$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb47cb95-f9d4-3eec-860e-3beeb26d488d.roa File: eb47cb95-f9d4-3eec-860e-3beeb26d488d.roa (raw, json) Hash identifier: 8kw//wilmUxSo3PwMjwzzNAsnd8OF1fp85XulyaKDKE= Subject key identifier: 18:30:CF:C8:43:C8:84:07:AD:D7:5F:D7:5B:9F:0C:58:9A:00:B0:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B987247FB06C3D6E93EE48680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb47cb95-f9d4-3eec-860e-3beeb26d488d.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396541 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:47:fb:06:c3:d6:e9:3e:e4:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=db172795-832e-48fa-be2c-42a761ccba53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:a5:53:f5:af:94:24:5c:18:26:86:9f:e0: 42:95:6c:91:8c:7b:b0:7f:29:b7:76:99:80:4c:34: e5:42:f1:1e:59:ec:e0:c6:55:9d:cf:8d:ca:9d:8d: 58:77:c2:5d:25:76:a1:0c:98:f5:a6:27:bf:3d:77: b4:45:81:4a:2e:c4:2a:11:8b:7e:69:17:e3:64:13: fa:2a:fc:b2:18:8c:e4:03:df:1c:29:95:a5:07:67: 86:03:63:99:43:9c:47:e7:94:53:25:7f:4d:a1:49: 0b:9a:b9:93:75:e2:30:df:a2:85:7b:1a:99:e1:73: b9:e0:66:54:dd:a8:c0:21:4a:83:60:94:d7:5c:b6: a9:3e:a6:cc:e4:32:4d:b4:55:95:58:e7:c5:27:63: 77:cd:89:eb:52:cb:81:d4:4e:e3:87:f2:ae:28:7d: 4a:d0:4d:5a:d1:52:41:de:16:d7:56:0f:49:1e:86: 5d:bc:6c:e6:5c:13:b2:b5:ce:6c:da:b8:a1:4d:01: de:51:f1:14:41:63:e5:33:d6:5d:19:f8:8f:aa:5a: d2:f3:8a:26:c8:43:82:d4:13:d3:3b:1c:aa:5f:85: 58:b8:f5:bb:66:21:0e:7e:63:03:19:2c:de:e1:52: 91:76:cb:45:c4:72:79:ce:dd:f8:f3:07:ad:88:0b: fc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:30:CF:C8:43:C8:84:07:AD:D7:5F:D7:5B:9F:0C:58:9A:00:B0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb47cb95-f9d4-3eec-860e-3beeb26d488d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4e:35:cd:b4:c7:d6:69:73:5b:b1:52:d9:6e:c6:17:03:4a: 25:35:e7:e6:1b:da:29:53:fb:13:12:65:19:f4:ab:78:c9:90: 42:03:59:68:6a:21:9d:1a:cc:05:40:37:67:81:1a:ef:63:ed: 80:de:e9:d9:6f:2a:58:d3:ea:bc:a0:be:60:2a:61:f9:71:d8: dd:0d:c9:a2:65:19:19:fd:73:4d:6f:82:71:5a:6a:fc:82:ba: 0d:a7:9d:a8:a5:0f:c5:64:37:2d:1c:9d:55:a6:9d:f5:6d:34: 94:db:fa:84:ec:48:d7:40:3f:53:5a:43:0e:55:74:c1:09:4b: ae:24:90:cb:fa:2b:af:10:14:4c:5e:af:15:57:dd:3a:17:16: f9:58:00:5f:92:43:a4:24:a1:62:5d:6f:fd:24:31:a0:58:43: fb:d9:c4:c9:d3:30:c0:10:3f:34:28:92:6c:ae:cc:27:f3:80: e2:8d:a5:7a:88:89:7a:fd:7e:c6:a5:e4:da:1c:c9:70:2f:7e: 09:01:3d:6b:90:76:ec:2a:ef:1a:87:46:1a:2b:6d:5a:7a:97: 37:bf:85:95:7e:da:bc:9a:a1:fa:c0:e0:fa:28:b5:48:6b:45: e5:4a:92:83:10:c4:f7:fc:8e:da:6a:30:93:8d:93:60:4d:c6: 4f:4f:42:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckf7BsPW6T7khoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk ZGIxNzI3OTUtODMyZS00OGZhLWJlMmMtNDJhNzYxY2NiYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ylU/WvlCRcGCaGn+BClWyRjHuwfym3dpmA TDTlQvEeWezgxlWdz43KnY1Yd8JdJXahDJj1pie/PXe0RYFKLsQqEYt+aRfjZBP6 KvyyGIzkA98cKZWlB2eGA2OZQ5xH55RTJX9NoUkLmrmTdeIw36KFexqZ4XO54GZU 3ajAIUqDYJTXXLapPqbM5DJNtFWVWOfFJ2N3zYnrUsuB1E7jh/KuKH1K0E1a0VJB 3hbXVg9JHoZdvGzmXBOytc5s2rihTQHeUfEUQWPlM9ZdGfiPqlrS84omyEOC1BPT OxyqX4VYuPW7ZiEOfmMDGSze4VKRdstFxHJ5zt348wetiAv8nwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgwz8hDyIQHrddf11ufDFiaALBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWI0N2NiOTUtZjlkNC0z ZWVjLTg2MGUtM2JlZWIyNmQ0ODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKVONc20x9Zpc1uxUtluxhcDSiU15+Yb2ilT+xMSZRn0q3jJkEID WWhqIZ0azAVAN2eBGu9j7YDe6dlvKljT6rygvmAqYflx2N0NyaJlGRn9c01vgnFa avyCug2nnailD8VkNy0cnVWmnfVtNJTb+oTsSNdAP1NaQw5VdMEJS64kkMv6K68Q FExerxVX3ToXFvlYAF+SQ6QkoWJdb/0kMaBYQ/vZxMnTMMAQPzQokmyuzCfzgOKN pXqIiXr9fsal5NocyXAvfgkBPWuQduwq7xqHRhorbVp6lze/hZV+2ryaofrA4Poo tUhrReVKkoMQxPf8jtpqMJONk2BNxk9PQlM= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:05 2025 by rpki-client