$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/834bb3ec-7677-39ad-ad47-ebb0652f6240.roa File: 834bb3ec-7677-39ad-ad47-ebb0652f6240.roa (raw, json) Hash identifier: jSGYr5ADsGerk/C4DZtaFcDTH2Ycx8YQXs3Li6oUrrI= Subject key identifier: EE:D3:F0:C7:7E:34:12:0C:18:80:C8:87:4E:FA:A4:41:B1:0E:24:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC6A86CB88CDE67B325140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/834bb3ec-7677-39ad-ad47-ebb0652f6240.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 396542 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:6a:86:cb:88:cd:e6:7b:32:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=9dcefe0d-aa56-4214-9884-10fada94a3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:26:d6:a5:90:b2:32:84:b4:88:9e:41:b0:c4: d2:54:4f:6d:c9:e2:b1:20:47:e6:b8:61:fb:aa:bb: a2:ac:12:8e:71:bf:4d:40:88:34:75:9b:c4:31:a9: ee:cb:6e:8c:d1:41:05:be:3f:67:e1:8a:4d:84:54: 9b:0d:50:35:fb:70:46:1f:9f:f6:fa:45:b5:47:cc: 40:e0:4e:00:4e:0b:4b:d6:6e:6a:ba:61:a7:da:17: bc:0d:b5:f8:48:2a:5f:61:10:da:18:bc:5e:71:cc: 96:19:bf:2b:73:45:31:b0:f8:b0:7e:ac:23:10:68: e0:17:2f:d9:fb:8d:54:f9:8e:72:e7:d9:f1:c3:95: 72:c5:5d:09:4d:3b:ca:ab:79:3e:b2:e9:39:6b:ad: 9c:af:9b:78:bf:a7:69:76:1a:0f:06:a7:ef:d5:5e: 0f:32:62:13:4f:d3:32:65:39:35:23:83:09:d9:e0: d8:7a:97:d1:cb:42:c4:6f:0f:98:96:b6:e6:80:4d: 79:f9:0b:90:c4:bc:14:30:e5:ea:1b:2b:e0:66:5c: c5:22:6a:93:ec:26:e6:f5:96:a6:28:1f:f1:bc:77: a7:ba:9f:70:6a:dd:89:a3:32:b8:5a:ac:e3:18:96: 94:d4:07:cb:21:eb:21:d0:c9:bd:9f:26:5b:b6:db: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D3:F0:C7:7E:34:12:0C:18:80:C8:87:4E:FA:A4:41:B1:0E:24:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/834bb3ec-7677-39ad-ad47-ebb0652f6240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:30:8f:4c:06:c7:d7:90:40:7f:8f:e7:9a:51:24:c1:9e:1b: ad:7c:86:53:4e:3a:19:d0:ab:2d:87:df:72:67:a4:80:75:cb: cd:d7:2d:36:6d:2e:50:d5:e9:51:ee:de:4d:cb:5d:5f:86:5b: 25:10:9a:ba:1a:0e:03:b0:f6:61:5a:b3:e5:4f:6a:48:d3:42: 10:c9:96:94:18:59:7f:aa:74:b6:67:e3:89:17:ef:44:38:3b: 9f:0c:08:f2:08:72:85:44:5d:08:0d:b8:b0:14:fb:59:30:62: 92:97:2e:8e:fc:15:c8:f9:b3:a2:ab:18:9e:46:2c:90:00:a6: b6:d5:31:64:7c:d7:26:b7:d7:33:fd:86:dc:dc:8e:2a:da:c1: 19:e4:3a:90:98:be:74:de:29:9b:39:39:2e:4d:f2:11:c6:89: 4f:a0:03:94:cb:8b:74:a2:c9:e4:e9:1f:1d:62:ff:f1:5d:5f: 5d:91:13:e4:0d:5d:7b:ab:0a:e5:06:31:7e:d1:f6:1a:bb:1b: c9:7e:8b:14:87:dd:c3:ff:58:c7:31:ca:43:68:79:15:20:80: a5:a2:5a:c4:7d:be:f6:56:5d:95:dc:3c:aa:81:50:ec:60:d3: af:0f:a2:b6:ac:0a:52:9c:41:b2:ae:84:12:7b:24:d3:bc:18: 7e:37:92:6c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGqGy4jN5nsyUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk OWRjZWZlMGQtYWE1Ni00MjE0LTk4ODQtMTBmYWRhOTRhM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiybWpZCyMoS0iJ5BsMTSVE9tyeKxIEfmuGH7 qruirBKOcb9NQIg0dZvEManuy26M0UEFvj9n4YpNhFSbDVA1+3BGH5/2+kW1R8xA 4E4ATgtL1m5qumGn2he8DbX4SCpfYRDaGLxeccyWGb8rc0UxsPiwfqwjEGjgFy/Z +41U+Y5y59nxw5VyxV0JTTvKq3k+suk5a62cr5t4v6dpdhoPBqfv1V4PMmITT9My ZTk1I4MJ2eDYepfRy0LEbw+YlrbmgE15+QuQxLwUMOXqGyvgZlzFImqT7Cbm9Zam KB/xvHenup9wat2JozK4WqzjGJaU1AfLIesh0Mm9nyZbtttNGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO7T8Md+NBIMGIDIh076pEGxDiTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODM0YmIzZWMtNzY3Ny0z OWFkLWFkNDctZWJiMDY1MmY2MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAbMI9MBsfXkEB/j+eaUSTBnhutfIZTTjoZ0Kst h99yZ6SAdcvN1y02bS5Q1elR7t5Ny11fhlslEJq6Gg4DsPZhWrPlT2pI00IQyZaU GFl/qnS2Z+OJF+9EODufDAjyCHKFRF0IDbiwFPtZMGKSly6O/BXI+bOiqxieRiyQ AKa21TFkfNcmt9cz/Ybc3I4q2sEZ5DqQmL503imbOTkuTfIRxolPoAOUy4t0osnk 6R8dYv/xXV9dkRPkDV17qwrlBjF+0fYauxvJfosUh93D/1jHMcpDaHkVIIClolrE fb72Vl2V3DyqgVDsYNOvD6K2rApSnEGyroQSeyTTvBh+N5Js -----END CERTIFICATE-----Generated at Mon Oct 20 09:32:16 2025 by rpki-client