$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbb64c36-7005-3175-ab5e-e5835f51f110.roa File: fbb64c36-7005-3175-ab5e-e5835f51f110.roa (raw, json) Hash identifier: Rdd9xOPCk4RydS3Xg71ScFj+6R7FRiVD4TdNly7/gS0= Subject key identifier: 88:FD:D4:D7:ED:61:99:85:B9:AB:FB:5F:E4:C6:EC:04:EE:93:B7:0C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B98724E248A9BD6E1C9166DC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbb64c36-7005-3175-ab5e-e5835f51f110.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396588 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4e:24:8a:9b:d6:e1:c9:16:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=2cb98089-597e-4465-a1cc-5f2d50f4213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:19:b9:68:d5:b1:63:c1:17:1b:f0:ba:cd: 8f:01:96:85:ae:e1:8f:fb:84:24:16:85:94:cb:45: c6:fa:1b:54:da:b3:f8:bb:30:2a:41:00:d4:d7:e9: e0:c9:4f:0b:0b:ed:08:80:70:6b:b1:6e:02:e5:03: d1:fc:f3:c7:4c:fe:51:d0:44:fa:b8:c8:fd:07:14: 60:3a:e1:c6:6d:00:b0:7d:f4:3f:9a:a0:a3:b3:85: f1:e6:3d:09:a5:d9:2d:ee:43:28:c2:c4:2c:f7:01: e3:cc:50:45:f1:6e:78:20:17:fe:f5:37:83:06:e9: 80:bf:ee:3d:bc:17:be:34:f3:6d:7b:c5:ff:0f:61: c9:9b:c9:4d:35:4f:5d:7e:44:c1:f5:cb:78:c3:9b: 5c:a6:11:e4:e2:c0:0f:ec:7b:57:f5:3f:5d:77:d9: 8c:c1:ff:62:5c:7d:f0:e2:ed:a3:5f:2e:3e:5e:7d: 15:d5:17:f0:d8:ee:b3:8c:0d:78:39:70:57:60:4d: 5f:1b:1c:dd:6b:f5:d6:a9:a0:ac:80:a4:53:ee:2f: 6f:26:c9:1c:ab:5f:b9:76:b8:66:83:8a:95:88:36: 3d:64:43:3c:0e:22:c3:4b:2d:c2:88:f1:bb:82:3c: c7:ac:fb:49:99:70:67:04:2f:de:ae:fc:64:50:a2: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FD:D4:D7:ED:61:99:85:B9:AB:FB:5F:E4:C6:EC:04:EE:93:B7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbb64c36-7005-3175-ab5e-e5835f51f110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:80:b0:a6:b2:d8:41:33:96:c8:58:b4:de:68:90:17:be:80: 0b:3b:fd:05:d4:df:48:61:69:b1:58:f6:47:a5:f5:af:ba:41: de:17:cd:e4:ab:80:f7:42:73:9e:4a:77:7c:c3:bd:cb:53:3f: 8c:bb:0a:0e:2c:15:24:46:0c:73:38:c4:26:5a:15:8c:1d:4b: dd:94:bc:98:5f:99:7d:ca:62:ca:5d:85:ba:a1:0b:90:5e:4d: 56:55:28:4d:9d:79:41:81:df:62:3f:43:fe:49:10:e3:c8:c4: a6:bd:16:3b:a9:6c:f5:87:ba:01:8e:93:25:16:b4:df:7c:6c: ee:3e:d7:66:7c:87:d4:ac:ab:bf:bf:83:aa:49:4e:42:25:28: e2:5b:a6:e4:d9:b3:cc:c4:48:df:49:08:ae:df:20:b7:a3:49: b5:96:e4:05:d8:4c:62:19:41:85:6c:33:6a:67:fb:ce:33:27: 10:df:ec:f6:9a:4f:b0:a2:92:17:a6:bb:ae:ec:82:5e:c9:eb: 48:3e:a1:9d:2b:eb:ed:43:01:6f:4b:ad:5b:df:a5:98:90:7d: 4c:80:ea:58:cb:bf:8c:62:b7:f4:d8:8f:f4:5f:c1:7a:6f:91: 23:3d:32:78:67:3c:48:34:c4:e1:28:06:70:c6:90:13:58:19: 1d:53:68:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYck4kipvW4ckWbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MmNiOTgwODktNTk3ZS00NDY1LWExY2MtNWYyZDUwZjQyMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVUZuWjVsWPBFxvwus2PAZaFruGP+4QkFoWU y0XG+htU2rP4uzAqQQDU1+ngyU8LC+0IgHBrsW4C5QPR/PPHTP5R0ET6uMj9BxRg OuHGbQCwffQ/mqCjs4Xx5j0Jpdkt7kMowsQs9wHjzFBF8W54IBf+9TeDBumAv+49 vBe+NPNte8X/D2HJm8lNNU9dfkTB9ct4w5tcphHk4sAP7HtX9T9dd9mMwf9iXH3w 4u2jXy4+Xn0V1Rfw2O6zjA14OXBXYE1fGxzda/XWqaCsgKRT7i9vJskcq1+5drhm g4qViDY9ZEM8DiLDSy3CiPG7gjzHrPtJmXBnBC/ervxkUKIaIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIj91NftYZmFuav7X+TG7ATuk7cMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmJiNjRjMzYtNzAwNS0z MTc1LWFiNWUtZTU4MzVmNTFmMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuAsKay2EEzlshYtN5okBe+gAs7/QXU30hhabFY9kel9a+6Qd4X zeSrgPdCc55Kd3zDvctTP4y7Cg4sFSRGDHM4xCZaFYwdS92UvJhfmX3KYspdhbqh C5BeTVZVKE2deUGB32I/Q/5JEOPIxKa9FjupbPWHugGOkyUWtN98bO4+12Z8h9Ss q7+/g6pJTkIlKOJbpuTZs8zESN9JCK7fILejSbWW5AXYTGIZQYVsM2pn+84zJxDf 7PaaT7Cikhemu67sgl7J60g+oZ0r6+1DAW9LrVvfpZiQfUyA6ljLv4xit/TYj/Rf wXpvkSM9MnhnPEg0xOEoBnDGkBNYGR1TaDM= -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:50 2025 by rpki-client