$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35080e33-47be-38df-a305-84bd6ca0ad33.roa File: 35080e33-47be-38df-a305-84bd6ca0ad33.roa (raw, json) Hash identifier: wth5w0ecmGVwe1nIBteS2o018pQSXtJJ48K5vIAtGSQ= Subject key identifier: AE:0C:46:C2:06:81:C8:1A:23:C4:0D:DE:D3:F7:0B:3E:6E:E5:B9:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B59A1D891FE5ABDCAF1FF4CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35080e33-47be-38df-a305-84bd6ca0ad33.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 396550 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d8:91:fe:5a:bd:ca:f1:ff:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=a29a3fa7-1977-4e86-ae41-8e372d21c84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8b:a9:2b:7d:dc:80:dc:9a:97:ff:33:3e:ed: 78:a9:00:3e:d9:d9:88:cd:3b:04:59:c3:08:e7:03: 5f:c3:dc:2e:02:1f:32:7f:18:e0:5c:3f:be:95:1e: bf:b5:63:aa:a7:0a:38:cb:4a:f0:82:12:58:56:5a: fb:bf:30:3c:90:dd:13:18:65:b0:a3:8e:87:a2:0a: bb:53:0d:ea:8b:ca:81:68:19:ff:9d:61:8c:f1:7e: d9:01:02:6a:c5:fe:43:29:77:c8:b7:ec:a4:87:7f: 89:6f:5a:be:60:1c:6d:9c:9e:e4:77:8f:09:53:a0: 1e:ef:7c:01:62:32:ed:1b:7f:d8:8c:f4:a5:87:ae: 96:36:4f:62:46:f2:62:2b:bc:fa:de:8d:65:26:5b: e1:a3:26:d6:6e:d7:4f:f6:61:26:11:64:bc:0f:2b: 2a:c3:2d:4d:fa:ed:fa:49:80:2e:88:a9:07:34:2e: 61:49:d2:b7:fc:69:b5:43:ae:8d:91:c8:b4:53:96: ea:07:bb:4d:2e:1c:28:03:b0:c9:b2:36:d6:85:af: f3:68:40:1f:de:c4:1c:24:e9:c8:43:1c:6b:0c:95: b2:0f:63:7e:8d:d0:24:a6:4e:43:19:26:f3:c3:0f: a5:f1:f1:8b:9b:e0:5a:67:fb:86:bf:a4:67:69:3c: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:46:C2:06:81:C8:1A:23:C4:0D:DE:D3:F7:0B:3E:6E:E5:B9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35080e33-47be-38df-a305-84bd6ca0ad33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:41:b7:a3:d3:4e:e3:72:79:37:c4:d1:8e:95:6f:a1:30:0c: 91:e2:cf:36:18:99:94:31:e2:de:93:01:ce:6a:63:8c:7c:16: df:81:e1:5c:73:44:ce:c6:d0:07:94:9c:9b:9e:f8:6c:09:13: 7a:08:6c:3f:46:4c:39:7f:b7:67:6c:64:cb:65:c0:6f:bc:fc: 66:95:93:cc:85:dc:9e:13:f5:9f:55:39:be:d8:56:b7:c1:02: 96:2e:94:b8:d4:da:67:27:23:95:3e:36:95:41:13:05:80:11: 8f:02:f2:45:c7:24:04:dd:68:a4:0f:39:57:99:8c:a8:ee:05: 5f:98:3e:26:5f:66:3e:b9:90:72:45:0b:87:dd:26:36:85:af: 40:e7:d0:a8:08:d5:72:70:dc:65:6f:6f:64:96:27:39:38:c6: fb:72:db:d7:50:7b:1a:69:8a:a9:79:d7:7c:1b:39:8a:3a:58: ba:2a:17:a3:96:12:0b:64:ed:f5:40:f7:32:d7:42:94:cc:29: 5e:1c:f6:17:cc:ce:2e:be:47:0e:79:1a:c0:77:ca:5c:34:83: 39:91:88:83:71:62:08:3e:78:80:97:87:db:54:73:68:c9:eb: 1d:1f:05:bf:b9:0c:5e:83:bd:b0:f6:c7:fa:be:0e:f6:07:af: 23:a0:42:64 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodiR/lq9yvH/TMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk YTI5YTNmYTctMTk3Ny00ZTg2LWFlNDEtOGUzNzJkMjFjODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIupK33cgNyal/8zPu14qQA+2dmIzTsEWcMI 5wNfw9wuAh8yfxjgXD++lR6/tWOqpwo4y0rwghJYVlr7vzA8kN0TGGWwo46Hogq7 Uw3qi8qBaBn/nWGM8X7ZAQJqxf5DKXfIt+ykh3+Jb1q+YBxtnJ7kd48JU6Ae73wB YjLtG3/YjPSlh66WNk9iRvJiK7z63o1lJlvhoybWbtdP9mEmEWS8Dysqwy1N+u36 SYAuiKkHNC5hSdK3/Gm1Q66Nkci0U5bqB7tNLhwoA7DJsjbWha/zaEAf3sQcJOnI QxxrDJWyD2N+jdAkpk5DGSbzww+l8fGLm+BaZ/uGv6RnaTyLHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK4MRsIGgcgaI8QN3tP3Cz5u5bniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzUwODBlMzMtNDdiZS0z OGRmLWEzMDUtODRiZDZjYTBhZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCmQbej007jcnk3xNGOlW+hMAyR4s82GJmUMeLe kwHOamOMfBbfgeFcc0TOxtAHlJybnvhsCRN6CGw/Rkw5f7dnbGTLZcBvvPxmlZPM hdyeE/WfVTm+2Fa3wQKWLpS41NpnJyOVPjaVQRMFgBGPAvJFxyQE3WikDzlXmYyo 7gVfmD4mX2Y+uZByRQuH3SY2ha9A59CoCNVycNxlb29klic5OMb7ctvXUHsaaYqp edd8GzmKOli6KhejlhILZO31QPcy10KUzCleHPYXzM4uvkcOeRrAd8pcNIM5kYiD cWIIPniAl4fbVHNoyesdHwW/uQxeg72w9sf6vg72B68joEJk -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:29 2025 by rpki-client