$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18cc9ca0-f0c2-3f10-936b-e14bfe0aab8b.roa File: 18cc9ca0-f0c2-3f10-936b-e14bfe0aab8b.roa (raw, json) Hash identifier: 0yuhGN/mp/CcX8kbGxp+WCfBYCet5jyjpvdd1d9ZsiE= Subject key identifier: B3:97:95:2F:2E:7E:43:DC:EC:61:F4:60:8C:A9:B9:88:B7:F0:CA:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320D0D1E101D3CBF019700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18cc9ca0-f0c2-3f10-936b-e14bfe0aab8b.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 36620 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0d:0d:1e:10:1d:3c:bf:01:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=6d374561-d55a-4e7d-a930-c3819c3ebbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:08:44:49:d1:1c:0a:81:8c:55:60:74:82: 4b:a7:4b:50:a3:87:c6:ae:0c:fc:24:a6:b1:b1:17: 6a:8c:a2:c8:c7:c7:4f:ca:e7:a1:aa:ee:2f:b1:31: 13:0e:cf:26:1e:2b:0c:d3:2c:60:6f:19:a8:3a:84: a7:12:0e:c7:94:be:e4:25:04:80:98:14:73:43:4d: ef:e1:04:0d:6b:53:b1:4e:7f:61:73:51:7f:9c:9f: 9f:fa:07:a5:d1:b0:ff:dd:71:df:d1:37:80:2a:46: 31:1e:ce:73:bf:20:40:5f:4a:59:96:75:a0:49:25: a3:5f:31:72:5f:ee:ea:3c:a9:cb:43:f3:98:24:93: ec:96:3e:d5:ff:d8:09:6c:a1:6f:a9:9c:a6:e6:2f: f4:b2:4a:93:f3:58:8b:82:de:2d:71:35:5c:e5:b7: da:2d:43:4f:06:a4:de:8b:f3:fd:10:33:f3:1c:22: 86:9f:a0:d4:d7:da:69:ee:ba:c2:0a:fd:c6:d1:d2: 6a:a7:55:7c:69:a4:2a:1c:f3:f7:be:ec:8c:d4:02: 48:dc:88:22:63:64:74:a2:cc:d3:e5:93:e2:e7:79: ac:82:07:65:9f:5a:03:31:0b:d2:5d:59:f7:45:08: 08:d8:d0:0d:fa:a8:f5:bb:10:05:3b:7a:21:89:d4: ea:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:97:95:2F:2E:7E:43:DC:EC:61:F4:60:8C:A9:B9:88:B7:F0:CA:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18cc9ca0-f0c2-3f10-936b-e14bfe0aab8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:4b:12:a5:35:b6:db:e1:e3:1e:20:c3:7e:63:64:d9:8a:11: 89:e5:e1:ea:1b:48:0e:2e:72:73:c3:f1:34:9f:35:36:0d:b6: b0:83:5c:d4:e1:5c:0c:80:3f:fd:0e:ba:7c:e2:3f:6b:60:45: 9f:6f:e6:52:7e:38:97:6f:ee:6c:5c:8b:e0:7e:15:a7:de:b3: 92:aa:f0:db:af:5e:20:99:96:c5:c4:42:66:25:22:91:cc:79: 4c:e3:c3:9a:cd:0e:92:86:64:47:40:39:bb:c3:57:eb:1a:2d: 89:4e:f4:c0:86:e3:98:84:1e:25:4a:81:56:b1:79:5b:60:16: 56:c1:70:fa:a5:07:d6:3d:14:ba:49:98:a3:86:02:19:c5:70: 74:fc:56:8e:98:93:38:c9:98:13:4a:d2:4d:9d:34:7b:4f:5a: f5:3f:e1:81:e3:48:bc:d9:f9:5f:00:31:85:8c:df:6f:ff:1a: e1:d3:cf:36:9c:d0:78:bb:1a:8d:25:81:fc:a1:9a:99:08:20: e5:e6:d2:88:fe:e1:1d:99:04:8f:4b:6d:1e:ae:b7:8f:e6:8f: 2c:29:59:64:1a:4c:d1:cd:5f:e4:e2:aa:19:3b:de:df:98:b8: d7:c8:68:8b:7e:8d:26:e5:43:eb:64:5b:17:29:25:e6:2e:e1: 6b:8b:88:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg0NHhAdPL8BlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NmQzNzQ1NjEtZDU1YS00ZTdkLWE5MzAtYzM4MTljM2ViYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkkIREnRHAqBjFVgdIJLp0tQo4fGrgz8JKax sRdqjKLIx8dPyuehqu4vsTETDs8mHisM0yxgbxmoOoSnEg7HlL7kJQSAmBRzQ03v 4QQNa1OxTn9hc1F/nJ+f+gel0bD/3XHf0TeAKkYxHs5zvyBAX0pZlnWgSSWjXzFy X+7qPKnLQ/OYJJPslj7V/9gJbKFvqZym5i/0skqT81iLgt4tcTVc5bfaLUNPBqTe i/P9EDPzHCKGn6DU19pp7rrCCv3G0dJqp1V8aaQqHPP3vuyM1AJI3IgiY2R0oszT 5ZPi53msggdln1oDMQvSXVn3RQgI2NAN+qj1uxAFO3ohidTqewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLOXlS8ufkPc7GH0YIypuYi38MpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMThjYzljYTAtZjBjMi0z ZjEwLTkzNmItZTE0YmZlMGFhYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKhLEqU1ttvh4x4gw35jZNmKEYnl4eobSA4ucnPD8TSfNTYNtrCD XNThXAyAP/0OunziP2tgRZ9v5lJ+OJdv7mxci+B+Fafes5Kq8NuvXiCZlsXEQmYl IpHMeUzjw5rNDpKGZEdAObvDV+saLYlO9MCG45iEHiVKgVaxeVtgFlbBcPqlB9Y9 FLpJmKOGAhnFcHT8Vo6YkzjJmBNK0k2dNHtPWvU/4YHjSLzZ+V8AMYWM32//GuHT zzac0Hi7Go0lgfyhmpkIIOXm0oj+4R2ZBI9LbR6ut4/mjywpWWQaTNHNX+Tiqhk7 3t+YuNfIaIt+jSblQ+tkWxcpJeYu4WuLiCs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:21:47 2025 by rpki-client