$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41cdf550-f74e-3ec8-a868-9bc4f4edd2c0.roa File: 41cdf550-f74e-3ec8-a868-9bc4f4edd2c0.roa (raw, json) Hash identifier: 9ydsWjzBk95s7PsDWYnihwbF/KCdHWq2qNVnoaSBMyM= Subject key identifier: E3:21:87:98:69:93:3A:80:CB:67:56:C0:59:89:7E:F6:05:60:C1:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F375273E8E153B2AFBA5E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41cdf550-f74e-3ec8-a868-9bc4f4edd2c0.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396604 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:52:73:e8:e1:53:b2:af:ba:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=92bbc21a-c851-4aae-b5a1-d7f4f301dbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:f4:81:54:08:59:fc:e4:8a:d7:e1:c2:4a: bf:25:2c:6b:8f:05:51:01:6b:2b:ba:c4:e4:44:0c: c7:b5:52:1b:e0:2a:bc:82:b5:6e:96:aa:08:c6:b1: 2a:80:8f:40:c2:a4:2d:c3:8c:7c:43:b8:09:b1:83: 0d:a6:72:45:ef:f4:2a:88:77:66:74:66:94:ed:d3: 9e:49:99:75:35:af:81:48:78:5d:11:43:62:59:5b: 09:ff:e9:14:6f:a6:ff:42:a0:8f:8e:23:57:2f:11: b4:bd:ba:f1:fe:b1:30:78:17:fa:05:3d:64:df:6e: e7:24:fd:26:fd:a4:4f:7c:18:0a:1c:e7:ad:1e:3d: bf:55:fc:f1:05:af:6e:be:b3:88:4e:bd:6c:aa:e1: fb:d7:1c:84:ba:f6:56:87:88:fc:ae:84:10:e1:d0: 35:2a:f9:10:ff:bd:6e:76:43:6d:31:5d:ce:e9:7d: 40:97:98:d2:54:16:15:43:95:26:87:e4:8e:e8:c8: cb:70:02:3b:07:82:7e:28:68:20:7b:07:5b:60:b9: 03:8c:3d:cf:ce:ff:dd:f9:60:68:aa:10:96:9c:bc: 49:95:01:95:d2:e7:14:ef:28:32:b2:90:bc:20:6f: d5:51:ab:77:65:6f:6a:95:ae:e2:af:2f:15:9c:09: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:21:87:98:69:93:3A:80:CB:67:56:C0:59:89:7E:F6:05:60:C1:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41cdf550-f74e-3ec8-a868-9bc4f4edd2c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:79:be:29:fe:c0:f1:d2:23:97:d7:e0:a7:82:26:69:59:01: be:3d:fe:ae:77:92:a8:4c:cb:ac:8e:ec:4d:f0:49:5a:09:02: 90:78:4d:65:02:d4:ab:d9:b6:db:93:39:08:94:ca:ea:b2:22: e1:0a:c3:05:c1:26:8a:08:da:6d:51:4b:06:42:c7:c9:37:94: ce:67:e1:5d:4a:34:81:5b:32:fe:36:35:02:d5:74:35:be:f4: c1:bf:92:5d:af:f5:9b:c4:e2:c1:0b:1c:75:29:70:df:58:fa: 99:39:8c:14:42:0b:5f:32:ff:7f:06:c6:9f:cf:9a:92:5f:bc: 55:6e:1c:c8:c1:e3:d1:5b:74:56:4a:90:85:80:96:2e:0a:4d: f8:9b:19:aa:fa:01:74:f8:61:3b:36:9a:14:53:b6:08:6b:e2: 7d:7c:70:62:10:fe:da:cb:77:83:56:4a:3c:eb:0b:7a:77:8e: 13:be:4e:54:6a:08:5b:e6:da:15:3c:ee:90:71:b0:ae:1c:88: d8:d3:43:8c:76:bc:07:e4:bc:bd:68:ad:46:fd:b0:5e:20:34: 39:d2:be:ea:ee:b5:42:fb:61:d9:00:d2:22:72:8d:f9:6f:2e: 89:3c:fc:d0:8a:27:a1:52:2d:e6:ad:1c:08:29:1d:83:bc:3d: 63:e0:8a:d8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1Jz6OFTsq+6XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OTJiYmMyMWEtYzg1MS00YWFlLWI1YTEtZDdmNGYzMDFkYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssX0gVQIWfzkitfhwkq/JSxrjwVRAWsrusTk RAzHtVIb4Cq8grVulqoIxrEqgI9AwqQtw4x8Q7gJsYMNpnJF7/QqiHdmdGaU7dOe SZl1Na+BSHhdEUNiWVsJ/+kUb6b/QqCPjiNXLxG0vbrx/rEweBf6BT1k327nJP0m /aRPfBgKHOetHj2/VfzxBa9uvrOITr1squH71xyEuvZWh4j8roQQ4dA1KvkQ/71u dkNtMV3O6X1Al5jSVBYVQ5Umh+SO6MjLcAI7B4J+KGggewdbYLkDjD3Pzv/d+WBo qhCWnLxJlQGV0ucU7ygyspC8IG/VUat3ZW9qla7iry8VnAm2sQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOMhh5hpkzqAy2dWwFmJfvYFYMHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDFjZGY1NTAtZjc0ZS0z ZWM4LWE4NjgtOWJjNGY0ZWRkMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAKeb4p/sDx0iOX1+CngiZpWQG+Pf6ud5KoTMus juxN8ElaCQKQeE1lAtSr2bbbkzkIlMrqsiLhCsMFwSaKCNptUUsGQsfJN5TOZ+Fd SjSBWzL+NjUC1XQ1vvTBv5Jdr/WbxOLBCxx1KXDfWPqZOYwUQgtfMv9/Bsafz5qS X7xVbhzIwePRW3RWSpCFgJYuCk34mxmq+gF0+GE7NpoUU7YIa+J9fHBiEP7ay3eD Vko86wt6d44Tvk5Uaghb5toVPO6QcbCuHIjY00OMdrwH5Ly9aK1G/bBeIDQ50r7q 7rVC+2HZANIico35by6JPPzQiiehUi3mrRwIKR2DvD1j4IrY -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:15 2025 by rpki-client