$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70828bd8-7c78-35c8-b23f-00c66886ba42.roa File: 70828bd8-7c78-35c8-b23f-00c66886ba42.roa (raw, json) Hash identifier: 5TWEe6AobDilB/QvQSe9RwyaAu54rn5rv/bF6qhJoak= Subject key identifier: EB:F6:7D:A4:44:63:8B:2F:72:2B:16:B8:3E:CA:6D:37:63:97:DD:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B59A1DBB67B3F265A68160480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70828bd8-7c78-35c8-b23f-00c66886ba42.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 396572 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:db:b6:7b:3f:26:5a:68:16:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=3e964545-6a10-4f63-9c87-11a6bdfd8c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:e3:67:0e:d0:0e:20:fc:01:31:f6:80:9e: 30:b9:f7:7b:f8:36:ec:8c:c4:fa:51:b3:56:bc:a6: d2:6d:40:af:e3:13:19:55:41:dc:ac:70:8c:9a:d5: e9:5e:e2:cd:2d:b4:4f:23:bc:45:36:cb:5b:af:c2: f2:df:16:9b:49:01:a5:e2:37:78:1c:b2:78:d9:1c: 55:ea:ff:c3:c4:bd:9e:f2:6b:e1:2a:1d:46:44:2a: a6:06:b7:4a:6e:0a:02:d4:2c:32:a6:29:cd:11:4d: 30:90:64:e3:68:41:97:60:40:9a:f1:39:10:ac:fd: c7:7f:1f:55:81:6a:a2:b1:cd:12:28:74:f9:ac:84: 80:32:7a:ca:a3:be:1c:37:9a:7f:da:4b:48:2e:4e: 23:85:c4:43:3f:22:73:35:56:69:e1:c9:0e:49:20: 3f:15:1c:d2:73:27:b3:4a:f2:d1:5c:13:5a:7a:fd: 71:0c:7b:4c:22:1e:0f:c0:2d:ed:ac:7d:c2:96:4b: b2:0b:a7:d6:c2:5c:7a:a4:15:05:f3:e3:48:36:92: da:0a:e4:f8:49:47:29:f2:43:36:96:57:35:67:1d: 06:43:d5:74:b9:67:d5:1f:90:aa:82:5c:6f:a3:a0: 07:3c:0c:19:09:b3:97:7f:18:66:d3:6d:a7:95:d9: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F6:7D:A4:44:63:8B:2F:72:2B:16:B8:3E:CA:6D:37:63:97:DD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70828bd8-7c78-35c8-b23f-00c66886ba42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:25:73:ee:2c:95:62:ff:32:4c:3f:c5:63:cd:9a:21:26:19: 3a:7a:e3:ab:11:92:e8:fe:09:86:42:8e:95:64:ae:33:7e:f1: fd:43:d4:aa:8d:a4:95:69:40:4d:44:53:e4:c9:6a:b9:07:74: e7:38:9b:bd:64:f9:bf:5a:7c:0e:23:7d:4b:66:70:bd:f7:06: a6:55:77:19:7e:98:73:44:ba:6a:0f:8a:24:96:f6:63:f0:d0: cb:ac:92:05:25:f5:38:e2:df:20:81:cc:e8:d3:00:f3:d5:f4: f9:a4:81:95:be:a5:f8:b4:5f:ff:b2:01:28:eb:23:8d:a4:2f: f3:dc:1b:44:f1:be:7b:82:0f:96:cd:ee:f5:79:1b:ca:5d:df: 32:19:bb:5d:cc:d5:89:99:b2:60:61:b5:36:d0:89:4c:67:29: 1a:36:e1:da:50:b5:b6:69:b0:ce:aa:15:8a:93:77:fe:66:55: ac:6a:d0:a2:10:1e:c6:a9:6e:f6:55:47:97:53:96:e6:52:97: 25:1a:51:65:16:7d:7b:2e:0a:2f:34:74:4c:b0:93:9c:fd:7a: 7d:48:d5:72:22:89:79:c8:b9:1b:60:25:c1:d2:b6:7c:01:47: 8b:c9:02:68:1c:a8:a3:db:8b:73:9d:e1:a4:fa:f1:af:f7:9b: 9f:f0:8b:ea -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodu2ez8mWmgWBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk M2U5NjQ1NDUtNmExMC00ZjYzLTljODctMTFhNmJkZmQ4YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujnjZw7QDiD8ATH2gJ4wufd7+DbsjMT6UbNW vKbSbUCv4xMZVUHcrHCMmtXpXuLNLbRPI7xFNstbr8Ly3xabSQGl4jd4HLJ42RxV 6v/DxL2e8mvhKh1GRCqmBrdKbgoC1CwypinNEU0wkGTjaEGXYECa8TkQrP3Hfx9V gWqisc0SKHT5rISAMnrKo74cN5p/2ktILk4jhcRDPyJzNVZp4ckOSSA/FRzScyez SvLRXBNaev1xDHtMIh4PwC3trH3ClkuyC6fWwlx6pBUF8+NINpLaCuT4SUcp8kM2 llc1Zx0GQ9V0uWfVH5Cqglxvo6AHPAwZCbOXfxhm022nldkFRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOv2faREY4svcisWuD7KbTdjl92FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzA4MjhiZDgtN2M3OC0z NWM4LWIyM2YtMDBjNjY4ODZiYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3JXPuLJVi/zJMP8VjzZohJhk6euOrEZLo/gmG Qo6VZK4zfvH9Q9SqjaSVaUBNRFPkyWq5B3TnOJu9ZPm/WnwOI31LZnC99wamVXcZ fphzRLpqD4oklvZj8NDLrJIFJfU44t8ggczo0wDz1fT5pIGVvqX4tF//sgEo6yON pC/z3BtE8b57gg+Wze71eRvKXd8yGbtdzNWJmbJgYbU20IlMZykaNuHaULW2abDO qhWKk3f+ZlWsatCiEB7GqW72VUeXU5bmUpclGlFlFn17LgovNHRMsJOc/Xp9SNVy Iol5yLkbYCXB0rZ8AUeLyQJoHKij24tzneGk+vGv95uf8Ivq -----END CERTIFICATE-----Generated at Mon Oct 20 03:40:33 2025 by rpki-client