$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d6727f7-4837-3595-98aa-9165cd8e8b85.roa File: 7d6727f7-4837-3595-98aa-9165cd8e8b85.roa (raw, json) Hash identifier: 9IkdT+1SRf6CkBmuzE9v4rBhwHYMzsyfXmO8QxO78Qw= Subject key identifier: CA:BC:29:55:C8:57:E0:86:2E:E2:7A:98:4B:E2:86:C3:0A:A4:DD:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987237FEB7481D8138913740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d6727f7-4837-3595-98aa-9165cd8e8b85.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396616 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:37:fe:b7:48:1d:81:38:91:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=4fcf6bc8-4749-4aac-a7f0-97aeaa5e4205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2f:77:56:15:ca:2c:85:84:d0:c6:b9:f2:6d: fe:71:a4:74:50:49:7a:a1:69:5e:80:fe:42:77:a0: 27:3b:7e:2e:6c:9f:73:cc:70:0f:3f:86:27:33:2f: 41:08:a1:72:4a:da:b3:3e:e7:f2:a2:69:01:ca:80: 87:3d:21:a8:3d:b1:e9:32:7b:c3:a8:a5:aa:83:1d: 38:07:c3:ac:01:47:e8:4e:d8:67:a9:4d:71:90:7f: 04:0b:1d:f7:c4:fe:11:f2:87:ce:31:44:97:59:e5: 8e:f9:2f:09:51:a5:64:96:d6:9d:6d:d2:03:5e:c8: 69:5e:78:1d:2e:c2:c5:c1:b7:d4:a1:8e:6e:ab:35: 52:e4:ff:93:c2:91:91:08:48:6e:26:0a:65:0b:f4: 93:7f:b7:fa:e4:43:d2:61:98:b1:54:25:a2:51:7a: a5:5d:9c:2a:52:63:3c:02:d6:92:47:2d:99:28:ba: 56:e1:79:7b:ec:44:4c:c7:96:a7:af:63:af:ab:e6: 7d:e5:dc:68:fb:60:15:75:9c:97:27:6a:9c:ff:0d: 64:96:46:a9:eb:77:32:91:6b:40:3b:4b:39:23:9f: 64:74:33:18:ce:50:a6:40:26:48:e5:28:b5:44:e2: 0c:be:94:ab:58:16:f3:d4:ec:69:84:86:a8:29:74: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BC:29:55:C8:57:E0:86:2E:E2:7A:98:4B:E2:86:C3:0A:A4:DD:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d6727f7-4837-3595-98aa-9165cd8e8b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f7:fb:f6:07:84:e5:a4:aa:68:e0:68:f2:61:dc:02:f2:7b: 94:38:5f:87:e3:8f:6f:c1:9c:02:a9:9a:f4:95:f0:4b:09:4c: a2:ac:22:55:19:07:76:6d:0e:e1:ff:c4:7a:17:c9:2e:41:d2: ed:08:cb:33:9e:a0:f2:5b:e6:52:8d:be:9d:35:b5:a5:78:ea: 06:8e:57:7b:2e:c9:cd:ca:34:07:e4:4e:34:73:f3:26:55:76: 2d:5f:67:41:c9:ff:3d:0b:59:f8:94:fc:ae:03:91:79:bb:a8: 33:1f:36:2c:70:42:62:0f:7c:97:c6:a6:51:ea:2a:60:12:82: c9:fa:b6:18:06:ef:d2:45:ee:d1:81:bc:ae:61:3b:9a:51:5e: 79:c2:2c:fb:75:ce:8b:35:11:2a:39:22:de:8f:7a:78:27:5f: 2b:5e:c2:d4:99:0a:b9:95:0b:8d:85:57:1a:87:74:f2:40:1a: 74:63:9f:b9:73:45:d7:9a:fa:38:d5:c6:12:95:79:1d:e3:94: 09:6a:08:b1:94:8e:e9:39:13:4f:59:c7:a4:50:a7:c0:1d:6c: d1:9d:ab:ef:c6:f3:ac:d7:07:db:7c:fd:7b:ac:82:b0:9b:0b: e4:1e:73:4a:55:ae:d1:40:db:54:e3:b0:c9:97:63:38:db:74: 10:ee:e4:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjf+t0gdgTiRN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NGZjZjZiYzgtNDc0OS00YWFjLWE3ZjAtOTdhZWFhNWU0MjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC93VhXKLIWE0Ma58m3+caR0UEl6oWlegP5C d6AnO34ubJ9zzHAPP4YnMy9BCKFyStqzPufyomkByoCHPSGoPbHpMnvDqKWqgx04 B8OsAUfoTthnqU1xkH8ECx33xP4R8ofOMUSXWeWO+S8JUaVkltadbdIDXshpXngd LsLFwbfUoY5uqzVS5P+TwpGRCEhuJgplC/STf7f65EPSYZixVCWiUXqlXZwqUmM8 AtaSRy2ZKLpW4Xl77ERMx5anr2Ovq+Z95dxo+2AVdZyXJ2qc/w1klkap63cykWtA O0s5I59kdDMYzlCmQCZI5Si1ROIMvpSrWBbz1OxphIaoKXRoEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMq8KVXIV+CGLuJ6mEvihsMKpN1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2Q2NzI3ZjctNDgzNy0z NTk1LTk4YWEtOTE2NWNkOGU4Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ33+/YHhOWkqmjgaPJh3ALye5Q4X4fjj2/BnAKpmvSV8EsJTKKs IlUZB3ZtDuH/xHoXyS5B0u0IyzOeoPJb5lKNvp01taV46gaOV3suyc3KNAfkTjRz 8yZVdi1fZ0HJ/z0LWfiU/K4DkXm7qDMfNixwQmIPfJfGplHqKmASgsn6thgG79JF 7tGBvK5hO5pRXnnCLPt1zos1ESo5It6PengnXytewtSZCrmVC42FVxqHdPJAGnRj n7lzRdea+jjVxhKVeR3jlAlqCLGUjuk5E09Zx6RQp8AdbNGdq+/G86zXB9t8/Xus grCbC+Qec0pVrtFA21TjsMmXYzjbdBDu5Bs= -----END CERTIFICATE-----Generated at Wed Oct 29 07:07:48 2025 by rpki-client