$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa File: 2013e6f0-9211-3297-8734-b523b1c7ea5a.roa (raw, json) Hash identifier: fcY98zToy9sjlHeeM4EfC1M0ouOKe6RRLa8QZbQEcn4= Subject key identifier: FC:E6:02:F2:68:4C:99:0A:D5:9F:71:6C:B7:F8:E5:D0:B1:12:7F:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F375469DE930A89912048C8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 397212 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:54:69:de:93:0a:89:91:20:48:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=9b05027a-61d8-4801-9b39-79f039857dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dd:51:d1:2c:fa:09:a0:2e:0a:a7:2e:a0:c6: 55:66:05:d3:44:27:ad:9a:fa:f6:f3:ba:85:07:08: 6b:1f:ac:49:86:d0:9a:de:15:6f:ef:ed:40:19:ac: e0:a6:6b:31:a2:bd:65:e7:8f:6b:73:bc:b0:6e:f1: 8d:d3:23:3c:62:5e:82:5f:25:eb:ee:22:a5:fa:75: 73:49:3d:64:9d:58:72:87:48:19:39:f3:f6:4e:d4: bf:b0:ff:14:bb:8d:a7:9c:a2:a9:c6:c6:2c:2b:96: af:ca:c8:56:9d:4a:5d:73:fd:6d:c7:63:80:59:50: 43:08:05:6e:a6:7c:e0:4b:1e:cb:36:9b:8c:17:c5: 75:a8:0d:93:56:d2:e1:ca:3f:9f:19:97:4f:14:1b: 45:c8:4b:6a:d3:90:b6:15:62:fe:5e:dc:5f:cf:e5: e5:72:86:c6:9c:a8:fd:5b:ef:2b:b8:70:99:4d:86: de:8d:c5:41:37:14:50:29:c4:08:ce:61:b1:83:6b: ae:2c:ad:72:cf:f1:2f:6a:ba:5e:60:49:7d:b4:25: 55:6a:87:0d:b6:03:59:1c:75:45:14:ee:99:9e:04: f1:da:cd:a6:eb:85:bc:f8:f0:74:0c:ce:04:d4:9a: b5:96:71:83:3c:15:78:72:76:c0:99:8b:b1:07:bc: 36:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E6:02:F2:68:4C:99:0A:D5:9F:71:6C:B7:F8:E5:D0:B1:12:7F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:da:37:af:33:b1:21:87:49:43:d9:a0:ab:e5:9e:e1:10:d5: ba:2f:16:5d:67:50:06:6f:75:47:10:64:9f:fb:30:25:79:ce: 46:d4:5c:49:e9:e7:57:08:b2:94:31:a4:ce:c1:d8:41:a8:6a: ac:54:a6:f3:8c:7e:38:64:8c:63:5f:3e:f3:bd:a2:74:dd:76: 87:17:05:db:95:d8:15:71:8c:8b:4f:2b:45:87:d2:46:a8:b3: bb:f3:f3:84:2c:7c:fa:aa:90:2a:be:dd:bb:36:69:fa:02:f7: 83:a0:54:3c:4f:a0:06:7c:de:db:9b:6b:f2:44:be:39:9d:4d: 16:bd:82:b7:01:73:28:bc:43:f2:be:f7:bb:5b:24:31:5e:38: 1a:d3:ef:03:94:e6:c4:9c:41:87:ec:5e:a0:ed:8d:ef:4d:23: 94:35:c2:60:62:3b:c6:54:01:a0:3d:6a:e4:c4:6c:14:c5:3d: 00:f3:55:00:14:28:96:65:1a:cb:4b:2e:b8:6b:84:b8:91:7a: c3:b5:e3:55:68:98:ec:32:b2:0a:70:90:17:50:24:0e:97:d2: 50:e4:9f:b3:63:49:48:7a:bb:5d:c9:53:f9:fa:61:7e:9f:6a: cb:77:0e:6f:7e:1f:61:f4:4d:c2:3a:ae:8d:2f:b5:41:4f:32: f9:41:b3:42 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1Rp3pMKiZEgSMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OWIwNTAyN2EtNjFkOC00ODAxLTliMzktNzlmMDM5ODU3ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht1R0Sz6CaAuCqcuoMZVZgXTRCetmvr287qF BwhrH6xJhtCa3hVv7+1AGazgpmsxor1l549rc7ywbvGN0yM8Yl6CXyXr7iKl+nVz ST1knVhyh0gZOfP2TtS/sP8Uu42nnKKpxsYsK5avyshWnUpdc/1tx2OAWVBDCAVu pnzgSx7LNpuMF8V1qA2TVtLhyj+fGZdPFBtFyEtq05C2FWL+Xtxfz+XlcobGnKj9 W+8ruHCZTYbejcVBNxRQKcQIzmGxg2uuLK1yz/EvarpeYEl9tCVVaocNtgNZHHVF FO6ZngTx2s2m64W8+PB0DM4E1Jq1lnGDPBV4cnbAmYuxB7w2EwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPzmAvJoTJkK1Z9xbLf45dCxEn+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjAxM2U2ZjAtOTIxMS0z Mjk3LTg3MzQtYjUyM2IxYzdlYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+2jevM7Ehh0lD2aCr5Z7hENW6LxZdZ1AGb3VH EGSf+zAlec5G1FxJ6edXCLKUMaTOwdhBqGqsVKbzjH44ZIxjXz7zvaJ03XaHFwXb ldgVcYyLTytFh9JGqLO78/OELHz6qpAqvt27Nmn6AveDoFQ8T6AGfN7bm2vyRL45 nU0WvYK3AXMovEPyvve7WyQxXjga0+8DlObEnEGH7F6g7Y3vTSOUNcJgYjvGVAGg PWrkxGwUxT0A81UAFCiWZRrLSy64a4S4kXrDteNVaJjsMrIKcJAXUCQOl9JQ5J+z Y0lIertdyVP5+mF+n2rLdw5vfh9h9E3COq6NL7VBTzL5QbNC -----END CERTIFICATE-----Generated at Mon Oct 20 03:37:09 2025 by rpki-client