$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4857ecf-55a1-3c13-8a60-3a1a55a1c420.roa File: b4857ecf-55a1-3c13-8a60-3a1a55a1c420.roa (raw, json) Hash identifier: e1dsaSvpuKUJic98HBhepwOYzR56hA0uapPz7yf+Ck8= Subject key identifier: 7B:47:07:73:EA:89:E0:35:59:99:1F:D1:3E:49:7F:4C:FD:B3:5B:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCB4C905DC7D70CAD14C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4857ecf-55a1-3c13-8a60-3a1a55a1c420.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396549 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:cb:4c:90:5d:c7:d7:0c:ad:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=dbd0d304-bf8c-4f95-a7ef-a854ad7cf312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:af:12:44:20:79:b1:6f:36:fe:30:10:e5: 54:b4:15:c0:d6:4a:93:21:4d:39:ae:da:34:a0:e3: 87:a0:7c:61:ae:57:2a:bd:db:dd:58:10:22:8c:d3: b7:a2:2e:ee:1e:67:bd:1a:92:1d:e9:92:ef:7f:b4: 98:2f:87:e7:61:de:d0:e8:86:fd:d9:e2:33:aa:0d: ae:72:75:07:4b:fd:72:54:e9:aa:77:8e:04:af:6d: bc:81:b0:0b:d3:48:53:17:0a:40:4c:c7:b5:61:a5: db:10:c0:8f:f5:fd:a2:57:be:5c:ad:73:c1:1b:34: 5d:1d:39:d5:ec:9f:20:05:c0:1b:ab:53:fa:14:ac: ee:e9:0b:40:05:98:41:e6:63:bc:68:57:4b:c4:45: 94:e7:d3:bd:bb:1d:30:fc:54:19:57:38:89:ac:07: c1:5e:ff:51:62:46:a8:b2:3c:9b:1a:ee:2b:03:9f: 11:f4:6f:08:3b:f6:e4:32:20:ba:ba:f7:de:a6:6d: 0c:8e:5e:73:12:e0:36:1e:a6:4b:05:4e:38:eb:9a: b2:d9:b9:2e:c6:f6:c1:da:eb:ad:69:70:5d:c3:5c: 7e:2b:38:1b:13:b1:01:a9:80:b5:69:10:bd:57:4c: 19:6e:f6:d3:01:09:68:db:5c:e7:f7:2e:20:fa:15: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:47:07:73:EA:89:E0:35:59:99:1F:D1:3E:49:7F:4C:FD:B3:5B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4857ecf-55a1-3c13-8a60-3a1a55a1c420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:92:4f:97:e7:c3:25:85:21:fc:61:5b:80:be:f0:0b:1b:69: 4d:85:9e:a7:2d:67:93:a5:8f:11:5e:b7:74:1c:ee:8f:55:6f: e2:ce:12:5c:3c:75:da:4f:4f:2c:56:91:e2:5c:1f:80:15:18: f2:ab:76:c7:8a:4a:e7:34:be:52:5c:c3:75:72:04:e3:9a:b2: 20:50:89:f8:87:fd:21:97:c3:56:eb:d3:0e:d8:32:75:66:96: 40:6e:70:ed:dc:9f:67:0d:b8:2c:50:66:20:f6:61:aa:f8:9e: b0:09:e2:7a:c9:b3:aa:54:d0:6d:5e:eb:8c:76:7e:62:39:c2: 47:26:f7:b7:f6:1b:9e:e2:2f:55:4e:69:13:9c:a4:ca:64:e0: 30:c3:55:2c:96:70:d9:c9:03:35:61:18:f2:c0:13:88:4c:fb: ba:0a:f5:b5:53:b3:2f:51:06:09:a5:b0:63:7a:f7:d6:e6:23: a7:bb:40:ec:44:d1:f3:e4:08:58:64:5a:a0:21:28:f3:5b:56: 1a:45:5f:79:03:cc:5f:86:49:84:ca:6f:02:77:10:87:42:a4: d3:e4:4a:af:62:48:14:86:65:86:9d:1c:ca:d3:93:02:54:b2: 4c:7f:0a:74:88:bd:25:82:50:4f:9f:a2:d1:51:ea:56:37:e5: ea:9b:5d:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMtMkF3H1wytFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZGJkMGQzMDQtYmY4Yy00Zjk1LWE3ZWYtYTg1NGFkN2NmMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro2vEkQgebFvNv4wEOVUtBXA1kqTIU05rto0 oOOHoHxhrlcqvdvdWBAijNO3oi7uHme9GpId6ZLvf7SYL4fnYd7Q6Ib92eIzqg2u cnUHS/1yVOmqd44Er228gbAL00hTFwpATMe1YaXbEMCP9f2iV75crXPBGzRdHTnV 7J8gBcAbq1P6FKzu6QtABZhB5mO8aFdLxEWU59O9ux0w/FQZVziJrAfBXv9RYkao sjybGu4rA58R9G8IO/bkMiC6uvfepm0Mjl5zEuA2HqZLBU4465qy2bkuxvbB2uut aXBdw1x+KzgbE7EBqYC1aRC9V0wZbvbTAQlo21zn9y4g+hUqLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtHB3PqieA1WZkf0T5Jf0z9s1tAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjQ4NTdlY2YtNTVhMS0z YzEzLThhNjAtM2ExYTU1YTFjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC2ST5fnwyWFIfxhW4C+8AsbaU2FnqctZ5OljxFet3Qc7o9Vb+LO Elw8ddpPTyxWkeJcH4AVGPKrdseKSuc0vlJcw3VyBOOasiBQifiH/SGXw1br0w7Y MnVmlkBucO3cn2cNuCxQZiD2Yar4nrAJ4nrJs6pU0G1e64x2fmI5wkcm97f2G57i L1VOaROcpMpk4DDDVSyWcNnJAzVhGPLAE4hM+7oK9bVTsy9RBgmlsGN699bmI6e7 QOxE0fPkCFhkWqAhKPNbVhpFX3kDzF+GSYTKbwJ3EIdCpNPkSq9iSBSGZYadHMrT kwJUskx/CnSIvSWCUE+fotFR6lY35eqbXck= -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:33 2025 by rpki-client