$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa File: b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa (raw, json) Hash identifier: pCauvcboKD6nPH/is0pyBvhlBkmKYubRkWq12bdJwMw= Subject key identifier: 70:70:41:34:4D:99:81:14:21:85:02:1F:72:2C:E7:4D:3A:65:28:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724ACEBA9F2C59A4967A50 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 36628 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4a:ce:ba:9f:2c:59:a4:96:7a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=b5b06aac-2635-4c73-882d-e46a28f24e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:76:44:4f:20:ac:c9:1c:5e:ed:00:f3:26: 58:4c:09:5c:6c:96:a0:46:75:2d:e7:9b:41:f6:f0: 89:60:d4:28:92:af:31:12:cf:96:da:37:69:05:81: 4f:a1:71:06:1a:67:b2:4d:20:00:49:bb:c6:8c:04: a7:29:65:02:25:b4:07:2c:f2:5a:94:18:6c:69:e3: 4a:49:85:33:80:f1:31:e6:12:d7:30:9b:7e:2b:9c: df:e3:fe:ff:f6:c8:6d:36:61:af:f5:66:f7:5b:ad: bb:0e:be:08:d0:29:ce:37:e9:eb:f2:70:92:fd:bb: b3:d3:74:fb:b5:e2:a3:97:b3:59:70:6c:c5:f5:48: 4f:f4:df:96:e4:7c:c1:f6:7e:41:da:ff:99:4e:12: 5f:87:cc:f8:89:c3:19:9b:24:a0:a1:6e:93:2b:83: b3:ca:c2:53:b5:68:0b:ba:01:b1:a9:76:d7:ad:2b: fe:bc:fb:45:fd:8e:a9:ac:8d:69:c4:41:2a:28:10: 48:dd:55:20:3a:5e:f2:fa:35:58:02:a3:c6:5e:94: ab:b6:32:43:d8:d3:fe:4e:ff:ec:83:20:fe:8e:87: d9:96:8a:50:2f:01:fa:20:93:c1:e3:a6:d0:8b:33: a1:90:4b:ea:a1:c8:c2:fd:cf:1f:b5:9b:3b:10:f0: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:41:34:4D:99:81:14:21:85:02:1F:72:2C:E7:4D:3A:65:28:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:e5:2c:3b:6f:0a:78:fb:2a:86:07:30:0e:c2:a6:cc:db:09: d1:b2:34:12:8b:46:ba:6e:e8:59:00:f1:87:5a:31:f3:15:bd: 7c:f9:87:7b:83:a5:2b:d9:5c:d2:f3:2d:24:55:d7:12:30:e2: a5:c3:04:5e:b7:0f:46:b8:08:81:cf:03:71:2b:c5:b0:2d:77: 00:62:34:16:7a:09:9c:0f:a4:fc:5b:f0:f3:e5:a0:ba:56:ec: 00:12:9f:87:35:63:14:11:44:df:ad:23:47:49:87:3a:49:6a: 81:fd:d0:60:e8:ed:ff:02:c5:88:f9:8a:5e:89:5a:e8:ae:72: a9:f6:79:46:9e:5c:13:da:e8:6c:86:f4:4e:ae:12:af:6a:7a: 10:65:1b:4a:26:86:a7:1a:e3:6f:32:cf:53:75:47:48:e6:0d: 72:0b:08:f2:d1:0e:eb:14:62:e9:58:69:84:fa:15:a5:4b:4d: 83:e7:ed:7d:c4:f3:c5:13:46:38:f6:c4:fa:d2:b4:5e:7c:7f: f4:c8:0c:d6:5b:4f:9a:39:e7:01:0d:d7:73:f6:7a:9a:9c:82: af:74:f7:a3:5c:95:77:21:f2:36:85:77:f9:b4:be:5d:66:22: 78:ef:7d:55:69:7f:65:4c:37:98:0b:77:8e:40:8c:e1:a8:59: c1:1c:2d:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckrOup8sWaSWelAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YjViMDZhYWMtMjYzNS00YzczLTg4MmQtZTQ2YTI4ZjI0ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ92RE8grMkcXu0A8yZYTAlcbJagRnUt55tB 9vCJYNQokq8xEs+W2jdpBYFPoXEGGmeyTSAASbvGjASnKWUCJbQHLPJalBhsaeNK SYUzgPEx5hLXMJt+K5zf4/7/9shtNmGv9Wb3W627Dr4I0CnON+nr8nCS/buz03T7 teKjl7NZcGzF9UhP9N+W5HzB9n5B2v+ZThJfh8z4icMZmySgoW6TK4OzysJTtWgL ugGxqXbXrSv+vPtF/Y6prI1pxEEqKBBI3VUgOl7y+jVYAqPGXpSrtjJD2NP+Tv/s gyD+jofZlopQLwH6IJPB46bQizOhkEvqocjC/c8ftZs7EPB7AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHBwQTRNmYEUIYUCH3Is5006ZShvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjllY2I0NTItMGI2Zi0z ZWJhLThhZTYtMWY4MThmYWU4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL7lLDtvCnj7KoYHMA7CpszbCdGyNBKLRrpu6FkA8YdaMfMVvXz5 h3uDpSvZXNLzLSRV1xIw4qXDBF63D0a4CIHPA3ErxbAtdwBiNBZ6CZwPpPxb8PPl oLpW7AASn4c1YxQRRN+tI0dJhzpJaoH90GDo7f8CxYj5il6JWuiucqn2eUaeXBPa 6GyG9E6uEq9qehBlG0omhqca428yz1N1R0jmDXILCPLRDusUYulYaYT6FaVLTYPn 7X3E88UTRjj2xPrStF58f/TIDNZbT5o55wEN13P2epqcgq9096NclXch8jaFd/m0 vl1mInjvfVVpf2VMN5gLd45AjOGoWcEcLTA= -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:26 2025 by rpki-client