$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa File: 43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa (raw, json) Hash identifier: Jck6vDZHEow/TQc5mXeLEvg7xQ0sA5r5qJhAaxEYQ4g= Subject key identifier: 0F:3D:C2:DA:BC:3E:EC:88:7C:4A:46:24:4B:30:2A:24:3B:2F:BB:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B663213E0D901BE2FF6615A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 397203 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:13:e0:d9:01:be:2f:f6:61:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=23164ca6-b5cd-4616-9226-3eaa5fe5880b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:61:3b:d0:62:82:e5:92:a5:6b:d5:98:47: 23:d7:4a:62:09:bc:d9:d2:d3:7c:1c:b5:73:28:40: 6b:8b:df:b1:fe:00:66:9b:98:2c:da:88:e6:f5:f3: 2b:ff:47:5e:94:cf:21:05:ba:68:ff:c5:26:8f:8f: c1:f1:a9:e4:5c:55:ba:ac:a9:aa:c9:b9:44:84:b8: fa:c7:9c:ac:23:74:78:be:37:21:df:1b:6e:c7:70: 30:5e:3c:56:5b:11:95:af:20:34:b8:ae:3c:ee:38: 76:f7:fa:c7:cc:65:1d:5e:64:f7:16:3c:ee:fe:37: b3:92:66:ba:48:b6:86:63:33:b6:07:93:8f:3d:f9: 1a:90:fd:65:e1:e1:74:90:61:03:f0:42:ea:58:7b: c3:97:2a:12:e2:51:cb:80:19:91:b8:39:46:44:ae: 8e:3d:2c:e4:d2:70:eb:7d:67:f8:d2:78:1f:06:f6: 82:aa:14:62:9a:0d:80:ae:68:a4:42:07:be:2f:64: 6d:a8:7c:75:34:2b:18:37:08:b4:07:98:5f:a8:54: b5:d6:6c:97:c1:aa:eb:49:52:2d:12:51:e3:3f:b0: a5:49:9e:7c:42:1d:d5:2a:cc:0d:00:8b:5f:49:a8: f9:d6:5c:b6:65:9b:5f:9a:3e:8f:ee:44:7f:1b:c0: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:C2:DA:BC:3E:EC:88:7C:4A:46:24:4B:30:2A:24:3B:2F:BB:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f2:4d:ee:e5:41:5c:9d:4f:e7:4b:6e:49:c9:1a:71:4d:af: 15:78:58:d5:84:55:c9:a1:f7:09:2b:b4:94:a4:b7:5c:b5:e8: 7e:e4:68:f1:7d:e5:58:8b:13:30:77:34:97:69:7e:4b:55:1b: b7:ba:43:c7:5e:d8:f0:2c:aa:86:a3:a8:3e:e9:09:e9:c9:ac: 53:62:2c:d7:bb:12:b8:6d:97:cd:32:e6:07:b4:ca:a4:b2:d7: 47:b0:0a:ef:b0:8d:be:fb:3b:e0:2c:80:71:68:86:af:72:8b: d5:46:20:a4:88:9b:12:5a:42:92:39:9f:53:7d:a7:7e:3e:8f: 74:c6:3c:49:b6:56:2f:8e:9f:dc:ff:be:91:ab:db:0c:e1:c4: 11:92:17:3e:ce:e5:6f:c1:3e:eb:64:50:a5:df:b4:f7:82:a6: 0b:53:71:75:92:c1:1c:61:aa:00:8a:5d:be:31:aa:8a:0f:3c: a3:d6:ee:d6:6a:de:00:4d:ec:1f:35:88:1a:d8:89:fb:c2:24: 07:bc:6b:2e:07:59:83:4e:3c:04:f6:88:ca:58:c4:af:1e:77: 8e:7d:19:fe:f7:d2:0f:02:66:72:e4:3f:6f:b5:b4:70:50:9b: 0b:4d:c3:68:f5:c5:c8:d3:fa:43:86:4d:a3:5c:7e:33:55:78: 1a:0d:57:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhPg2QG+L/ZhWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MjMxNjRjYTYtYjVjZC00NjE2LTkyMjYtM2VhYTVmZTU4ODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+9hO9BiguWSpWvVmEcj10piCbzZ0tN8HLVz KEBri9+x/gBmm5gs2ojm9fMr/0delM8hBbpo/8Umj4/B8ankXFW6rKmqyblEhLj6 x5ysI3R4vjch3xtux3AwXjxWWxGVryA0uK487jh29/rHzGUdXmT3Fjzu/jezkma6 SLaGYzO2B5OPPfkakP1l4eF0kGED8ELqWHvDlyoS4lHLgBmRuDlGRK6OPSzk0nDr fWf40ngfBvaCqhRimg2ArmikQge+L2RtqHx1NCsYNwi0B5hfqFS11myXwarrSVIt ElHjP7ClSZ58Qh3VKswNAItfSaj51ly2ZZtfmj6P7kR/G8AOTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA89wtq8PuyIfEpGJEswKiQ7L7tgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNiNWU0MDQtZGE5NS0z Zjg1LWIzOWYtMmFlOGM4NWViZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbyTe7lQVydT+dLbknJGnFNrxV4WNWEVcmh9wkrtJSkt1y16H7k aPF95ViLEzB3NJdpfktVG7e6Q8de2PAsqoajqD7pCenJrFNiLNe7Erhtl80y5ge0 yqSy10ewCu+wjb77O+AsgHFohq9yi9VGIKSImxJaQpI5n1N9p34+j3TGPEm2Vi+O n9z/vpGr2wzhxBGSFz7O5W/BPutkUKXftPeCpgtTcXWSwRxhqgCKXb4xqooPPKPW 7tZq3gBN7B81iBrYifvCJAe8ay4HWYNOPAT2iMpYxK8ed459Gf730g8CZnLkP2+1 tHBQmwtNw2j1xcjT+kOGTaNcfjNVeBoNV2M= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:55 2025 by rpki-client