$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535651a6-bbe6-3404-94fd-1aa0f764c81a.roa File: 535651a6-bbe6-3404-94fd-1aa0f764c81a.roa (raw, json) Hash identifier: jwabwUcRHR44lUZIxZCB6Cr3eT6Ce+PgzsPn9LZfZxQ= Subject key identifier: 6A:4A:F2:43:89:EF:E3:3A:4F:B1:BA:EB:B5:BE:51:0B:B0:ED:41:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B838205ABDEC4EC3187521080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535651a6-bbe6-3404-94fd-1aa0f764c81a.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396547 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:05:ab:de:c4:ec:31:87:52:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=b66b9986-7962-43c7-a772-98672311e9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6e:c7:ef:70:9c:42:aa:ea:fa:f9:37:41:af: fc:21:26:d1:17:e5:b5:73:d2:2b:46:11:8d:51:ea: 8d:8e:cf:45:7e:a5:34:3e:d1:21:22:87:08:67:b7: b8:53:10:18:6c:57:24:8a:60:64:99:3b:f6:5e:ce: 59:5e:77:55:38:5f:6c:88:d4:fe:3e:b9:e9:7f:c3: a8:9b:d5:4d:62:21:e1:9f:fd:4c:d6:24:45:c2:7b: 55:2a:3a:50:32:18:cb:07:a5:1a:5e:a9:40:16:da: 2a:38:04:72:5c:bc:e2:a8:ff:6d:f6:cc:22:0e:a5: ee:21:71:6c:62:90:cd:a4:6d:2b:68:20:9c:70:a2: 9a:2b:32:13:55:f7:6b:43:8e:90:b6:c7:ac:97:79: 8e:b5:7f:06:30:d4:18:b9:0f:98:34:e5:d4:8f:8e: 3b:59:fe:fb:aa:8a:2b:00:36:41:3e:8a:f9:9b:87: eb:1a:9f:c4:f2:f9:66:f9:c4:73:7f:8e:71:b5:1f: ee:8e:5e:3f:99:a7:22:35:5c:55:78:a5:fc:27:1b: 90:f6:42:50:13:50:bf:6e:8b:f9:49:01:30:db:07: cb:4e:2d:0e:02:76:97:d3:fd:38:e6:ec:34:62:c6: c9:b9:56:b6:26:91:bb:09:0a:4f:51:41:35:87:20: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:F2:43:89:EF:E3:3A:4F:B1:BA:EB:B5:BE:51:0B:B0:ED:41:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535651a6-bbe6-3404-94fd-1aa0f764c81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:5b:1a:3f:56:76:c9:4c:a3:2a:f9:98:e2:21:04:ef:58:a8: c8:3f:53:cd:0b:2a:c6:bf:12:50:b5:f2:58:aa:ad:3d:7a:70: 3d:55:e6:39:d3:0e:44:06:ec:b8:c3:a8:b8:5a:6a:ef:15:6d: 6b:d3:f0:c1:3b:40:af:61:58:fe:6d:77:8b:c9:7b:39:90:71: 21:3a:42:29:43:02:97:e7:1d:c0:00:f8:63:60:65:e3:6d:ea: 6e:2a:2e:a2:ee:5e:3c:e1:58:52:60:2c:9c:27:29:b9:8e:72: 97:18:6d:72:0f:52:b2:44:61:e5:79:fc:2e:e7:24:ad:cb:a9: ed:8e:83:3d:a1:73:91:e9:09:69:6a:cd:0b:80:bb:ff:5c:e3: e2:f2:c5:50:c5:f5:8e:b1:fe:6e:c1:4c:70:bd:50:73:61:ce: b4:24:a1:18:13:08:30:fa:94:3c:14:81:aa:df:8a:c3:85:11: c6:2b:58:1b:72:29:ae:f4:10:1a:d0:1f:e5:ab:9b:55:9a:5a: 0e:d5:a4:3f:1e:39:f2:d7:79:c6:8b:78:64:c2:7c:a7:e2:9f: 9b:4f:0c:ae:01:4c:c2:a9:8c:28:bf:d9:52:a3:ef:93:b1:2b: 69:fe:1c:39:3b:c3:97:0f:6d:d8:23:ea:09:39:f3:0a:b5:76: 38:dd:a4:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDggWr3sTsMYdSEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YjY2Yjk5ODYtNzk2Mi00M2M3LWE3NzItOTg2NzIzMTFlOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W7H73CcQqrq+vk3Qa/8ISbRF+W1c9IrRhGN UeqNjs9FfqU0PtEhIocIZ7e4UxAYbFckimBkmTv2Xs5ZXndVOF9siNT+Prnpf8Oo m9VNYiHhn/1M1iRFwntVKjpQMhjLB6UaXqlAFtoqOARyXLziqP9t9swiDqXuIXFs YpDNpG0raCCccKKaKzITVfdrQ46Qtsesl3mOtX8GMNQYuQ+YNOXUj447Wf77qoor ADZBPor5m4frGp/E8vlm+cRzf45xtR/ujl4/maciNVxVeKX8JxuQ9kJQE1C/bov5 SQEw2wfLTi0OAnaX0/045uw0YsbJuVa2JpG7CQpPUUE1hyDpvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGpK8kOJ7+M6T7G667W+UQuw7UEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTM1NjUxYTYtYmJlNi0z NDA0LTk0ZmQtMWFhMGY3NjRjODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALNbGj9WdslMoyr5mOIhBO9YqMg/U80LKsa/ElC18liqrT16cD1V 5jnTDkQG7LjDqLhaau8VbWvT8ME7QK9hWP5td4vJezmQcSE6QilDApfnHcAA+GNg ZeNt6m4qLqLuXjzhWFJgLJwnKbmOcpcYbXIPUrJEYeV5/C7nJK3Lqe2Ogz2hc5Hp CWlqzQuAu/9c4+LyxVDF9Y6x/m7BTHC9UHNhzrQkoRgTCDD6lDwUgarfisOFEcYr WBtyKa70EBrQH+Wrm1WaWg7VpD8eOfLXecaLeGTCfKfin5tPDK4BTMKpjCi/2VKj 75OxK2n+HDk7w5cPbdgj6gk58wq1djjdpK0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:16:00 2025 by rpki-client