$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dfafff9-d185-320d-a8e8-a138674bdbc8.roa File: 3dfafff9-d185-320d-a8e8-a138674bdbc8.roa (raw, json) Hash identifier: JVo2XVhiO2gkDUj8tTNfqrESY2vB0Sa+cgyi3cy4JGI= Subject key identifier: 19:F8:3F:79:02:2E:37:77:0F:8A:77:1E:3C:83:3A:F2:4B:B3:32:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6632115AA103B8055A2A56DE Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dfafff9-d185-320d-a8e8-a138674bdbc8.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 397194 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:11:5a:a1:03:b8:05:5a:2a:56:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=94c12cf6-7756-430e-b431-e6b8eec0bd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e0:86:dd:20:2d:66:6a:62:bf:78:d6:c4:a2: 3f:b8:b9:8e:f5:49:2d:30:9c:3e:1d:e6:8d:a1:cc: bc:a7:11:2e:8f:13:0b:0b:02:f7:bf:cb:00:a6:e7: 48:3a:76:a4:af:29:9f:15:7e:74:5d:31:40:97:72: 7e:fb:da:4e:c6:4b:f6:01:ea:df:57:da:46:71:a6: 9c:3f:58:2d:97:3e:06:cb:5c:08:03:7a:60:88:2d: 37:13:4b:0b:72:59:04:4d:d7:ff:ab:4f:d7:56:4e: 15:2c:1d:a2:71:ee:7b:67:63:fb:bc:21:8a:c0:a7: de:46:21:f5:39:c0:1e:d1:ab:31:dc:6e:43:32:8b: 84:c5:02:17:f5:9b:e5:6f:54:1e:4f:d5:f6:16:dc: db:0f:91:6a:72:ac:3e:5a:94:7c:33:3d:59:a1:2b: b4:a4:a6:81:78:e7:6c:36:5a:3f:77:56:02:59:97: 7c:a6:f3:cf:98:66:d5:d8:bf:de:5b:5d:6f:10:15: a2:9d:2e:c7:6e:7a:1d:38:dd:53:c0:ee:39:da:1d: 14:96:26:ca:3a:87:08:76:09:1e:d1:da:b5:f9:ff: 0f:9e:08:c8:a5:0e:e3:25:3d:dd:2c:f1:e0:3d:a7: e7:36:b9:92:7e:a8:32:48:02:81:c6:74:d2:42:59: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F8:3F:79:02:2E:37:77:0F:8A:77:1E:3C:83:3A:F2:4B:B3:32:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dfafff9-d185-320d-a8e8-a138674bdbc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d1:f6:2a:f4:e2:85:d6:6b:b0:c9:59:77:06:92:25:8e:8a: a9:cf:5c:db:a1:03:c1:8c:5c:55:ce:02:ce:67:c7:77:26:d9: 47:a5:f5:c8:ae:2c:14:c4:57:f4:54:a2:c0:17:69:14:da:26: 8a:96:60:0f:8f:42:96:78:ee:1a:60:01:30:4c:78:0e:d6:84: f9:ba:f9:91:40:e5:56:21:80:b0:d4:a4:ee:a3:3e:98:9f:29: 65:0f:22:93:7e:94:f6:de:e8:b0:65:7c:02:bc:03:fa:e8:fc: a6:4e:17:d1:81:17:af:83:3b:ec:30:d8:2b:8b:fa:47:f1:34: 43:44:f3:ac:f9:73:87:a0:a6:51:4f:41:8b:b1:7d:14:18:7f: d6:dd:17:91:3b:2a:45:36:07:bc:6f:14:ed:e3:2b:cf:95:0e: 25:d1:07:8f:88:a6:21:8a:51:5f:d3:0f:0d:fc:54:c4:0d:e1: a0:d8:e1:05:57:0e:14:8d:e0:2e:77:f0:7a:e4:75:3f:66:2b: 1f:23:fe:75:4c:f0:a0:b5:91:f2:9f:97:8f:d1:0e:b0:41:7c: ad:57:75:7f:99:90:ef:24:c5:ff:c3:82:75:c5:b8:91:02:63: 6c:72:08:f9:4d:2d:b6:60:16:85:d5:8e:8e:80:54:6f:74:a3: 07:de:05:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhFaoQO4BVoqVt4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk OTRjMTJjZjYtNzc1Ni00MzBlLWI0MzEtZTZiOGVlYzBiZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguCG3SAtZmpiv3jWxKI/uLmO9UktMJw+HeaN ocy8pxEujxMLCwL3v8sApudIOnakrymfFX50XTFAl3J++9pOxkv2AerfV9pGcaac P1gtlz4Gy1wIA3pgiC03E0sLclkETdf/q0/XVk4VLB2ice57Z2P7vCGKwKfeRiH1 OcAe0asx3G5DMouExQIX9Zvlb1QeT9X2FtzbD5Fqcqw+WpR8Mz1ZoSu0pKaBeOds Nlo/d1YCWZd8pvPPmGbV2L/eW11vEBWinS7HbnodON1TwO452h0UlibKOocIdgke 0dq1+f8PngjIpQ7jJT3dLPHgPafnNrmSfqgySAKBxnTSQlmqqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBn4P3kCLjd3D4p3HjyDOvJLszKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RmYWZmZjktZDE4NS0z MjBkLWE4ZTgtYTEzODY3NGJkYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJrR9ir04oXWa7DJWXcGkiWOiqnPXNuhA8GMXFXOAs5nx3cm2Uel 9ciuLBTEV/RUosAXaRTaJoqWYA+PQpZ47hpgATBMeA7WhPm6+ZFA5VYhgLDUpO6j PpifKWUPIpN+lPbe6LBlfAK8A/ro/KZOF9GBF6+DO+ww2CuL+kfxNENE86z5c4eg plFPQYuxfRQYf9bdF5E7KkU2B7xvFO3jK8+VDiXRB4+IpiGKUV/TDw38VMQN4aDY 4QVXDhSN4C538HrkdT9mKx8j/nVM8KC1kfKfl4/RDrBBfK1XdX+ZkO8kxf/DgnXF uJECY2xyCPlNLbZgFoXVjo6AVG90owfeBZk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:55 2025 by rpki-client