16:27:be:87:4c:7b: 88:41:31:68:ec:71:3c:ae:eb:1a:f8:1c:7f:5d:b6: dd:00:ce:10:d9:96:ae:96:02:49:f9:6f:32:99:cc: 4e:3c:e1:a2:a7:38:b4:e2:fc:51:ac:9a:66:e8:53: 72:57:37:7b:bc:47:66:69:c6:99:4a:fc:33:d5:12: 2c:13:28:2e:96:ad:84:5f:66:20:77:76:29:0d:91: ab:b4:76:ad:e7:f3:a2:ad:31:dd:28:26:c8:61:04: 79:0a:55:22:5a:17:23:e0:28:35:a3:99:2f:66:3c: 64:74:2d:92:34:14:5a:f9:ec:9b:8f:9f:c8:52:c6: 10:73:45:c8:74:a8:96:86:a5:93:71:dd:a6:29:b6: 3b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C5:78:38:A0:E7:8D:A8:FC:04:36:58:60:7B:B4:4D:A8:A3:A2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13bfde50-41e0-3cbd-a41f-8029371094d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:9a:c2:e9:3b:d0:c6:86:da:e1:79:41:e3:03:a2:11:c4:9e: 2c:49:bf:b6:11:76:0e:1a:29:1e:5e:e4:7b:d9:d9:7b:e7:39: 40:f1:7b:94:62:be:5e:57:e8:8e:92:48:46:04:d1:df:7b:28: 52:37:be:c9:42:c7:9c:73:6d:73:22:0f:76:34:a5:5d:27:f3: 70:04:03:47:63:9c:5f:4b:1f:71:4f:c5:95:79:60:19:00:75: 34:51:18:29:53:2c:8e:94:5a:d2:17:80:cc:c3:c9:93:0b:49: be:bf:0b:1d:eb:77:f7:48:aa:38:2d:7c:48:28:14:8e:d1:ba: 03:e7:93:09:ac:b7:3b:52:c6:92:27:90:60:3b:c9:63:2f:56: f9:20:5a:07:f2:ee:6e:ca:02:96:02:e0:ed:76:ad:d3:04:bb: 5d:5d:b8:d5:ee:7c:6d:74:9c:d9:da:cc:29:18:6e:f7:f2:c6: bc:e5:72:27:8e:dd:66:5c:99:4f:4c:67:f3:6a:b2:62:f7:64: de:fc:69:f2:27:b1:45:d8:6f:92:93:8e:5d:ad:80:3f:ec:ce: 7e:05:2b:bb:ef:ea:27:35:69:98:e4:d6:04:20:df:21:02:ef: 43:4b:b3:66:72:25:69:ad:67:83:28:82:3d:c3:50:dc:56:06: 2e:cc:98:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjP/y40v5TT4UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MzE4ZWI4ZmMtYWMzYy00NzhiLWFiMWUtOTE5ZWRhZmI3Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28Ba7DYjd5couxpanabRBeMogBgA4WpRXXc3 UNBJcsajj7SQszWau3a5fqJdllf1CiRUhHHQL2GNU2J9/72iI3mq+gayCvV0qyMo G6Lnm74rUdCniYXVzXtmE3UtMUs6XKHzsFXMlz5KJMdVSfVFvgcWJ76HTHuIQTFo 7HE8rusa+Bx/XbbdAM4Q2ZaulgJJ+W8ymcxOPOGipzi04vxRrJpm6FNyVzd7vEdm acaZSvwz1RIsEygulq2EX2Ygd3YpDZGrtHat5/OirTHdKCbIYQR5ClUiWhcj4Cg1 o5kvZjxkdC2SNBRa+eybj5/IUsYQc0XIdKiWhqWTcd2mKbY77wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPFeDig542o/AQ2WGB7tE2oo6IGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTNiZmRlNTAtNDFlMC0z Y2JkLWE0MWYtODAyOTM3MTA5NGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI6awuk70MaG2uF5QeMDohHEnixJv7YRdg4aKR5e5HvZ2XvnOUDx e5Rivl5X6I6SSEYE0d97KFI3vslCx5xzbXMiD3Y0pV0n83AEA0djnF9LH3FPxZV5 YBkAdTRRGClTLI6UWtIXgMzDyZMLSb6/Cx3rd/dIqjgtfEgoFI7RugPnkwmstztS xpInkGA7yWMvVvkgWgfy7m7KApYC4O12rdMEu11duNXufG10nNnazCkYbvfyxrzl cieO3WZcmU9MZ/NqsmL3ZN78afInsUXYb5KTjl2tgD/szn4FK7vv6ic1aZjk1gQg 3yEC70NLs2ZyJWmtZ4Mogj3DUNxWBi7MmNc= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:27 2025 by rpki-client