$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ffaae4-d8ae-3e33-bf4f-f02a325e09ce.roa File: 21ffaae4-d8ae-3e33-bf4f-f02a325e09ce.roa (raw, json) Hash identifier: jYyxYA7MszwX4P2VcAH21WDAp6T/2uuWYKbA18PFUxw= Subject key identifier: AB:81:6A:C8:57:74:15:15:8B:E2:37:5F:D5:43:39:A7:F1:7A:A1:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B59A1D6C878832B4A6148A080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ffaae4-d8ae-3e33-bf4f-f02a325e09ce.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 20362 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d6:c8:78:83:2b:4a:61:48:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=444d5b3b-9398-4b6a-8dad-b5c3be0770ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:f3:2e:6a:a7:c1:33:ed:d0:92:e5:d9:d3: 96:71:7c:7e:25:e3:42:3a:82:16:5d:73:82:53:88: 72:6e:d8:c5:7e:79:b6:1b:6c:12:82:28:1b:c0:fc: 3b:f7:cd:89:1c:b2:bf:e3:cd:f5:01:ab:c9:14:c2: e7:07:30:a5:47:20:09:64:c2:38:db:9d:68:fd:e1: 5e:d3:fd:4f:49:d9:6b:34:36:a5:17:9b:5c:21:ce: 68:63:4b:d4:de:24:c6:4e:47:6d:7e:12:ac:9b:0a: 7a:b4:d2:a6:62:94:23:03:2e:75:c5:0d:60:42:2e: 17:58:6d:19:ba:ae:cb:1c:0f:38:ec:26:7f:77:f8: e9:bb:00:cb:d8:fa:f3:24:9d:2b:7c:f3:4a:28:ab: e4:b6:46:20:08:34:f0:39:8a:1d:1f:21:ec:f3:ee: b4:31:77:0c:2e:45:45:1e:58:66:a9:39:0d:2b:00: 81:d9:9e:df:1e:a9:9f:b4:89:35:9e:19:09:e9:40: 33:02:50:eb:75:96:07:f1:76:da:f7:93:4d:8a:f7: 23:55:46:be:d3:80:b1:7e:8b:0d:5d:e5:e7:b5:3f: d7:52:f6:f2:23:dd:11:20:66:0a:90:9f:41:f8:43: ef:c6:fb:04:20:5d:80:61:03:0b:96:6e:00:1a:37: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:81:6A:C8:57:74:15:15:8B:E2:37:5F:D5:43:39:A7:F1:7A:A1:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ffaae4-d8ae-3e33-bf4f-f02a325e09ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:17:cd:6b:de:00:80:57:27:b9:6b:90:c8:5f:66:dc:14:d3: 4f:b6:5b:28:30:27:31:86:8d:e4:cd:73:f7:cf:d1:76:07:28: 17:2c:8a:02:d2:7a:dc:12:5f:86:12:82:2a:17:ea:5f:15:28: b6:4b:36:79:ef:d3:f1:38:e0:ca:9a:fc:4c:12:f4:b7:02:0b: c0:b3:40:b0:83:17:07:73:4d:7f:96:e5:a7:b3:cc:17:09:f2: da:49:f3:13:bb:a4:e3:f9:fa:72:8a:15:a5:a4:fe:a2:fc:15: 24:56:42:dd:19:5c:db:7e:50:d5:94:4e:ee:4d:6b:d2:81:16: ae:dc:89:76:c8:ef:4d:ea:f8:09:ef:72:47:8e:d4:b1:18:70: ab:4a:41:95:f0:50:07:c3:a9:0a:93:bc:9f:97:66:db:70:30: a8:ba:c5:27:e1:96:d6:a4:ca:59:5c:40:23:ab:d3:20:81:6c: 31:df:ac:e0:1b:62:76:e0:58:9c:3e:c6:74:fb:09:67:9d:44: bf:c6:4f:e1:0f:f9:b8:16:fe:11:4e:92:03:84:69:e8:a1:21: 36:ba:26:96:da:10:71:aa:bf:c2:b7:64:3d:43:ef:7f:3f:d2: d0:07:9e:ac:b8:b7:2f:86:24:2c:9b:c6:bb:70:85:74:82:58: 4b:10:34:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodbIeIMrSmFIoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NDQ0ZDViM2ItOTM5OC00YjZhLThkYWQtYjVjM2JlMDc3MGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpLzLmqnwTPt0JLl2dOWcXx+JeNCOoIWXXOC U4hybtjFfnm2G2wSgigbwPw7982JHLK/4831AavJFMLnBzClRyAJZMI4251o/eFe 0/1PSdlrNDalF5tcIc5oY0vU3iTGTkdtfhKsmwp6tNKmYpQjAy51xQ1gQi4XWG0Z uq7LHA847CZ/d/jpuwDL2PrzJJ0rfPNKKKvktkYgCDTwOYodHyHs8+60MXcMLkVF HlhmqTkNKwCB2Z7fHqmftIk1nhkJ6UAzAlDrdZYH8Xba95NNivcjVUa+04CxfosN XeXntT/XUvbyI90RIGYKkJ9B+EPvxvsEIF2AYQMLlm4AGjfLYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKuBashXdBUVi+I3X9VDOafxeqEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFmZmFhZTQtZDhhZS0z ZTMzLWJmNGYtZjAyYTMyNWUwOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsF81r3gCAVye5a5DIX2bcFNNPtlsoMCcxho3k zXP3z9F2BygXLIoC0nrcEl+GEoIqF+pfFSi2SzZ579PxOODKmvxMEvS3AgvAs0Cw gxcHc01/luWns8wXCfLaSfMTu6Tj+fpyihWlpP6i/BUkVkLdGVzbflDVlE7uTWvS gRau3Il2yO9N6vgJ73JHjtSxGHCrSkGV8FAHw6kKk7yfl2bbcDCousUn4ZbWpMpZ XEAjq9MggWwx36zgG2J24FicPsZ0+wlnnUS/xk/hD/m4Fv4RTpIDhGnooSE2uiaW 2hBxqr/Ct2Q9Q+9/P9LQB56suLcvhiQsm8a7cIV0glhLEDRm -----END CERTIFICATE-----Generated at Mon Oct 20 03:16:32 2025 by rpki-client