$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa File: 3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa (raw, json) Hash identifier: /5x5aGURLQvK2POImtdJ4qCxVKURRmHw6nuu/JgzVEg= Subject key identifier: 07:45:D7:EF:C1:7F:33:D4:B7:C1:F1:D2:7C:42:E2:EA:37:6B:93:DB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320E152146B7F3B90BF180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 22547 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0e:15:21:46:b7:f3:b9:0b:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=ce7ffb27-73b6-47fe-b705-ee9c724d5137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:6f:d6:09:c8:ae:1e:ce:2a:9f:9f:b2:24: 67:e3:76:49:fa:fe:84:40:7f:3f:04:d3:8e:91:2b: 47:01:34:1a:46:f0:8c:4c:76:da:70:0d:00:00:a5: 48:74:3c:50:49:5b:b0:8d:b1:a8:5b:79:fa:1a:3d: e9:ae:5c:db:80:fa:59:54:e8:55:2c:1a:73:3a:18: bf:d6:7b:59:96:8c:6e:cd:6d:7c:32:e9:da:40:a2: e3:36:2b:0c:4a:66:cb:a4:df:9b:75:d9:f1:6d:ba: 16:a0:5a:9d:43:5d:5f:a2:ea:34:f4:4f:d1:55:3b: c8:2c:9b:a2:46:42:6f:a2:8c:c4:73:14:45:5a:cb: 00:76:83:7e:a5:b4:48:f2:7d:44:64:87:63:7b:29: 53:e0:37:f3:36:e2:6b:89:3c:43:95:22:95:db:e7: da:2e:4e:81:4b:84:f9:6f:db:73:5c:49:32:19:d1: 11:9a:ea:e6:28:83:cf:0a:a8:43:53:7f:bf:e3:f6: 35:0d:cf:69:28:ad:c8:1c:f1:93:81:d4:3e:a5:d5: 4d:f5:aa:eb:b6:4c:4e:09:c6:ab:ef:58:e4:a0:20: b6:e9:c2:4e:3e:ed:22:2b:fc:e7:8e:c8:3e:e3:ac: 83:17:ec:81:9f:01:a5:77:ba:65:25:3a:12:ca:6c: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:45:D7:EF:C1:7F:33:D4:B7:C1:F1:D2:7C:42:E2:EA:37:6B:93:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2b:30:23:9d:f2:6e:43:3e:1d:60:99:ae:06:bb:97:26:cb: 2b:1d:76:c5:0d:f8:68:96:4c:f6:07:04:9c:41:01:29:7e:0c: 94:24:46:62:04:0e:c5:06:b4:22:c3:b4:83:ed:28:7c:4e:f8: 57:3a:4c:6d:76:18:59:43:4a:a5:57:d3:79:9d:5a:3e:45:cc: ee:dd:d2:25:e6:93:3f:0a:bc:bb:2b:66:f9:eb:dc:55:3c:52: dd:4e:10:26:68:d0:57:93:23:7d:1b:9b:28:68:0e:a4:85:48: 2f:79:ff:ef:96:14:83:cf:6c:3e:11:d6:2f:9b:d4:36:90:9b: 06:61:ce:f9:60:b3:dd:ec:b5:88:e4:6a:45:23:7e:79:1c:96: 90:12:5f:24:bf:11:55:8d:f3:dc:15:f5:4c:4e:35:ad:43:e9: f7:c8:b1:7e:2b:a1:4e:18:d1:97:e5:97:a3:77:0d:1f:2f:67: 15:a3:b4:5b:58:9f:46:f0:e8:2c:5e:44:c8:97:26:0c:6e:1b: e2:4e:29:5e:22:8a:5e:4c:e9:fa:79:16:a9:b7:a3:4a:29:6e: ef:eb:ec:08:91:f3:d8:4e:83:fa:87:77:43:55:21:2d:b9:62: 0d:01:3c:1b:63:33:43:4a:69:a2:82:46:2a:9c:9f:14:56:15: e0:b6:fa:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg4VIUa387kL8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk Y2U3ZmZiMjctNzNiNi00N2ZlLWI3MDUtZWU5YzcyNGQ1MTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm21v1gnIrh7OKp+fsiRn43ZJ+v6EQH8/BNOO kStHATQaRvCMTHbacA0AAKVIdDxQSVuwjbGoW3n6Gj3prlzbgPpZVOhVLBpzOhi/ 1ntZloxuzW18MunaQKLjNisMSmbLpN+bddnxbboWoFqdQ11fouo09E/RVTvILJui RkJvoozEcxRFWssAdoN+pbRI8n1EZIdjeylT4DfzNuJriTxDlSKV2+faLk6BS4T5 b9tzXEkyGdERmurmKIPPCqhDU3+/4/Y1Dc9pKK3IHPGTgdQ+pdVN9arrtkxOCcar 71jkoCC26cJOPu0iK/znjsg+46yDF+yBnwGld7plJToSymzYowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAdF1+/BfzPUt8Hx0nxC4uo3a5PbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E2NWE4OTMtNmJjNS0z YzhlLWEwYjQtY2UyZWM3ZDE0Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4rMCOd8m5DPh1gma4Gu5cmyysddsUN+GiWTPYHBJxBASl+DJQk RmIEDsUGtCLDtIPtKHxO+Fc6TG12GFlDSqVX03mdWj5FzO7d0iXmkz8KvLsrZvnr 3FU8Ut1OECZo0FeTI30bmyhoDqSFSC95/++WFIPPbD4R1i+b1DaQmwZhzvlgs93s tYjkakUjfnkclpASXyS/EVWN89wV9UxONa1D6ffIsX4roU4Y0Zfll6N3DR8vZxWj tFtYn0bw6CxeRMiXJgxuG+JOKV4iil5M6fp5Fqm3o0opbu/r7AiR89hOg/qHd0NV IS25Yg0BPBtjM0NKaaKCRiqcnxRWFeC2+vE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:28 2025 by rpki-client