$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0657f7f5-7f76-3faa-aa0d-715353e6b632.roa File: 0657f7f5-7f76-3faa-aa0d-715353e6b632.roa (raw, json) Hash identifier: 0cJNT71dO7zfqSZeQz7eRHUtoxtQMu7hieWMyVIbTgk= Subject key identifier: EE:FE:1E:A8:83:10:97:72:12:94:D6:F8:12:FA:DE:DD:AD:E7:A8:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66321046B80ADB0645325700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0657f7f5-7f76-3faa-aa0d-715353e6b632.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 36624 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:10:46:b8:0a:db:06:45:32:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=5ec58e72-61bd-47b4-b972-55a8dbc31c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:b9:e8:2d:da:2f:1a:a7:fc:78:0a:a0:02: 66:de:a8:6a:a0:b8:ec:ba:e2:15:b1:8b:b1:24:60: ac:25:91:b5:36:3c:f5:22:48:b9:3d:d7:82:07:d6: a0:12:01:61:1f:5e:4b:22:76:48:20:54:99:e3:9d: 91:31:8d:06:b2:20:7a:b9:07:ec:c5:b4:ab:e0:22: b1:86:76:49:ba:e8:f8:24:c7:c1:46:b4:e3:c6:e4: 92:b4:cb:dd:57:bb:8f:e2:3f:25:e9:e3:50:39:d7: 0b:2e:f6:94:96:04:6f:18:f0:b1:4e:5e:17:00:02: 25:3b:a4:fb:cb:76:a8:7d:bd:df:38:f9:17:e5:70: 8f:8b:0e:25:2b:1d:29:c3:1f:d9:12:37:5b:a8:f2: 78:34:5a:8a:ce:2f:3a:63:c6:76:0f:0e:63:c9:63: 3b:4e:d0:60:6d:24:6a:59:29:39:8d:ec:53:a2:3d: c6:dd:55:80:85:89:62:3f:51:ff:95:de:c4:39:4a: 97:32:4a:2d:93:5b:da:d6:aa:fc:e7:e0:7d:20:ca: ec:b9:b7:19:6b:f5:8b:72:86:f0:b2:af:38:49:65: 78:f5:7a:14:96:e5:49:51:e7:e0:29:b2:1b:28:82: 82:6d:9a:70:81:14:00:55:80:f6:a5:1e:dc:e5:e3: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:1E:A8:83:10:97:72:12:94:D6:F8:12:FA:DE:DD:AD:E7:A8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0657f7f5-7f76-3faa-aa0d-715353e6b632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:28:cb:db:73:0e:8a:01:7f:dc:8f:a0:b1:66:00:79:24:b8: 90:77:f4:f7:7d:cd:1a:fc:e1:56:af:da:88:a4:ff:52:ab:60: 3c:d9:10:23:1f:a8:dd:ef:45:da:6c:9e:34:10:bd:3f:bc:86: 19:5c:38:d8:46:49:cb:e3:ca:5f:3b:93:e2:85:ee:6c:c4:57: b3:1c:8f:e7:52:b9:60:d3:a4:38:62:9d:93:eb:80:38:8d:23: 6f:f0:00:a3:5e:36:1a:04:84:3c:c3:b2:d2:b6:1b:7d:11:86: 51:e8:64:3c:46:e0:30:04:81:04:4d:ee:0f:5e:57:ca:ea:08: 54:e7:4c:83:f0:f8:9b:b2:74:72:66:7c:40:02:b5:3b:f2:1e: ce:c6:e9:ca:50:23:67:b1:73:bb:39:d3:c7:7c:9d:19:f7:3d: 97:c4:d6:a0:f8:32:03:46:d1:36:9f:64:18:47:80:90:92:62: df:83:35:af:71:11:65:8a:07:ec:0e:fb:cf:12:99:a9:20:e4: 08:2f:c2:a8:4c:54:a4:14:99:3d:1a:2f:e2:22:20:fc:10:36: bf:2c:86:08:0f:97:9e:e4:f8:a8:a2:97:83:eb:b2:12:90:b9: 52:51:ab:4a:40:3a:44:ac:db:b8:29:b6:9c:2d:4c:8f:b6:f1: 1f:ef:1a:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhBGuArbBkUyVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NWVjNThlNzItNjFiZC00N2I0LWI5NzItNTVhOGRiYzMxYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHK56C3aLxqn/HgKoAJm3qhqoLjsuuIVsYux JGCsJZG1Njz1Iki5PdeCB9agEgFhH15LInZIIFSZ452RMY0GsiB6uQfsxbSr4CKx hnZJuuj4JMfBRrTjxuSStMvdV7uP4j8l6eNQOdcLLvaUlgRvGPCxTl4XAAIlO6T7 y3aofb3fOPkX5XCPiw4lKx0pwx/ZEjdbqPJ4NFqKzi86Y8Z2Dw5jyWM7TtBgbSRq WSk5jexToj3G3VWAhYliP1H/ld7EOUqXMkotk1va1qr85+B9IMrsubcZa/WLcobw sq84SWV49XoUluVJUefgKbIbKIKCbZpwgRQAVYD2pR7c5eNsLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO7+HqiDEJdyEpTW+BL63t2t56iAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDY1N2Y3ZjUtN2Y3Ni0z ZmFhLWFhMGQtNzE1MzUzZTZiNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ4oy9tzDooBf9yPoLFmAHkkuJB39Pd9zRr84Vav2oik/1KrYDzZ ECMfqN3vRdpsnjQQvT+8hhlcONhGScvjyl87k+KF7mzEV7Mcj+dSuWDTpDhinZPr gDiNI2/wAKNeNhoEhDzDstK2G30RhlHoZDxG4DAEgQRN7g9eV8rqCFTnTIPw+Juy dHJmfEACtTvyHs7G6cpQI2exc7s508d8nRn3PZfE1qD4MgNG0TafZBhHgJCSYt+D Na9xEWWKB+wO+88Smakg5AgvwqhMVKQUmT0aL+IiIPwQNr8shggPl57k+Kiil4Pr shKQuVJRq0pAOkSs27gptpwtTI+28R/vGvY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:55 2025 by rpki-client