$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe46eeb-24c7-30bc-bab0-5b9c7f6e4c06.roa File: dfe46eeb-24c7-30bc-bab0-5b9c7f6e4c06.roa (raw, json) Hash identifier: fDnUoPriE857eRh0td12D33/KhGancbWk230ah27TcY= Subject key identifier: C3:39:F8:D4:79:15:BF:65:56:DF:01:C6:4B:13:D1:3D:15:99:18:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9872385091249D3D24641480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe46eeb-24c7-30bc-bab0-5b9c7f6e4c06.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396555 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:38:50:91:24:9d:3d:24:64:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=8d21bdb5-aba9-4ba4-9e73-dee007bbb3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:b9:c7:59:48:cd:fb:97:01:3b:e9:d7:04: 94:52:8c:c7:80:22:dd:74:31:c0:55:20:7a:87:4b: c5:29:4e:ef:4b:80:ac:0b:13:91:31:b0:7c:60:2b: c7:60:82:44:da:92:90:fe:72:eb:16:71:31:7a:52: f5:ce:f7:b1:4f:79:73:fa:6d:2e:56:73:77:d1:c6: 72:63:24:06:28:a0:09:c5:0d:70:99:17:2b:46:cc: da:5f:a9:ce:65:8a:09:3a:53:24:ce:f4:5b:ed:5d: 5e:df:8a:af:0e:5e:1a:cb:99:c9:8d:aa:8c:71:6b: 73:9e:23:32:cf:7b:21:16:5f:05:85:2b:e0:d8:60: d3:04:8f:25:9c:32:94:56:3d:2c:18:60:27:04:bc: d8:23:de:91:17:8f:51:26:c3:1d:aa:a5:73:2e:43: 6f:d3:41:68:d2:64:07:ca:47:39:6d:f8:21:b3:db: c3:d9:bb:bd:f5:b8:33:f7:b1:cf:20:98:1c:ba:d7: 51:c6:06:d2:76:92:da:7e:22:45:f4:94:14:a0:17: 2b:48:d0:c9:01:6c:7a:09:79:a6:ac:bc:87:4d:32: f6:6a:34:ab:36:0e:e3:72:63:c2:ff:09:e7:54:0c: ef:33:3d:d8:7d:2b:e1:ab:2e:49:f1:5c:2a:c4:03: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:39:F8:D4:79:15:BF:65:56:DF:01:C6:4B:13:D1:3D:15:99:18:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe46eeb-24c7-30bc-bab0-5b9c7f6e4c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:10:6a:51:8c:33:ea:b2:aa:d1:4e:5d:9e:32:09:b3:9e:fd: a5:4f:85:1d:e6:81:5c:7b:93:50:a6:51:62:90:cb:6e:60:49: d0:85:71:07:74:f3:6a:59:de:46:a9:95:3f:54:0e:69:84:96: b2:19:13:ed:40:14:c5:be:1a:74:49:13:15:54:c6:7d:3f:27: 5d:03:29:4c:49:aa:3c:e7:2d:eb:6e:66:ea:ec:92:18:eb:7c: ac:f5:a2:9c:0e:37:99:0a:12:cb:7f:29:15:42:c4:57:68:70: a7:f5:86:bf:80:bb:8f:3b:07:49:02:71:48:83:8a:6a:7f:9b: 5f:57:5f:97:25:69:ee:0d:ac:ad:dd:d0:ab:6e:67:8e:40:df: 3b:2e:5a:34:f0:2b:14:60:d3:22:85:92:4a:80:4a:a0:b1:c3: 81:94:52:47:6e:76:b5:d6:2b:f2:fa:fe:f0:cc:4b:69:db:9a: 5a:04:3c:07:7f:1b:30:63:b6:a0:f7:85:45:2d:6a:fc:09:31: 19:e5:65:c8:5c:17:38:a3:f4:79:5a:b2:8c:d7:48:e3:e9:8b: 42:c7:a0:c9:61:49:66:c6:fa:ef:26:88:92:df:77:64:9d:74: 3d:40:63:18:8f:f7:2c:4f:aa:c0:e9:19:b3:c9:65:ed:7c:b3: 0b:6e:db:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjhQkSSdPSRkFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OGQyMWJkYjUtYWJhOS00YmE0LTllNzMtZGVlMDA3YmJiM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+a5x1lIzfuXATvp1wSUUozHgCLddDHAVSB6 h0vFKU7vS4CsCxORMbB8YCvHYIJE2pKQ/nLrFnExelL1zvexT3lz+m0uVnN30cZy YyQGKKAJxQ1wmRcrRszaX6nOZYoJOlMkzvRb7V1e34qvDl4ay5nJjaqMcWtzniMy z3shFl8FhSvg2GDTBI8lnDKUVj0sGGAnBLzYI96RF49RJsMdqqVzLkNv00Fo0mQH ykc5bfghs9vD2bu99bgz97HPIJgcutdRxgbSdpLafiJF9JQUoBcrSNDJAWx6CXmm rLyHTTL2ajSrNg7jcmPC/wnnVAzvMz3YfSvhqy5J8VwqxANbyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMM5+NR5Fb9lVt8BxksT0T0VmRiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZlNDZlZWItMjRjNy0z MGJjLWJhYjAtNWI5YzdmNmU0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKoQalGMM+qyqtFOXZ4yCbOe/aVPhR3mgVx7k1CmUWKQy25gSdCF cQd082pZ3kaplT9UDmmElrIZE+1AFMW+GnRJExVUxn0/J10DKUxJqjznLetuZurs khjrfKz1opwON5kKEst/KRVCxFdocKf1hr+Au487B0kCcUiDimp/m19XX5clae4N rK3d0KtuZ45A3zsuWjTwKxRg0yKFkkqASqCxw4GUUkdudrXWK/L6/vDMS2nbmloE PAd/GzBjtqD3hUUtavwJMRnlZchcFzij9HlasozXSOPpi0LHoMlhSWbG+u8miJLf d2SddD1AYxiP9yxPqsDpGbPJZe18swtu24M= -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:28 2025 by rpki-client