$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fcf209-cb88-3794-ae23-dcf1111eb08d.roa File: 24fcf209-cb88-3794-ae23-dcf1111eb08d.roa (raw, json) Hash identifier: r/azs9HVvrdFQ7/JvE9pUPV0L8rwWVAkP7DkBh+SeDc= Subject key identifier: E2:8D:2C:77:FA:31:0F:A7:25:D7:28:E7:6D:CF:BE:5E:FC:0F:B1:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B663212866F6A30096C8A4340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fcf209-cb88-3794-ae23-dcf1111eb08d.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396555 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:12:86:6f:6a:30:09:6c:8a:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=9ba7a30b-4e38-4e8a-9d85-2ead63e57f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:97:b5:72:91:93:1f:98:18:b7:8e:4d:63: 5b:92:fe:09:58:90:a0:79:cc:cf:51:9e:37:89:5d: 4f:af:8a:71:1f:8c:d6:a8:4c:81:fe:fe:7c:05:68: 72:36:cc:f2:d1:9d:87:96:a0:f9:d5:10:97:1a:fa: 67:dc:84:fa:c6:ff:3a:9f:55:c0:17:e4:3d:aa:c9: af:02:41:ea:94:31:ea:62:96:b7:27:12:fc:6e:75: 9d:11:8d:1a:85:0b:44:ef:19:f0:03:05:df:ba:b4: 06:25:c2:aa:b6:61:ca:d5:f4:54:45:3a:5b:d9:2e: aa:cd:01:e6:83:55:81:d0:d3:df:f9:ad:19:25:26: ef:61:0c:f5:99:e1:83:3c:b7:3f:95:40:c8:90:4e: 4b:ef:f0:d3:90:41:3c:54:b0:66:0a:ed:1e:a7:eb: 95:5c:9c:a9:89:50:de:67:7d:12:b4:e8:13:6c:96: 66:b6:a1:04:48:71:e4:13:04:a8:8e:03:38:35:91: 23:98:6f:5d:04:ef:12:c2:41:c0:f7:a7:47:d4:82: 46:ab:a1:08:cb:77:fe:e3:4d:bd:a1:74:9c:75:e0: 1e:f7:a6:c0:dd:9b:e8:45:57:70:81:7f:6a:dd:0b: db:9f:37:ff:db:02:95:31:8e:a5:b9:3c:66:35:f4: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8D:2C:77:FA:31:0F:A7:25:D7:28:E7:6D:CF:BE:5E:FC:0F:B1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fcf209-cb88-3794-ae23-dcf1111eb08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a6:4e:45:78:59:fd:df:b9:06:79:8f:8a:11:2d:74:b5:8b: 5b:c2:50:92:3b:e0:52:56:69:5c:af:fe:94:6a:8b:6a:c4:68: f8:c4:dd:b3:7b:74:b5:05:b2:9c:82:11:41:f1:bc:a5:e6:7e: 41:e1:12:33:51:0f:9d:4f:ac:b4:9d:a5:a5:2d:8d:f7:7f:7f: 98:0e:cc:23:95:7c:a4:12:0a:06:15:1b:5b:5c:a8:52:8b:aa: 79:31:19:6b:2f:44:16:91:7c:4a:b3:82:6f:79:00:5b:49:5f: 4b:77:8c:e4:b0:ad:41:46:d6:c9:fb:ec:00:b1:98:6b:e3:2f: 0b:06:f2:84:80:fc:33:05:2d:37:8e:90:21:c3:73:ea:fa:b0: 10:8c:ba:78:05:1d:fa:96:55:e9:57:af:66:15:f0:de:96:16: 82:0c:a8:cd:3f:5c:7c:58:eb:f5:55:3f:0b:a0:fa:a1:a2:27: 8d:e4:36:e6:79:be:3b:c0:ae:78:7c:2b:b3:96:34:8c:a1:2f: 48:51:15:66:67:35:13:2e:ce:70:18:3d:47:e1:1f:fb:30:72: 61:e6:db:de:c7:ad:64:f4:52:9d:75:52:e5:fe:17:e3:3e:82: be:58:de:29:1b:8c:38:72:17:ac:ae:90:f0:ac:2e:6b:91:ea: 45:7f:18:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhKGb2owCWyKQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk OWJhN2EzMGItNGUzOC00ZThhLTlkODUtMmVhZDYzZTU3ZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bWXtXKRkx+YGLeOTWNbkv4JWJCgeczPUZ43 iV1Pr4pxH4zWqEyB/v58BWhyNszy0Z2HlqD51RCXGvpn3IT6xv86n1XAF+Q9qsmv AkHqlDHqYpa3JxL8bnWdEY0ahQtE7xnwAwXfurQGJcKqtmHK1fRURTpb2S6qzQHm g1WB0NPf+a0ZJSbvYQz1meGDPLc/lUDIkE5L7/DTkEE8VLBmCu0ep+uVXJypiVDe Z30StOgTbJZmtqEESHHkEwSojgM4NZEjmG9dBO8SwkHA96dH1IJGq6EIy3f+4029 oXScdeAe96bA3ZvoRVdwgX9q3Qvbnzf/2wKVMY6luTxmNfSn5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOKNLHf6MQ+nJdco523Pvl78D7F9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjRmY2YyMDktY2I4OC0z Nzk0LWFlMjMtZGNmMTExMWViMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCmTkV4Wf3fuQZ5j4oRLXS1i1vCUJI74FJWaVyv/pRqi2rEaPjE 3bN7dLUFspyCEUHxvKXmfkHhEjNRD51PrLSdpaUtjfd/f5gOzCOVfKQSCgYVG1tc qFKLqnkxGWsvRBaRfEqzgm95AFtJX0t3jOSwrUFG1sn77ACxmGvjLwsG8oSA/DMF LTeOkCHDc+r6sBCMungFHfqWVelXr2YV8N6WFoIMqM0/XHxY6/VVPwug+qGiJ43k NuZ5vjvArnh8K7OWNIyhL0hRFWZnNRMuznAYPUfhH/swcmHm297HrWT0Up11UuX+ F+M+gr5Y3ikbjDhyF6yukPCsLmuR6kV/GCw= -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:28 2025 by rpki-client