$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/176e56d7-2124-3e50-b216-8b7795473f86.roa File: 176e56d7-2124-3e50-b216-8b7795473f86.roa (raw, json) Hash identifier: Cdf3uTqTftEPvGcTWj+MSKy/4f61Y1q6UxtNqx1tcQY= Subject key identifier: 23:B1:A3:E4:B9:EF:E6:FF:46:5E:80:42:59:B6:41:62:82:18:CA:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F37553CCB148FB25F122F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/176e56d7-2124-3e50-b216-8b7795473f86.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396582 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:55:3c:cb:14:8f:b2:5f:12:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=c4d7a85a-db4c-481a-b45a-af86adcebbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:e0:fb:39:43:5a:39:48:28:70:f7:c9:c6: 1f:72:79:95:66:3f:ec:cf:cb:b9:64:4a:8b:f5:11: 95:56:51:25:9f:54:37:23:e8:cf:f3:7a:82:2e:c2: a3:a0:fd:60:be:43:c3:97:ef:26:9e:49:0a:be:3f: 2f:90:77:ff:10:48:0b:50:cd:27:44:2e:41:a8:07: 09:74:f3:68:42:ba:9f:3d:85:50:e1:ae:7b:7e:12: bc:ca:11:42:6f:7c:07:fd:0d:7c:ad:ab:75:ea:00: 33:c5:b7:aa:9f:ca:95:47:f5:ed:a9:dc:1d:71:64: 08:c2:67:3b:8b:c9:1a:cf:5c:69:66:f9:5e:90:54: 1d:4b:69:55:e6:18:6a:bc:71:d7:cd:3a:f2:2d:31: 3f:90:51:11:ef:af:12:f6:f9:16:d7:39:92:a7:db: a9:9e:aa:5c:54:9b:9a:9f:47:f6:15:46:e7:24:da: 9b:af:bf:62:7b:16:c6:f0:41:7b:f8:b7:32:2e:cb: 32:03:96:66:8d:93:be:51:01:43:13:60:c6:a3:2b: 9f:d8:c8:f9:a1:49:72:54:fe:c4:f1:ef:6c:ad:63: 94:92:dc:04:c0:6c:43:c1:16:ee:68:dc:a2:89:03: c1:0c:67:71:c1:d0:4e:87:38:9e:c8:fe:9a:b5:b3: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B1:A3:E4:B9:EF:E6:FF:46:5E:80:42:59:B6:41:62:82:18:CA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/176e56d7-2124-3e50-b216-8b7795473f86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:1a:80:9b:5f:1d:ed:b7:4a:99:7d:3d:7b:40:72:f4:63:c4: 52:6b:dd:e0:8e:39:64:f2:d1:04:f5:32:9b:9f:da:1a:7e:4b: 10:84:ce:5b:ea:15:31:07:e5:aa:db:31:b8:78:53:6b:25:79: 53:3d:61:c7:07:da:f0:a2:42:09:fb:af:f6:29:76:dd:42:e6: e8:a3:b8:bf:78:e4:1b:44:2c:47:86:c7:b6:98:43:9d:b3:f2: 27:14:9e:a5:a7:fe:0e:ce:95:d6:e4:e0:f1:ab:7c:5d:c8:e7: 40:2c:da:4f:15:95:d9:a9:f9:ad:3c:a9:66:61:a6:56:be:8e: f4:b2:f8:bb:35:83:51:fc:88:38:28:66:bf:e3:e5:1f:b0:f0: 72:90:73:c8:47:e8:0b:2f:ea:8a:11:34:e3:4d:b8:e9:a4:fe: ab:00:5f:57:d8:e7:3e:4d:37:1e:4d:7b:c5:58:c8:28:9b:b0: d5:28:ad:e4:9d:d6:10:80:ef:c9:4f:c3:42:22:e3:3f:09:bd: b4:a6:e6:ff:61:b9:4f:2f:50:ae:2c:0e:b4:2f:bf:8c:a8:11: 01:78:b5:c9:d1:a2:f0:51:f2:52:69:a4:3a:6e:28:51:f3:f3: 6f:67:3d:fd:d3:0e:9f:b8:c1:c9:a1:ee:84:24:ac:c3:26:2e: d2:2d:27:17 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1U8yxSPsl8SL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YzRkN2E4NWEtZGI0Yy00ODFhLWI0NWEtYWY4NmFkY2ViYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ3g+zlDWjlIKHD3ycYfcnmVZj/sz8u5ZEqL 9RGVVlEln1Q3I+jP83qCLsKjoP1gvkPDl+8mnkkKvj8vkHf/EEgLUM0nRC5BqAcJ dPNoQrqfPYVQ4a57fhK8yhFCb3wH/Q18rat16gAzxbeqn8qVR/XtqdwdcWQIwmc7 i8kaz1xpZvlekFQdS2lV5hhqvHHXzTryLTE/kFER768S9vkW1zmSp9upnqpcVJua n0f2FUbnJNqbr79iexbG8EF7+LcyLssyA5ZmjZO+UQFDE2DGoyuf2Mj5oUlyVP7E 8e9srWOUktwEwGxDwRbuaNyiiQPBDGdxwdBOhzieyP6atbNoIQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCOxo+S57+b/Rl6AQlm2QWKCGMpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTc2ZTU2ZDctMjEyNC0z ZTUwLWIyMTYtOGI3Nzk1NDczZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCkGoCbXx3tt0qZfT17QHL0Y8RSa93gjjlk8tEE 9TKbn9oafksQhM5b6hUxB+Wq2zG4eFNrJXlTPWHHB9rwokIJ+6/2KXbdQuboo7i/ eOQbRCxHhse2mEOds/InFJ6lp/4OzpXW5ODxq3xdyOdALNpPFZXZqfmtPKlmYaZW vo70svi7NYNR/Ig4KGa/4+UfsPBykHPIR+gLL+qKETTjTbjppP6rAF9X2Oc+TTce TXvFWMgom7DVKK3kndYQgO/JT8NCIuM/Cb20pub/YblPL1CuLA60L7+MqBEBeLXJ 0aLwUfJSaaQ6bihR8/NvZz390w6fuMHJoe6EJKzDJi7SLScX -----END CERTIFICATE-----Generated at Mon Oct 20 03:43:55 2025 by rpki-client