$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08657504-d31a-3a06-a40e-3cfa65dd8697.roa File: 08657504-d31a-3a06-a40e-3cfa65dd8697.roa (raw, json) Hash identifier: 1ImgIdvZlqKdv5W6MxW3s/YrCfWASAO3L50v/OH56hs= Subject key identifier: 34:42:78:D0:5C:45:66:C4:DB:F2:04:6E:FC:18:39:F3:41:56:41:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B59A1DD4570BBA0BD232515E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08657504-d31a-3a06-a40e-3cfa65dd8697.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 36628 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:dd:45:70:bb:a0:bd:23:25:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=ccb4e603-7151-4f10-baaa-d547270aa51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:d7:d9:0f:04:5b:05:ba:25:82:2a:e1:b7: 1c:4b:4e:bc:2e:cd:41:81:e8:b2:da:1b:90:82:76: e4:59:7f:9d:e2:da:b1:5a:9a:02:4e:52:7e:b5:c9: 5d:8e:fc:aa:21:38:a0:fe:55:e4:1a:11:89:67:2d: b4:52:21:c6:f3:34:75:dd:e8:86:b5:b7:f3:10:9c: be:b0:33:fb:73:eb:1d:77:8d:9d:0a:56:95:82:2b: f3:95:c3:a9:89:e5:e3:54:e1:b6:eb:92:84:89:6e: a4:82:c3:a8:a4:ce:16:68:af:a0:85:ae:46:f2:02: 21:57:cf:e4:28:7a:45:58:02:65:41:4a:c9:e0:c5: 28:15:22:3d:87:34:1c:4f:2f:ba:34:0d:1b:90:3d: c3:b7:23:a3:0d:79:69:ab:45:50:57:85:9e:cc:7a: b5:e1:ad:26:a5:51:11:77:73:1e:5b:b4:6e:33:34: 12:69:ab:a2:9a:6c:f1:45:97:9f:f4:b7:17:37:6a: d8:ae:ff:e6:be:3f:97:a4:4a:29:d6:9b:c4:40:7d: 29:9b:2c:c3:d4:e3:59:94:43:f9:04:c7:31:be:26: 1a:b6:ee:ce:26:ec:a3:c1:f8:3e:e5:a9:84:8c:0c: d4:20:bd:7a:ac:09:a1:f8:fd:d0:8c:36:28:df:0d: 8f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:42:78:D0:5C:45:66:C4:DB:F2:04:6E:FC:18:39:F3:41:56:41:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08657504-d31a-3a06-a40e-3cfa65dd8697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c4:df:bc:e0:4c:bb:c0:1d:b5:2e:d6:a2:0a:46:c5:a4:62: 2e:97:54:d1:a9:e2:6f:be:09:b9:98:37:e5:18:f4:7d:30:6a: f2:c3:dd:30:df:a7:d8:5b:f2:15:cf:67:50:a2:db:30:30:d2: 5d:5a:c7:b6:fd:03:33:d8:a3:43:a7:9f:2a:29:4f:d4:87:9f: 3a:e6:5b:fc:ca:d1:42:9b:eb:c4:2f:f8:87:c9:98:73:64:3f: d1:04:d6:ab:6a:d4:c8:6b:5e:ae:4e:99:e0:f2:a8:61:7f:b0: 0a:90:72:3e:f4:56:2c:49:a1:b7:67:aa:ee:cd:36:f4:6c:03: fb:37:85:69:b2:32:96:a9:ab:b7:c0:d3:93:8d:6e:86:3a:cf: 51:72:15:05:57:48:55:70:f2:69:ce:b0:08:52:99:1e:b4:40: c6:9e:b8:4b:13:bb:51:6d:c7:2b:de:76:a7:97:8c:88:6f:f0: de:e5:ef:a7:91:ae:b7:4e:61:03:42:ae:16:5b:1c:08:28:7b: 4d:76:34:4b:fd:7a:35:3f:26:72:1b:e2:4f:dc:53:67:33:4c: 84:81:09:dc:c0:32:35:87:bb:69:18:6b:36:d4:4c:9a:6a:d6: b1:9f:2b:a6:b1:49:38:cb:b1:80:1d:ea:cd:59:e0:c2:dd:cd: 29:d5:7a:9f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZod1FcLugvSMlFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk Y2NiNGU2MDMtNzE1MS00ZjEwLWJhYWEtZDU0NzI3MGFhNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3/X2Q8EWwW6JYIq4bccS068Ls1Bgeiy2huQ gnbkWX+d4tqxWpoCTlJ+tcldjvyqITig/lXkGhGJZy20UiHG8zR13eiGtbfzEJy+ sDP7c+sdd42dClaVgivzlcOpieXjVOG265KEiW6kgsOopM4WaK+gha5G8gIhV8/k KHpFWAJlQUrJ4MUoFSI9hzQcTy+6NA0bkD3DtyOjDXlpq0VQV4WezHq14a0mpVER d3MeW7RuMzQSaauimmzxRZef9LcXN2rYrv/mvj+XpEop1pvEQH0pmyzD1ONZlEP5 BMcxviYatu7OJuyjwfg+5amEjAzUIL16rAmh+P3QjDYo3w2PUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDRCeNBcRWbE2/IEbvwYOfNBVkEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDg2NTc1MDQtZDMxYS0z YTA2LWE0MGUtM2NmYTY1ZGQ4Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASxN+84Ey7wB21LtaiCkbFpGIul1TRqeJvvgm5 mDflGPR9MGryw90w36fYW/IVz2dQotswMNJdWse2/QMz2KNDp58qKU/Uh5865lv8 ytFCm+vEL/iHyZhzZD/RBNaratTIa16uTpng8qhhf7AKkHI+9FYsSaG3Z6ruzTb0 bAP7N4VpsjKWqau3wNOTjW6GOs9RchUFV0hVcPJpzrAIUpketEDGnrhLE7tRbccr 3nanl4yIb/De5e+nka63TmEDQq4WWxwIKHtNdjRL/Xo1PyZyG+JP3FNnM0yEgQnc wDI1h7tpGGs21EyaataxnyumsUk4y7GAHerNWeDC3c0p1Xqf -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:40 2025 by rpki-client