$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fae462-abcb-3150-91e5-df7cbf85cf60.roa File: a5fae462-abcb-3150-91e5-df7cbf85cf60.roa (raw, json) Hash identifier: W3EHQrvpRXHXjLSN1Jvs3fPCO8EhTYGdeqq7ICOIuwM= Subject key identifier: 0C:D0:BA:A5:A1:61:4D:64:26:D1:3F:5F:C0:89:95:B4:58:D3:71:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9872344EE9DAB7534E40D9E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fae462-abcb-3150-91e5-df7cbf85cf60.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396542 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:34:4e:e9:da:b7:53:4e:40:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=6c021b78-d95a-4f67-8f08-6a1ca429babb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2b:45:5d:ad:7c:10:20:0f:cd:a9:ed:28:4a: aa:61:10:38:62:69:c7:1b:07:34:c1:72:42:7c:1f: 70:27:2f:d2:51:89:4b:45:7a:c3:4d:d1:ba:95:99: c7:57:b0:64:d0:9a:ae:53:6a:fd:a1:e5:45:94:70: 67:0e:7d:bc:46:99:13:16:94:48:9b:88:95:18:54: e6:26:bb:a2:60:94:3a:94:84:6a:25:e1:09:a0:b7: 60:e2:05:21:07:2f:ef:63:98:48:7d:93:b4:03:02: 9a:3e:12:84:af:25:12:72:39:91:60:d4:67:45:6f: 63:5d:5f:92:f3:3b:22:6b:51:c3:37:9d:c6:5f:c5: df:66:79:e9:11:fc:ee:29:69:14:00:ec:72:34:ae: 1f:88:12:6f:ca:6c:48:cf:6f:5c:75:5c:5c:54:fa: 1a:dd:07:b1:24:32:07:77:8e:c0:53:73:f8:7b:18: c6:45:87:b9:88:45:e9:1e:a0:09:cd:3d:98:c2:93: e9:45:9d:c1:c7:35:0e:fa:82:bb:9c:c4:eb:c9:45: 12:04:d7:03:51:76:5e:3a:4d:a2:cb:7f:8d:65:25: cc:20:eb:d0:0f:1c:2c:ca:8c:e3:72:43:57:c3:45: bd:4b:34:44:df:ea:9a:a5:53:4f:ae:d0:c7:83:b5: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D0:BA:A5:A1:61:4D:64:26:D1:3F:5F:C0:89:95:B4:58:D3:71:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fae462-abcb-3150-91e5-df7cbf85cf60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c0:40:ef:64:84:9d:11:91:8e:5c:fb:50:2c:fa:b9:88:52: b5:bb:fe:e3:9a:71:31:ed:1c:92:cb:40:d3:30:af:9f:00:6e: 19:96:cb:25:4b:78:d0:ce:a7:f1:51:ec:64:db:2d:35:1b:28: fc:4d:86:ea:38:87:15:22:06:72:ce:c3:4a:a3:bf:75:a5:2d: f7:00:20:ba:c8:ad:16:9a:64:65:9b:fa:97:c1:da:96:c8:32: 92:a9:87:0a:23:00:d8:d1:68:61:0d:62:08:83:ae:41:61:f6: 31:d3:77:46:55:02:8e:fc:e3:ff:a8:d8:3b:83:bf:7b:40:74: 44:a0:28:c3:88:fe:72:b9:13:58:0d:02:f1:d9:39:18:cf:1f: fa:ff:49:b3:e0:54:19:70:a4:f1:f2:8c:df:ce:a9:76:97:4a: d7:b6:e4:d3:a8:a9:99:bf:a2:37:c5:e7:58:6b:c1:cb:63:0c: f2:12:5c:a6:07:5b:bc:39:bd:a7:5f:b2:3d:92:8b:b6:32:44: c3:c2:56:f1:40:b7:f1:4f:12:d2:ad:ce:e3:3d:c1:ec:f7:26: d3:5f:57:7e:eb:9f:2a:b0:d1:36:d9:aa:fa:46:97:85:f5:00: 08:81:35:74:d3:d5:ed:09:dd:d0:d6:30:e6:0f:5b:58:89:27: fd:53:4e:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjRO6dq3U05A2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NmMwMjFiNzgtZDk1YS00ZjY3LThmMDgtNmExY2E0MjliYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhitFXa18ECAPzantKEqqYRA4YmnHGwc0wXJC fB9wJy/SUYlLRXrDTdG6lZnHV7Bk0JquU2r9oeVFlHBnDn28RpkTFpRIm4iVGFTm JruiYJQ6lIRqJeEJoLdg4gUhBy/vY5hIfZO0AwKaPhKEryUScjmRYNRnRW9jXV+S 8zsia1HDN53GX8XfZnnpEfzuKWkUAOxyNK4fiBJvymxIz29cdVxcVPoa3QexJDIH d47AU3P4exjGRYe5iEXpHqAJzT2YwpPpRZ3BxzUO+oK7nMTryUUSBNcDUXZeOk2i y3+NZSXMIOvQDxwsyozjckNXw0W9SzRE3+qapVNPrtDHg7W9MwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzQuqWhYU1kJtE/X8CJlbRY03GxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTVmYWU0NjItYWJjYi0z MTUwLTkxZTUtZGY3Y2JmODVjZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK7AQO9khJ0RkY5c+1As+rmIUrW7/uOacTHtHJLLQNMwr58AbhmW yyVLeNDOp/FR7GTbLTUbKPxNhuo4hxUiBnLOw0qjv3WlLfcAILrIrRaaZGWb+pfB 2pbIMpKphwojANjRaGENYgiDrkFh9jHTd0ZVAo784/+o2DuDv3tAdESgKMOI/nK5 E1gNAvHZORjPH/r/SbPgVBlwpPHyjN/OqXaXSte25NOoqZm/ojfF51hrwctjDPIS XKYHW7w5vadfsj2Si7YyRMPCVvFAt/FPEtKtzuM9wez3JtNfV37rnyqw0TbZqvpG l4X1AAiBNXTT1e0J3dDWMOYPW1iJJ/1TTiM= -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:12 2025 by rpki-client