$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01d65e81-25ca-3b27-86c3-b11b42a4ccce.roa File: 01d65e81-25ca-3b27-86c3-b11b42a4ccce.roa (raw, json) Hash identifier: 8yhSO2MTm5RctCFaq8akIDVAlJPtCu6dfFVB1CsyhU8= Subject key identifier: 23:C6:AE:D1:3C:44:CC:A7:42:2E:D8:80:D6:FF:93:71:24:09:FF:D2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66321137FAE613BAEF205800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01d65e81-25ca-3b27-86c3-b11b42a4ccce.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396609 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:11:37:fa:e6:13:ba:ef:20:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=18444295-dc0e-4c0b-bdb5-17c8eb7bc0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:44:3d:b3:1d:0b:3d:2f:e4:64:2d:19:fb: 5d:77:21:7f:9a:91:e3:10:0d:da:95:b9:bb:86:3e: 4d:10:30:9e:92:ff:d8:6e:e5:ee:af:f2:15:bb:d2: e4:fe:ce:2c:3c:05:d7:0c:4b:5e:a6:83:c1:62:91: a4:68:89:cb:e9:04:a6:7c:32:c5:64:c6:87:46:b5: cb:01:20:4d:f0:32:f6:11:f1:6d:55:ec:2a:b4:a7: c0:fe:99:1a:5d:02:3e:f7:5e:fb:70:6d:b9:d2:e4: 63:e5:9d:39:0e:56:75:10:c9:6f:85:4b:ac:fc:cc: 97:10:3a:dc:6e:3e:45:ec:11:8d:ea:1e:03:11:4a: 3c:01:a7:eb:e7:2b:9b:2c:82:85:2f:8e:d5:20:39: e9:97:10:52:9c:9c:4d:85:7c:94:fc:4d:9b:58:fb: d5:46:9c:80:91:65:42:c4:d5:71:32:5d:16:25:d1: 1f:6c:a2:90:00:dc:95:0f:65:e0:85:87:3d:54:c5: 35:3b:d0:20:5d:74:ce:c2:ba:3a:62:45:a9:ec:81: e2:b5:73:4b:70:f3:4e:36:a8:69:de:bf:1f:d1:35: 0a:ba:db:3b:48:25:46:dc:59:ae:df:85:e8:ca:c5: 1f:16:05:bc:74:41:f7:9d:a9:a1:97:29:74:18:4a: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C6:AE:D1:3C:44:CC:A7:42:2E:D8:80:D6:FF:93:71:24:09:FF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01d65e81-25ca-3b27-86c3-b11b42a4ccce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:79:99:0f:cc:4a:54:d8:f6:60:36:94:aa:e4:e8:60:1f:78: 03:86:5e:ad:27:2a:58:26:ac:f4:c1:d3:e1:b4:80:7a:66:e7: a4:d4:90:5b:35:2c:c6:e3:d7:64:20:f0:7e:c4:f3:37:35:01: 53:5c:2f:94:9c:da:db:41:c1:63:08:9e:25:90:84:99:7a:62: d8:5b:c3:47:54:56:aa:75:9f:98:a1:83:59:bf:66:02:eb:cd: c5:d9:70:f9:0f:73:bf:e7:ba:00:e9:9a:be:ee:0c:e0:17:93: 68:95:39:6a:e7:16:4b:64:d2:b8:86:0d:6e:b0:b8:ab:33:32: 0b:7e:74:22:c5:7b:28:29:03:36:c6:c0:c9:62:b3:8c:a1:c9: da:cb:6f:c2:8c:26:b5:44:06:3d:e9:72:c7:96:b0:7e:47:e1: 6a:27:2a:46:31:ba:00:2f:a8:11:d5:f2:98:54:42:ec:05:d1: bb:26:39:24:56:17:36:7a:59:36:ed:10:94:72:7c:c4:85:2f: b3:6f:f0:c4:4e:f9:00:03:05:7d:54:4e:07:1f:67:6a:02:7c: 0b:5d:67:e2:27:96:d5:76:b8:da:40:d0:a1:0c:52:1a:ea:c1: 0d:90:46:f0:b7:2e:8d:8a:26:89:f3:1e:be:f3:40:b6:49:f2: e5:f2:bf:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhE3+uYTuu8gWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MTg0NDQyOTUtZGMwZS00YzBiLWJkYjUtMTdjOGViN2JjMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpdEPbMdCz0v5GQtGftddyF/mpHjEA3albm7 hj5NEDCekv/YbuXur/IVu9Lk/s4sPAXXDEtepoPBYpGkaInL6QSmfDLFZMaHRrXL ASBN8DL2EfFtVewqtKfA/pkaXQI+9177cG250uRj5Z05DlZ1EMlvhUus/MyXEDrc bj5F7BGN6h4DEUo8Aafr5yubLIKFL47VIDnplxBSnJxNhXyU/E2bWPvVRpyAkWVC xNVxMl0WJdEfbKKQANyVD2XghYc9VMU1O9AgXXTOwro6YkWp7IHitXNLcPNONqhp 3r8f0TUKuts7SCVG3Fmu34XoysUfFgW8dEH3namhlyl0GEogrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCPGrtE8RMynQi7YgNb/k3EkCf/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDFkNjVlODEtMjVjYS0z YjI3LTg2YzMtYjExYjQyYTRjY2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKR5mQ/MSlTY9mA2lKrk6GAfeAOGXq0nKlgmrPTB0+G0gHpm56TU kFs1LMbj12Qg8H7E8zc1AVNcL5Sc2ttBwWMIniWQhJl6Ythbw0dUVqp1n5ihg1m/ ZgLrzcXZcPkPc7/nugDpmr7uDOAXk2iVOWrnFktk0riGDW6wuKszMgt+dCLFeygp AzbGwMlis4yhydrLb8KMJrVEBj3pcseWsH5H4WonKkYxugAvqBHV8phUQuwF0bsm OSRWFzZ6WTbtEJRyfMSFL7Nv8MRO+QADBX1UTgcfZ2oCfAtdZ+InltV2uNpA0KEM UhrqwQ2QRvC3Lo2KJonzHr7zQLZJ8uXyv9s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:58 2025 by rpki-client