$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df417c6-803e-3dc6-a775-5080c4eb2c20.roa File: 7df417c6-803e-3dc6-a775-5080c4eb2c20.roa (raw, json) Hash identifier: 7LIvbbSsJv3/nFZRQmsuawKtWA5VArhXi5I6EA1OM9c= Subject key identifier: 4D:87:06:A7:E4:3F:68:AB:0C:A2:96:EA:AB:A3:25:FC:F6:27:A1:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723394735A7FD868CB9A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df417c6-803e-3dc6-a775-5080c4eb2c20.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 397197 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:33:94:73:5a:7f:d8:68:cb:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=94123519-34d0-412f-89de-6a6c760037dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:85:57:aa:c5:ca:62:34:cd:e9:f1:1b:b5: e1:91:6e:43:70:9b:57:3e:70:f4:66:11:f6:70:4f: 6d:e2:70:4e:3d:c2:b7:dd:c8:b1:86:59:ec:08:a9: e2:e0:64:b8:59:59:87:ed:76:f4:0d:55:63:1d:10: 94:1f:64:ab:01:2e:43:61:10:4b:50:dc:43:3c:a6: 63:23:08:c1:d5:c6:69:ae:c5:4b:88:43:9a:0f:ec: 27:bb:57:43:e1:df:6b:20:85:c8:cf:41:7d:29:3f: 63:2c:9a:6d:ba:53:a2:ca:ad:b5:0a:ea:8b:6e:cf: 80:aa:d5:3d:08:39:f6:a4:3f:e8:1e:3a:57:d6:2a: 1e:55:bc:1e:82:39:94:8b:2d:53:31:bb:f5:41:ad: 0b:00:b8:8e:19:6d:1b:b7:98:32:6c:75:16:5e:a4: 88:e3:00:7f:fe:9e:eb:91:da:6e:c1:37:27:e9:1e: e5:f7:34:57:07:63:e3:ad:34:0c:60:bc:7b:6e:e2: 81:67:1a:17:cf:a2:3c:eb:18:e3:20:e4:cd:36:af: 4a:d7:7e:a4:36:c1:a2:3e:22:f7:32:63:dc:26:5e: 41:92:fb:e9:f5:98:27:09:fb:df:f9:a1:ae:d0:a4: c2:d6:8f:c0:87:fa:e3:42:2b:8a:4b:80:41:48:06: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:87:06:A7:E4:3F:68:AB:0C:A2:96:EA:AB:A3:25:FC:F6:27:A1:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df417c6-803e-3dc6-a775-5080c4eb2c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a0:72:56:a0:9a:e7:66:be:b0:f3:b4:79:0a:3a:d6:18:57: 68:be:c0:01:c5:f9:c9:b2:d4:bc:4b:57:c9:b2:be:fb:09:2a: fa:8b:de:9e:48:64:7a:ad:00:87:86:5d:e9:88:ac:0f:ec:66: c1:86:14:d2:de:1a:b1:8d:9e:87:ec:e4:1f:20:ce:52:3a:1d: 60:08:c2:ad:51:ba:ab:44:41:e1:2d:a2:f7:ef:34:ed:df:03: 0d:c9:70:bf:ab:50:19:69:29:45:5e:55:05:01:b8:72:d4:6e: b2:28:6f:9a:75:7f:bf:a8:64:09:23:cb:69:1a:5e:87:b0:19: e4:77:70:f7:3c:23:8e:e1:e2:ea:b2:cf:da:87:7b:55:ca:08: 03:65:f2:1f:4e:ac:53:e9:4c:11:1e:2c:1d:d0:2c:d5:9d:cc: 59:54:ad:14:2f:ce:56:3f:d9:c5:31:b7:1d:0d:bc:3a:10:fb: 15:99:a7:8f:b6:8d:93:4e:6b:7b:d7:a2:33:60:27:12:e2:99: 21:d6:c8:22:82:11:03:76:6e:6c:51:e8:6d:9f:42:cc:4c:68: 8c:9e:7f:3d:25:4f:70:76:1c:07:c7:d4:78:5a:c3:ef:b3:3d: 2e:e0:fd:29:80:46:af:20:d1:e7:d8:b2:22:d4:2d:47:e3:6c: ed:e8:3d:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjOUc1p/2GjLmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OTQxMjM1MTktMzRkMC00MTJmLTg5ZGUtNmE2Yzc2MDAzN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYuFV6rFymI0zenxG7XhkW5DcJtXPnD0ZhH2 cE9t4nBOPcK33cixhlnsCKni4GS4WVmH7Xb0DVVjHRCUH2SrAS5DYRBLUNxDPKZj IwjB1cZprsVLiEOaD+wnu1dD4d9rIIXIz0F9KT9jLJptulOiyq21CuqLbs+AqtU9 CDn2pD/oHjpX1ioeVbwegjmUiy1TMbv1Qa0LALiOGW0bt5gybHUWXqSI4wB//p7r kdpuwTcn6R7l9zRXB2PjrTQMYLx7buKBZxoXz6I86xjjIOTNNq9K136kNsGiPiL3 MmPcJl5Bkvvp9ZgnCfvf+aGu0KTC1o/Ah/rjQiuKS4BBSAaXLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE2HBqfkP2irDKKW6qujJfz2J6GLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RmNDE3YzYtODAzZS0z ZGM2LWE3NzUtNTA4MGM0ZWIyYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEagclagmudmvrDztHkKOtYYV2i+wAHF+cmy1LxLV8myvvsJKvqL 3p5IZHqtAIeGXemIrA/sZsGGFNLeGrGNnofs5B8gzlI6HWAIwq1RuqtEQeEtovfv NO3fAw3JcL+rUBlpKUVeVQUBuHLUbrIob5p1f7+oZAkjy2kaXoewGeR3cPc8I47h 4uqyz9qHe1XKCANl8h9OrFPpTBEeLB3QLNWdzFlUrRQvzlY/2cUxtx0NvDoQ+xWZ p4+2jZNOa3vXojNgJxLimSHWyCKCEQN2bmxR6G2fQsxMaIyefz0lT3B2HAfH1Hha w++zPS7g/SmARq8g0efYsiLULUfjbO3oPQ8= -----END CERTIFICATE-----Generated at Wed Oct 29 07:00:07 2025 by rpki-client