$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21aefc4-4c85-3f84-aa02-9ed6ff45d87b.roa File: b21aefc4-4c85-3f84-aa02-9ed6ff45d87b.roa (raw, json) Hash identifier: BhTqoQmQPBmkjhXQTzleAQExvFRwOGZzvkX0NGX1G7c= Subject key identifier: 6D:B9:38:8E:2A:2B:1C:9E:A6:14:24:8F:63:76:65:22:5C:CA:70:FE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCA58A5BE800FD2F68E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21aefc4-4c85-3f84-aa02-9ed6ff45d87b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396590 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ca:58:a5:be:80:0f:d2:f6:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=0ae5ef55-fb04-4bbf-bcdf-68ced0cb152f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:b4:64:18:48:8d:cc:ed:2f:76:6d:0f:12: 3b:92:ec:c9:3d:6a:eb:f5:01:09:e1:89:d2:bd:af: d5:82:0a:0f:3b:28:b7:7b:fa:2a:a9:b4:77:13:d3: 81:4e:2f:63:84:f2:9c:a5:d0:c7:6b:67:4d:79:bd: 87:97:e7:7e:94:34:e2:2c:46:25:21:02:f8:04:aa: 67:d6:3b:e8:dc:40:8f:ee:9d:66:ef:ff:2d:06:37: 66:18:50:23:f6:0b:1b:c4:e2:43:b8:13:39:af:90: 5a:1c:e8:79:29:18:4c:15:d3:0e:5f:78:09:0e:2d: 21:75:b6:73:88:2c:64:c6:2d:0d:5e:00:b1:68:9f: 58:b6:c7:97:ac:7f:07:9b:e0:15:95:c7:70:b4:8c: 04:ff:25:19:c2:ad:02:98:58:63:d8:2a:25:83:fb: 4c:6a:b0:cf:85:b2:1e:ec:96:df:a0:0a:da:5e:86: 34:e3:63:4c:7b:6a:14:b9:47:d0:99:12:fb:74:a7: 11:1c:c3:1a:cc:96:52:31:b5:39:53:16:66:55:6a: 0b:3a:05:ab:e4:f7:7f:7a:83:73:c4:e6:3c:2f:b4: 73:2e:31:5c:ee:a9:79:ba:fa:77:41:e1:e3:0e:8f: 1b:fd:c9:a9:29:a0:e6:2e:da:fe:2a:f6:c2:6f:05: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B9:38:8E:2A:2B:1C:9E:A6:14:24:8F:63:76:65:22:5C:CA:70:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21aefc4-4c85-3f84-aa02-9ed6ff45d87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e1:41:cc:54:0d:0b:82:bf:6a:78:8c:ff:df:5b:81:b6:d5: 6f:57:15:74:37:de:d0:fc:ad:24:2b:07:b5:74:87:32:03:de: ca:6b:da:38:94:1b:77:83:b1:52:cf:a7:3b:5b:b7:6e:3a:cd: 8e:7c:8b:90:9e:89:88:48:1b:41:04:24:79:5d:44:c4:16:e4: 36:83:25:b0:3d:13:45:79:50:f5:d1:b4:39:1a:d4:bc:da:67: d5:fa:fe:95:d3:76:98:0a:de:21:f7:1d:c7:b9:e5:41:9b:05: c0:65:88:5f:20:19:26:53:88:84:e3:af:d2:a8:03:0e:65:19: 36:f0:07:ac:66:c5:d1:6f:d7:e0:d7:c5:77:23:e7:ad:b4:8f: d1:2e:a0:72:55:cf:6d:65:4a:08:8a:b0:98:a7:d5:35:0d:f9: 96:33:3e:d7:1a:31:b5:01:43:dd:6d:c0:b3:c3:c6:e5:cc:71: 9c:a7:b4:3e:52:b4:f4:f1:6f:58:f0:1d:10:e5:3d:94:eb:26: f0:a8:4c:7c:38:38:96:6f:1e:62:72:17:90:75:ce:18:24:fe: b9:ad:c2:06:82:4b:95:5e:50:16:4a:e9:3c:9f:6b:1c:be:8f: 6a:a9:b4:b4:4c:56:5c:78:3c:e9:24:e9:03:d1:5a:01:70:91: 08:dd:1e:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMpYpb6AD9L2jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MGFlNWVmNTUtZmIwNC00YmJmLWJjZGYtNjhjZWQwY2IxNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+S0ZBhIjcztL3ZtDxI7kuzJPWrr9QEJ4YnS va/VggoPOyi3e/oqqbR3E9OBTi9jhPKcpdDHa2dNeb2Hl+d+lDTiLEYlIQL4BKpn 1jvo3ECP7p1m7/8tBjdmGFAj9gsbxOJDuBM5r5BaHOh5KRhMFdMOX3gJDi0hdbZz iCxkxi0NXgCxaJ9YtseXrH8Hm+AVlcdwtIwE/yUZwq0CmFhj2Colg/tMarDPhbIe 7JbfoAraXoY042NMe2oUuUfQmRL7dKcRHMMazJZSMbU5UxZmVWoLOgWr5Pd/eoNz xOY8L7RzLjFc7ql5uvp3QeHjDo8b/cmpKaDmLtr+KvbCbwVI0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG25OI4qKxyephQkj2N2ZSJcynD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIxYWVmYzQtNGM4NS0z Zjg0LWFhMDItOWVkNmZmNDVkODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvhQcxUDQuCv2p4jP/fW4G21W9XFXQ33tD8rSQrB7V0hzID3spr 2jiUG3eDsVLPpztbt246zY58i5CeiYhIG0EEJHldRMQW5DaDJbA9E0V5UPXRtDka 1LzaZ9X6/pXTdpgK3iH3Hce55UGbBcBliF8gGSZTiITjr9KoAw5lGTbwB6xmxdFv 1+DXxXcj5620j9EuoHJVz21lSgiKsJin1TUN+ZYzPtcaMbUBQ91twLPDxuXMcZyn tD5StPTxb1jwHRDlPZTrJvCoTHw4OJZvHmJyF5B1zhgk/rmtwgaCS5VeUBZK6Tyf axy+j2qptLRMVlx4POkk6QPRWgFwkQjdHrI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:47:12 2025 by rpki-client