$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa File: 47d1cdc4-2974-3633-8fbc-02664a883456.roa (raw, json) Hash identifier: /IzzlI74Zrq4gdMQO3Pi7yyzJH3vMo+hdksN3SATvQc= Subject key identifier: 89:10:E5:87:0D:D8:24:2A:E5:C0:54:70:17:E2:22:61:00:2E:5C:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC67F6E4177DFE503DA900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 396549 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:67:f6:e4:17:7d:fe:50:3d:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=66caa114-a5d8-416a-8377-09a04d74b977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2b:2a:af:1f:42:8b:01:9f:f8:34:68:35:b4: 28:52:ba:63:ba:28:e3:ca:e6:b5:a5:a6:7e:32:17: 62:bc:90:7d:d7:bf:e2:87:e1:2b:5d:81:6e:db:27: f2:23:68:7b:47:fa:2b:1f:b0:b0:b8:1d:54:49:e6: 04:c2:23:49:39:5b:1c:7b:cd:97:af:55:46:b2:32: 72:42:cc:09:58:49:f0:1c:8d:fb:3f:c7:c6:d6:5a: c6:e3:44:61:4b:92:9b:ab:bc:2f:4a:eb:cd:ea:cd: ed:2b:13:b0:d4:8b:cd:fb:43:a6:fe:3d:b8:bd:69: 2f:73:f9:fa:8c:18:1f:3b:06:71:5e:06:c9:2d:c1: d9:8b:8f:bb:61:5f:9a:77:17:0e:23:81:6e:a6:2e: d8:ab:73:43:12:6f:53:69:c4:01:a4:fb:91:e4:de: fc:2d:8b:93:df:89:46:13:80:9d:7b:2b:81:20:fd: 87:5f:74:3e:89:21:b4:aa:51:6d:08:f5:18:7b:0f: c9:2b:36:25:d1:0a:6e:fe:48:26:31:7f:bb:5f:8b: 04:a6:c5:66:a3:7a:ad:3e:0a:be:e0:80:42:ec:dc: bc:86:b8:40:cf:1d:4d:27:da:4a:1d:db:74:73:c7: ab:69:3a:eb:78:2d:8d:16:59:81:4c:f6:9f:2f:12: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:10:E5:87:0D:D8:24:2A:E5:C0:54:70:17:E2:22:61:00:2E:5C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:81:c9:0d:64:87:34:91:59:e9:d7:d4:64:a0:19:e5:4a:57: 04:3b:5b:af:80:05:d3:a8:52:f8:a4:8b:26:d1:71:76:f0:c6: 6c:ed:6e:6c:1c:bf:9a:ef:87:57:ee:c5:7c:96:64:1a:50:b1: 17:41:d7:9a:37:10:34:29:ac:de:af:c8:6d:86:77:9a:5b:b7: bf:49:d7:1a:81:14:8c:b7:c7:11:8a:96:16:ab:0e:f2:c7:6e: 89:11:eb:21:c4:cb:df:08:a9:53:1d:b0:df:ae:87:9b:82:0e: d2:9a:2d:dc:4e:8d:c3:12:c9:a8:83:a6:37:8a:f3:c9:f3:32: e2:c6:04:92:75:4e:f2:62:22:03:48:08:26:5d:7c:7e:d0:c6: 0d:80:b1:33:7f:d7:20:bb:cf:3a:f8:83:c5:3c:28:43:f7:61: d5:6a:72:43:65:4b:cd:e1:d5:5b:62:bf:6a:8b:d5:e7:69:22: 63:5e:56:a1:5f:49:fd:71:ed:d4:3d:b3:a5:1a:d5:7b:6f:70: 5d:f9:d7:5c:78:39:12:00:1c:ef:a4:e2:d7:f7:d8:17:db:c1: 57:4d:9a:d6:43:f5:8e:fd:7a:16:eb:94:e5:df:7f:b0:53:3d: d4:a8:6a:93:07:1a:25:6d:44:0e:5e:02:c6:c9:71:80:27:74: 86:ea:10:a4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGf25Bd9/lA9qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk NjZjYWExMTQtYTVkOC00MTZhLTgzNzctMDlhMDRkNzRiOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiisqrx9CiwGf+DRoNbQoUrpjuijjyua1paZ+ MhdivJB917/ih+ErXYFu2yfyI2h7R/orH7CwuB1USeYEwiNJOVsce82Xr1VGsjJy QswJWEnwHI37P8fG1lrG40RhS5Kbq7wvSuvN6s3tKxOw1IvN+0Om/j24vWkvc/n6 jBgfOwZxXgbJLcHZi4+7YV+adxcOI4Fupi7Yq3NDEm9TacQBpPuR5N78LYuT34lG E4CdeyuBIP2HX3Q+iSG0qlFtCPUYew/JKzYl0Qpu/kgmMX+7X4sEpsVmo3qtPgq+ 4IBC7Ny8hrhAzx1NJ9pKHdt0c8eraTrreC2NFlmBTPafLxIeowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIkQ5YcN2CQq5cBUcBfiImEALlyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDdkMWNkYzQtMjk3NC0z NjMzLThmYmMtMDI2NjRhODgzNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhgckNZIc0kVnp19RkoBnlSlcEO1uvgAXTqFL4 pIsm0XF28MZs7W5sHL+a74dX7sV8lmQaULEXQdeaNxA0Kazer8hthneaW7e/Sdca gRSMt8cRipYWqw7yx26JEeshxMvfCKlTHbDfroebgg7Smi3cTo3DEsmog6Y3ivPJ 8zLixgSSdU7yYiIDSAgmXXx+0MYNgLEzf9cgu886+IPFPChD92HVanJDZUvN4dVb Yr9qi9XnaSJjXlahX0n9ce3UPbOlGtV7b3Bd+ddceDkSABzvpOLX99gX28FXTZrW Q/WO/XoW65Tl33+wUz3UqGqTBxolbUQOXgLGyXGAJ3SG6hCk -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:56 2025 by rpki-client