$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa File: 662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa (raw, json) Hash identifier: 3gnvk4hubCD5NBa65OAXMRcYC7rWjnMgkvbpON0T6eU= Subject key identifier: F0:85:F4:EA:A3:00:72:A8:09:76:3B:60:A5:24:02:5D:2C:A4:F6:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC6FB77BA149A2005B2490 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 397195 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:6f:b7:7b:a1:49:a2:00:5b:24:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=1676ac23-4b5a-4b83-aded-65b78b6c44c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:4a:f9:72:c6:48:ce:42:d7:9f:04:9d:57: ed:18:4e:7e:0f:3d:0d:3c:bb:93:f3:c2:13:9e:03: 62:36:40:fa:d8:00:73:50:80:bc:85:75:05:96:20: 00:be:18:34:32:de:0b:53:f6:f6:1f:95:41:9e:1f: 63:d0:bd:d9:5c:da:e9:9d:79:4d:ee:30:ac:76:f8: 57:a1:b1:72:e7:ec:e4:fe:38:ba:27:89:ec:b9:3e: a5:76:96:d2:5b:59:80:e1:41:ef:5d:b4:12:f6:ab: e6:6f:84:f7:f1:8e:d5:c6:24:b7:7b:e5:ee:ad:2b: 11:c9:ff:c1:ae:4a:86:25:2b:c6:07:9c:40:26:af: 9d:8a:02:d9:1a:9f:bd:46:be:81:19:7a:11:67:60: b4:68:7a:46:43:ee:f7:db:c5:64:e1:0f:2e:66:1c: d6:8f:41:32:6b:28:14:a6:ce:b7:37:0a:3a:96:a5: da:7d:0c:a0:50:77:1b:49:54:bf:3a:ec:59:e6:b7: bb:aa:e3:50:68:91:fa:d9:82:fd:9b:77:ec:12:95: b4:ec:56:e7:55:c6:21:db:b5:5b:aa:fb:42:67:e3: 6e:10:0f:40:25:cf:12:10:a0:96:c4:98:c4:3e:48: cf:e0:b4:7b:1a:ef:30:85:ef:3b:7e:f2:b2:97:aa: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:F4:EA:A3:00:72:A8:09:76:3B:60:A5:24:02:5D:2C:A4:F6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e9:b1:9b:35:67:32:2c:6f:8c:60:5e:81:e3:48:c8:96:5a: 7d:e7:8f:41:7c:9c:18:44:e7:85:4f:34:5a:0d:a2:74:6c:0c: 19:f5:0a:ac:45:19:44:fe:b5:8b:34:dc:c6:1c:99:e7:ee:3a: d7:ab:e1:6f:9e:08:aa:41:23:65:54:d8:2d:84:44:eb:d9:b1: 67:f3:77:89:55:cc:a3:9a:dd:90:3e:58:86:db:9f:90:78:71: 4e:5c:72:51:46:29:3c:c7:3f:ed:dd:4b:4d:04:5a:fa:07:d0: 0c:f5:55:5e:ad:80:69:9b:c1:18:c2:16:3b:d2:f8:4c:e4:52: 73:e9:c0:1e:cf:9a:c2:7a:4b:f0:d5:17:e9:be:ff:d2:3b:e5: 2e:8c:15:74:5c:1a:a2:5d:35:5e:5c:43:49:4a:29:da:54:a7: 71:52:c0:4b:47:89:7e:32:e0:d9:f3:94:0c:1d:9d:f8:9e:fe: 8b:e7:b6:5c:65:05:30:4d:89:97:07:83:09:d4:9d:63:aa:93: a7:48:74:85:d1:0c:a0:6a:39:e4:30:a0:71:37:4e:db:08:9e: b4:5b:17:92:8f:d9:6e:9d:7a:2b:ee:4d:66:6f:20:35:e0:0e: 1f:45:d3:13:1b:9f:3c:6c:72:86:76:e4:64:9c:ac:ab:72:30: 73:c7:73:82 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrG+3e6FJogBbJJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk MTY3NmFjMjMtNGI1YS00YjgzLWFkZWQtNjViNzhiNmM0NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTBK+XLGSM5C158EnVftGE5+Dz0NPLuT88IT ngNiNkD62ABzUIC8hXUFliAAvhg0Mt4LU/b2H5VBnh9j0L3ZXNrpnXlN7jCsdvhX obFy5+zk/ji6J4nsuT6ldpbSW1mA4UHvXbQS9qvmb4T38Y7VxiS3e+XurSsRyf/B rkqGJSvGB5xAJq+digLZGp+9Rr6BGXoRZ2C0aHpGQ+7328Vk4Q8uZhzWj0EyaygU ps63Nwo6lqXafQygUHcbSVS/OuxZ5re7quNQaJH62YL9m3fsEpW07FbnVcYh27Vb qvtCZ+NuEA9AJc8SEKCWxJjEPkjP4LR7Gu8whe87fvKyl6ol+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPCF9OqjAHKoCXY7YKUkAl0spPYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjYyZmYzMjktMTc4Ni0z YmI0LWE3YWItZmU2MjdiN2UzYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB+6bGbNWcyLG+MYF6B40jIllp9549BfJwYROeF TzRaDaJ0bAwZ9QqsRRlE/rWLNNzGHJnn7jrXq+FvngiqQSNlVNgthETr2bFn83eJ Vcyjmt2QPliG25+QeHFOXHJRRik8xz/t3UtNBFr6B9AM9VVerYBpm8EYwhY70vhM 5FJz6cAez5rCekvw1Rfpvv/SO+UujBV0XBqiXTVeXENJSinaVKdxUsBLR4l+MuDZ 85QMHZ34nv6L57ZcZQUwTYmXB4MJ1J1jqpOnSHSF0QygajnkMKBxN07bCJ60WxeS j9lunXor7k1mbyA14A4fRdMTG588bHKGduRknKyrcjBzx3OC -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:02 2025 by rpki-client