$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b47fac39-f606-3d4d-b6a9-38a8beb2dc24.roa File: b47fac39-f606-3d4d-b6a9-38a8beb2dc24.roa (raw, json) Hash identifier: AbOdlYvhvgxjWANncVzesgsk8jfOh83Ulc/KvrQu4uk= Subject key identifier: 06:30:92:25:03:CC:01:28:FC:71:71:25:2E:55:52:9B:19:32:B5:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987234C7CEC601E757FEB040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b47fac39-f606-3d4d-b6a9-38a8beb2dc24.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 36629 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:34:c7:ce:c6:01:e7:57:fe:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=67f91a33-7926-4a80-b5fb-4004883b51bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fe:2a:4e:9e:ee:1b:27:b3:23:55:7b:2f:d8: 0e:13:7f:1f:02:9b:86:65:be:b4:2c:1b:38:f5:66: 37:26:1d:f1:2f:f7:cb:8b:f4:c5:16:77:70:5b:02: fa:24:d6:d9:fa:92:61:b6:ab:2e:0f:80:6e:0a:ab: 0f:48:17:b6:cf:78:41:13:a4:d3:cf:5a:0b:1f:9c: 9f:dd:52:05:16:60:1f:b3:bf:0c:d9:94:43:35:14: c1:69:97:65:f7:b9:5e:6d:a9:3b:f9:36:4b:b1:d5: 7b:c7:80:e9:7b:e1:ff:39:aa:33:ae:e9:98:72:7c: 59:00:b7:8d:c4:ed:eb:c1:b4:55:9f:e6:da:36:09: 57:2e:6f:7b:12:2b:0a:38:f3:5a:63:06:c4:85:3e: c6:2e:33:55:0a:ff:6f:bf:44:6c:6f:71:71:af:16: 31:00:c7:59:45:3d:50:81:d2:37:65:c4:39:ac:ed: ed:ef:2e:96:67:9f:11:af:6e:f1:f8:eb:e2:89:a3: 1b:4b:90:3f:bb:97:39:7d:99:e9:3b:11:03:7e:8a: 20:f4:1f:91:91:fb:c3:4f:87:eb:84:e4:b2:97:46: b3:3e:06:ad:21:9c:01:08:e8:b0:b9:15:7e:d7:b9: a3:24:c7:62:3f:2c:ad:4f:05:7c:8c:3a:04:e7:d9: 4e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:30:92:25:03:CC:01:28:FC:71:71:25:2E:55:52:9B:19:32:B5:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b47fac39-f606-3d4d-b6a9-38a8beb2dc24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:34:c2:91:e1:ce:a5:29:e2:3a:c7:24:11:60:14:b7:66:f2: 61:f2:10:f0:13:f0:3f:e4:f8:64:7b:50:ff:1a:f4:6b:35:48: 16:35:d6:fb:e4:82:df:0b:c6:4b:79:b4:61:9c:79:c1:60:ec: c0:67:d8:90:f7:04:17:5a:61:24:3e:b1:b6:b2:0e:92:b6:e1: 81:1d:f9:0e:5d:ed:63:27:f2:45:ff:d8:44:77:fa:00:6a:d8: 9b:58:1d:36:7d:f6:de:fe:bf:e2:6f:e5:d9:c4:5e:97:c1:67: 85:28:4e:80:92:d7:62:34:e7:bb:c9:bc:ad:c7:d1:b1:b8:61: 3c:1e:1c:6f:d5:63:4e:57:f1:2c:a6:b2:46:8e:cd:ca:2b:9b: 61:ac:6e:51:74:1a:1c:46:2d:30:27:cd:f1:3d:cf:f8:c3:81: 58:83:c9:25:7a:74:3d:92:ce:01:bd:2e:c1:ba:59:8a:17:b4: 46:df:bc:df:04:31:8b:87:4b:c0:70:71:7c:5b:cf:59:35:26: 84:ec:f1:95:d7:3e:e3:82:a0:8e:23:26:8a:5d:26:b7:d7:6d: de:29:08:94:03:ab:3e:16:48:bc:30:87:a5:ad:29:45:b7:af: e9:de:85:71:fa:88:7a:0a:70:0b:ec:98:39:9e:28:e3:7c:d5: ba:9b:ee:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjTHzsYB51f+sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NjdmOTFhMzMtNzkyNi00YTgwLWI1ZmItNDAwNDg4M2I1MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP4qTp7uGyezI1V7L9gOE38fApuGZb60LBs4 9WY3Jh3xL/fLi/TFFndwWwL6JNbZ+pJhtqsuD4BuCqsPSBe2z3hBE6TTz1oLH5yf 3VIFFmAfs78M2ZRDNRTBaZdl97lebak7+TZLsdV7x4Dpe+H/OaozrumYcnxZALeN xO3rwbRVn+baNglXLm97EisKOPNaYwbEhT7GLjNVCv9vv0Rsb3FxrxYxAMdZRT1Q gdI3ZcQ5rO3t7y6WZ58Rr27x+OviiaMbS5A/u5c5fZnpOxEDfoog9B+RkfvDT4fr hOSyl0azPgatIZwBCOiwuRV+17mjJMdiPyytTwV8jDoE59lOmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAYwkiUDzAEo/HFxJS5VUpsZMrXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjQ3ZmFjMzktZjYwNi0z ZDRkLWI2YTktMzhhOGJlYjJkYzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD00wpHhzqUp4jrHJBFgFLdm8mHyEPAT8D/k+GR7UP8a9Gs1SBY1 1vvkgt8Lxkt5tGGcecFg7MBn2JD3BBdaYSQ+sbayDpK24YEd+Q5d7WMn8kX/2ER3 +gBq2JtYHTZ99t7+v+Jv5dnEXpfBZ4UoToCS12I057vJvK3H0bG4YTweHG/VY05X 8SymskaOzcorm2GsblF0GhxGLTAnzfE9z/jDgViDySV6dD2SzgG9LsG6WYoXtEbf vN8EMYuHS8BwcXxbz1k1JoTs8ZXXPuOCoI4jJopdJrfXbd4pCJQDqz4WSLwwh6Wt KUW3r+nehXH6iHoKcAvsmDmeKON81bqb7og= -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:44 2025 by rpki-client