$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87617ad3-4656-3c8f-8f1f-2f76029785ff.roa File: 87617ad3-4656-3c8f-8f1f-2f76029785ff.roa (raw, json) Hash identifier: IEo6dLeQefVmgpKCCApzcnT9DL+g1bej/v3HNGlBNn4= Subject key identifier: A6:EC:39:AF:6C:C3:FD:AC:77:8D:E5:6C:D4:CB:2B:A6:18:0B:B1:E9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724B0BFBBC5B8F1DD8C210 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87617ad3-4656-3c8f-8f1f-2f76029785ff.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396580 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4b:0b:fb:bc:5b:8f:1d:d8:c2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=ce57912f-ab63-44c8-a001-1b25847a6772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:70:19:03:14:3c:0e:98:da:f6:d2:b1:a9: 07:92:3c:dc:a0:77:61:75:37:e8:2a:ef:b2:2b:55: 33:09:37:b1:46:0b:f1:11:89:c6:fe:92:2f:ff:da: b1:b7:2e:f1:b5:99:6a:09:22:c3:81:62:61:15:12: f7:0b:78:51:ec:a4:26:f0:7a:a3:a1:87:75:ca:9e: 7d:dd:e4:d5:08:23:ad:f9:e8:1a:e6:41:8d:7b:fe: cb:11:2e:69:02:bd:52:c7:82:ce:43:87:9e:82:d8: cd:92:4c:4e:be:90:34:90:b2:5d:3a:bf:4d:66:f5: d9:94:d3:a7:53:74:d9:61:de:42:a8:99:bc:c6:e4: ac:29:99:4d:9d:c8:76:da:16:11:13:fd:ee:fa:49: 3f:92:29:51:76:d4:d0:e7:17:96:33:bd:44:ee:21: d5:83:11:24:2c:82:9b:3f:18:65:c0:32:d4:bf:ba: 70:9a:1b:ef:2e:49:aa:f9:2a:eb:e1:11:c0:9d:44: af:34:67:1a:ae:b2:e7:d2:a6:71:d2:f8:6b:73:4b: ee:08:a8:4f:91:57:b9:26:84:99:28:96:12:44:37: 75:00:a1:a0:42:b3:ff:8b:dd:52:5d:14:2f:24:53: f3:09:5e:02:33:ec:a1:59:19:db:c9:9a:04:a0:e0: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EC:39:AF:6C:C3:FD:AC:77:8D:E5:6C:D4:CB:2B:A6:18:0B:B1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87617ad3-4656-3c8f-8f1f-2f76029785ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:98:34:63:88:ba:df:46:ec:ce:b6:2a:f1:9f:50:7a:9f:87: ad:96:c9:10:c7:11:db:9b:a0:32:98:bb:d6:f2:c6:02:20:93: 70:69:9d:4f:5e:9c:f8:6d:0d:39:a1:00:38:79:a5:ef:4c:be: 2a:be:8d:53:7c:6e:89:4a:fa:67:0c:fa:a8:0e:bb:8b:b8:9c: 95:2c:51:40:3f:27:12:4c:58:dd:c8:92:ba:fc:d4:11:58:48: d0:8d:62:98:79:5e:af:ed:fa:3d:f6:35:9a:ca:35:ba:30:b3: 5c:7c:41:c4:8c:fe:0f:24:4a:c8:2e:f9:7b:0c:41:46:3f:bc: 9f:5e:09:05:2e:b2:21:4a:79:77:b9:8a:fd:70:9d:31:35:bc: 3a:a9:0b:9d:ed:db:e5:8c:b6:1b:7d:21:61:8f:b9:a9:66:fc: 9a:8b:15:36:2a:0a:c1:07:dc:a1:e7:be:f4:7c:18:47:9f:74: 6d:60:bb:69:75:4b:04:5c:37:b2:36:32:fe:47:81:a5:b7:bb: b1:2c:97:d4:2f:03:94:2d:6f:8f:30:81:0f:06:38:fa:8c:30: c4:6b:4f:17:0c:cb:fb:6d:36:ad:95:58:06:93:b8:f8:b4:07: 1d:7e:eb:85:48:ca:50:1b:a8:2d:a0:b7:86:f3:41:5c:1c:ac: 52:d1:d5:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcksL+7xbjx3YwhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk Y2U1NzkxMmYtYWI2My00NGM4LWEwMDEtMWIyNTg0N2E2NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYNwGQMUPA6Y2vbSsakHkjzcoHdhdTfoKu+y K1UzCTexRgvxEYnG/pIv/9qxty7xtZlqCSLDgWJhFRL3C3hR7KQm8HqjoYd1yp59 3eTVCCOt+ega5kGNe/7LES5pAr1Sx4LOQ4eegtjNkkxOvpA0kLJdOr9NZvXZlNOn U3TZYd5CqJm8xuSsKZlNnch22hYRE/3u+kk/kilRdtTQ5xeWM71E7iHVgxEkLIKb PxhlwDLUv7pwmhvvLkmq+Srr4RHAnUSvNGcarrLn0qZx0vhrc0vuCKhPkVe5JoSZ KJYSRDd1AKGgQrP/i91SXRQvJFPzCV4CM+yhWRnbyZoEoOAA5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKbsOa9sw/2sd43lbNTLK6YYC7HpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODc2MTdhZDMtNDY1Ni0z YzhmLThmMWYtMmY3NjAyOTc4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALGYNGOIut9G7M62KvGfUHqfh62WyRDHEduboDKYu9byxgIgk3Bp nU9enPhtDTmhADh5pe9Mviq+jVN8bolK+mcM+qgOu4u4nJUsUUA/JxJMWN3Ikrr8 1BFYSNCNYph5Xq/t+j32NZrKNbows1x8QcSM/g8kSsgu+XsMQUY/vJ9eCQUusiFK eXe5iv1wnTE1vDqpC53t2+WMtht9IWGPualm/JqLFTYqCsEH3KHnvvR8GEefdG1g u2l1SwRcN7I2Mv5HgaW3u7Esl9QvA5Qtb48wgQ8GOPqMMMRrTxcMy/ttNq2VWAaT uPi0Bx1+64VIylAbqC2gt4bzQVwcrFLR1W4= -----END CERTIFICATE-----Generated at Wed Oct 29 09:14:36 2025 by rpki-client