$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa File: ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa (raw, json) Hash identifier: dEhE1/kltMLrgWcM/Dbc61zSRU+2RS1vgIgnxa9Kc00= Subject key identifier: EF:DD:01:B0:38:9F:57:CD:A9:34:F7:C4:40:2E:D0:B4:BB:6C:99:A6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCC95DA2B500B6ED52B300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396547 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c9:5d:a2:b5:00:b6:ed:52:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=efa37513-fa93-4b2a-8609-27ee9cd7e7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:60:8d:fc:1a:cf:79:01:57:7d:a4:51:d9: 5d:9d:cd:d2:29:a8:94:74:76:9a:51:49:ee:0d:cf: 38:7e:f7:a2:a8:e4:f4:e8:56:c4:73:8f:e0:3f:b5: 01:2e:84:f4:0a:c0:14:d9:d0:25:6a:ee:a3:44:df: 63:6b:76:78:97:49:db:f9:12:7a:82:38:99:57:63: 52:7b:9d:69:39:af:14:6a:2f:90:3e:db:6d:91:03: a1:7a:17:be:d9:b3:fd:c8:32:81:16:ba:f6:db:9a: 3b:7d:9b:f5:68:6e:a4:c4:61:67:da:86:fb:29:10: 92:9f:d5:c8:3b:63:43:de:af:08:f3:5f:02:e0:20: 0a:bc:2a:2d:f5:3e:c0:46:f9:dc:f1:bb:b6:33:d1: e1:04:d7:4b:e8:c4:b7:3d:ed:2e:30:ce:8e:03:5e: 1d:ca:2d:67:aa:ef:2f:bd:82:89:26:6c:c1:e8:41: ba:aa:ce:34:94:d5:cc:92:e2:c5:10:20:ef:b4:ac: 17:51:f0:40:f1:b0:6b:b5:dd:23:d9:49:45:67:b6: e3:18:2e:c1:ec:e0:11:92:87:ee:21:73:f6:fa:a6: 9d:a7:e4:a2:15:b2:7c:2c:d3:e1:14:c9:58:53:0f: d4:a3:3a:b3:e4:a1:4b:d2:4d:28:82:b3:4c:9e:c2: 60:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DD:01:B0:38:9F:57:CD:A9:34:F7:C4:40:2E:D0:B4:BB:6C:99:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0f:99:f4:8e:91:f1:b3:16:c6:38:79:14:b5:c7:5c:db:3f: 11:14:23:cd:a8:bc:a1:c8:68:e4:88:2c:53:ad:0a:22:91:35: 99:bc:16:18:9d:de:ec:2b:4c:f8:31:a0:7f:ef:2a:b0:2a:09: 59:9f:1e:bd:bf:b4:65:36:e3:36:c1:09:3f:ff:48:54:bd:ba: 01:63:77:a3:2a:62:54:65:5f:c1:9e:1c:47:33:ca:19:50:ec: b1:e9:b5:b4:d3:e1:a9:78:3b:be:9d:74:02:3d:84:6d:59:55: 0d:d8:cb:f2:9f:04:bb:ab:7f:c2:5d:c0:a0:9a:74:13:f0:79: a8:39:a0:86:b1:05:27:c2:1a:6f:79:86:80:08:f6:93:bd:c5: 46:8a:dc:d2:36:56:c1:b9:bb:46:8d:df:2f:16:1f:be:b8:f9: 15:97:62:98:3b:4f:52:7c:77:b0:38:91:51:a1:dc:3b:a8:3a: 98:cf:c6:1c:54:2c:d9:8e:5e:8e:e0:d2:0a:a3:ed:ba:92:24: 3a:d2:d1:6e:4c:9c:47:00:42:62:11:ec:d0:6f:0d:42:39:80: d5:3c:a7:73:ac:78:52:72:3a:4d:44:e9:d5:bd:a7:16:f0:82: 25:a7:75:77:07:ea:80:ca:5e:34:5a:a7:09:59:1f:39:fe:73: 78:f3:9f:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMldorUAtu1SswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZWZhMzc1MTMtZmE5My00YjJhLTg2MDktMjdlZTljZDdlN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr5gjfwaz3kBV32kUdldnc3SKaiUdHaaUUnu Dc84fveiqOT06FbEc4/gP7UBLoT0CsAU2dAlau6jRN9ja3Z4l0nb+RJ6gjiZV2NS e51pOa8Uai+QPtttkQOhehe+2bP9yDKBFrr225o7fZv1aG6kxGFn2ob7KRCSn9XI O2ND3q8I818C4CAKvCot9T7ARvnc8bu2M9HhBNdL6MS3Pe0uMM6OA14dyi1nqu8v vYKJJmzB6EG6qs40lNXMkuLFECDvtKwXUfBA8bBrtd0j2UlFZ7bjGC7B7OARkofu IXP2+qadp+SiFbJ8LNPhFMlYUw/Uozqz5KFL0k0ogrNMnsJgXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO/dAbA4n1fNqTT3xEAu0LS7bJmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWU0NDU4ZTItYjc3Zi0z Zjg2LWI3ZWMtMzA2MTBkNWJkM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGcPmfSOkfGzFsY4eRS1x1zbPxEUI82ovKHIaOSILFOtCiKRNZm8 Fhid3uwrTPgxoH/vKrAqCVmfHr2/tGU24zbBCT//SFS9ugFjd6MqYlRlX8GeHEcz yhlQ7LHptbTT4al4O76ddAI9hG1ZVQ3Yy/KfBLurf8JdwKCadBPweag5oIaxBSfC Gm95hoAI9pO9xUaK3NI2VsG5u0aN3y8WH764+RWXYpg7T1J8d7A4kVGh3DuoOpjP xhxULNmOXo7g0gqj7bqSJDrS0W5MnEcAQmIR7NBvDUI5gNU8p3OseFJyOk1E6dW9 pxbwgiWndXcH6oDKXjRapwlZHzn+c3jznxk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:37 2025 by rpki-client