$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa File: c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa (raw, json) Hash identifier: d4dP6nrxJpIB34QgTpB4KU8T/EPvMDk1JX4EuJUkZcw= Subject key identifier: A4:C9:E6:99:A0:27:B8:66:D0:EA:23:89:A9:5C:12:D1:2C:E7:C1:E3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98723413D4A8F3F73EFB3700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 20172 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:34:13:d4:a8:f3:f7:3e:fb:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=501fdb6f-7d1d-4d6c-b2fc-bd9f1106d39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:18:82:a4:f8:46:fc:ce:87:40:5b:54:7e: 44:fe:47:e1:91:03:de:94:ee:e8:01:65:8a:a0:47: 6d:64:0c:f0:fe:cf:15:42:7c:ac:7a:f8:de:51:4b: ae:3b:a7:f3:be:f0:53:16:b9:42:a1:11:fb:70:77: ef:f5:37:16:12:01:46:0e:79:35:32:05:65:ef:86: e3:f6:af:f0:f8:a3:87:08:3c:48:12:8d:0b:35:9a: bb:43:62:fe:99:6c:d1:42:99:e6:41:48:47:ba:63: 8a:5a:a3:d9:3b:41:e3:aa:86:28:35:90:8d:08:ba: 3f:ae:46:d1:02:06:17:b0:5b:70:93:c5:e0:a2:d9: 41:e8:e9:98:0a:59:67:aa:77:86:ef:21:cc:8a:d1: 92:b6:1d:88:7c:73:dd:b2:c5:0e:a9:ae:25:c7:1a: 4e:5f:81:8a:67:1c:7c:2a:c3:ad:aa:48:71:28:97: 77:37:ce:a7:38:a4:ed:be:84:39:81:84:99:9a:9a: 1a:ce:23:88:72:39:6c:4b:64:3a:36:8b:03:0f:9d: 4f:11:c4:27:84:d5:ea:ff:ee:05:a6:bc:c3:cf:77: ac:c1:0d:06:0f:80:43:33:2e:ed:5b:9e:dd:ce:24: be:1c:62:27:1c:fa:33:c7:80:eb:bf:bb:a2:1f:58: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C9:E6:99:A0:27:B8:66:D0:EA:23:89:A9:5C:12:D1:2C:E7:C1:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:35:d9:5c:4e:c6:47:c4:e7:38:96:a9:86:0c:e7:4d:a3:fb: 60:05:5d:6b:77:a1:c2:1d:4b:dd:ef:e4:ec:61:8a:49:01:e8: bf:e7:72:18:87:8b:a5:b3:a9:42:f3:5c:0e:6c:1e:a6:53:c3: 66:46:77:44:60:71:49:34:5e:9e:08:e4:4f:a3:e0:85:5b:f6: f3:2e:9e:42:66:a4:37:f6:29:86:db:c0:de:d2:d4:e5:1d:ec: 04:2c:ee:61:eb:81:e8:02:85:2f:a6:91:d4:3b:4b:43:40:f2: 97:22:23:b1:a9:ec:9b:6d:1f:5a:4e:0a:94:8b:46:e5:1e:61: 06:fb:a9:f1:7b:95:f2:81:4f:26:54:b8:4f:42:03:e0:08:42: ea:81:6d:0a:9f:fc:e8:21:bf:74:e9:2d:62:bc:17:41:3b:39: 81:12:05:63:a8:bc:00:bf:7c:4e:16:a0:fd:bc:c7:ab:bb:b5: 7c:28:e2:f9:72:98:55:6c:d2:c9:b9:f2:50:89:56:00:0e:89: 01:de:b8:ea:ab:43:6f:fb:3b:10:aa:9d:fc:1a:f6:f4:05:99: a5:c7:c1:23:00:2c:1f:17:c1:05:5b:b1:b6:9d:af:64:0c:44: ae:5b:2f:88:00:ae:1d:55:d6:0e:da:60:18:c1:c6:c1:e2:27: 0d:65:a9:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjQT1Kjz9z77NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NTAxZmRiNmYtN2QxZC00ZDZjLWIyZmMtYmQ5ZjExMDZkMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiUYgqT4RvzOh0BbVH5E/kfhkQPelO7oAWWK oEdtZAzw/s8VQnysevjeUUuuO6fzvvBTFrlCoRH7cHfv9TcWEgFGDnk1MgVl74bj 9q/w+KOHCDxIEo0LNZq7Q2L+mWzRQpnmQUhHumOKWqPZO0HjqoYoNZCNCLo/rkbR AgYXsFtwk8XgotlB6OmYCllnqneG7yHMitGSth2IfHPdssUOqa4lxxpOX4GKZxx8 KsOtqkhxKJd3N86nOKTtvoQ5gYSZmpoaziOIcjlsS2Q6NosDD51PEcQnhNXq/+4F przDz3eswQ0GD4BDMy7tW57dziS+HGInHPozx4Drv7uiH1iXAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKTJ5pmgJ7hm0OojialcEtEs58HjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQ0MWJkYTQtY2Q3ZC0z YTRiLWIxZTYtODczNmJmYmE0MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALI12VxOxkfE5ziWqYYM502j+2AFXWt3ocIdS93v5OxhikkB6L/n chiHi6WzqULzXA5sHqZTw2ZGd0RgcUk0Xp4I5E+j4IVb9vMunkJmpDf2KYbbwN7S 1OUd7AQs7mHrgegChS+mkdQ7S0NA8pciI7Gp7JttH1pOCpSLRuUeYQb7qfF7lfKB TyZUuE9CA+AIQuqBbQqf/Oghv3TpLWK8F0E7OYESBWOovAC/fE4WoP28x6u7tXwo 4vlymFVs0sm58lCJVgAOiQHeuOqrQ2/7OxCqnfwa9vQFmaXHwSMALB8XwQVbsbad r2QMRK5bL4gArh1V1g7aYBjBxsHiJw1lqd0= -----END CERTIFICATE-----Generated at Wed Oct 29 07:08:14 2025 by rpki-client