$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/845ce71c-d8f4-3401-91b8-72e4235b0854.roa File: 845ce71c-d8f4-3401-91b8-72e4235b0854.roa (raw, json) Hash identifier: SWz7Xvg4BnXBQ/QUkW947eOl4/TjYrnXR/3JRuyCoEI= Subject key identifier: 77:A5:9B:D0:7D:3E:42:06:81:A6:35:9A:C8:82:1B:2B:96:B4:78:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320F2DED5EE20025533F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/845ce71c-d8f4-3401-91b8-72e4235b0854.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396593 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0f:2d:ed:5e:e2:00:25:53:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=304de761-6878-4fe0-977e-67ffa2803a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:56:64:08:18:92:e6:13:d6:e1:4f:be:c9: c9:8d:43:a2:69:57:ca:43:08:78:72:28:ab:33:d5: 02:b6:bc:c6:d6:fc:44:52:2b:90:e2:93:8c:0e:30: 78:fe:4c:ed:a8:b2:f9:2a:c3:ec:8b:fc:80:b0:a4: ad:6f:9a:65:ca:c2:c9:13:ac:b8:25:d0:94:6a:16: d8:74:0b:9e:a7:42:97:01:36:4c:de:6c:07:58:03: 77:1a:a0:3d:3e:56:3b:a5:cb:73:b4:3d:8a:04:0c: e7:cb:dc:9a:af:2d:9a:b8:7b:4c:94:bb:50:d6:15: 97:d2:8a:72:b2:6b:0f:2e:1d:7c:17:d2:82:46:ad: 65:6f:25:9a:6f:ba:fb:dd:4b:27:bd:e8:86:b2:41: 55:b1:55:fd:c1:75:f8:86:d5:2f:3f:ad:39:9a:93: d1:44:3d:e0:b9:79:3f:a1:3a:c9:7b:6f:02:a2:00: 08:37:a5:e2:2f:c7:06:56:0b:48:da:2e:03:4c:92: 7a:a8:fc:de:ad:e6:ef:9b:71:92:19:b7:ac:db:45: f3:7a:95:98:d7:b1:c3:1b:ce:78:b7:c5:b8:1b:90: d5:af:cf:fb:6a:aa:73:27:3f:f4:d0:2f:07:6d:db: ac:e2:73:62:b6:36:cb:99:8a:94:54:d0:78:69:2f: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A5:9B:D0:7D:3E:42:06:81:A6:35:9A:C8:82:1B:2B:96:B4:78:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/845ce71c-d8f4-3401-91b8-72e4235b0854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0a:24:c7:db:1a:89:70:4e:d7:0f:52:24:bf:10:09:57:26: e3:e0:05:0b:d0:e5:7c:4a:3e:6d:04:56:c6:be:28:90:66:89: d6:0e:91:51:e3:ea:38:17:2d:25:93:81:3c:5c:8e:fe:18:2d: e0:8e:fb:f1:d8:05:4a:c0:db:42:89:96:cb:8e:62:2a:11:8c: 1e:e5:45:e5:b6:db:a4:d4:55:4b:a4:37:14:94:a0:60:e6:54: 43:8d:45:66:35:9f:e4:52:ea:d7:3b:06:17:46:dd:fc:4b:c1: d2:6b:d1:4a:56:9b:2a:7c:ef:92:8e:d0:7e:85:a5:16:57:28: 1d:c5:e2:69:34:aa:46:c3:c9:b5:16:54:18:8f:c4:54:47:4e: ea:3a:cd:23:19:6d:98:e5:5a:2b:de:16:2a:a1:78:30:cd:16: 23:88:67:a9:50:1a:08:f1:a1:a4:ce:f4:f1:6e:7a:5f:88:d4: 65:ed:59:4b:f0:9c:d2:fd:66:23:a6:11:ce:2b:fa:63:0d:6a: 56:fb:b1:72:57:49:5f:b4:68:c0:4a:2f:96:b4:9b:5a:7c:62: e9:e5:6e:45:b4:d0:12:9a:e4:50:fa:f6:fa:50:bf:e0:bd:2c: 60:a5:ce:bc:04:e4:c7:05:d2:9a:3c:d0:49:eb:60:10:e0:2c: ff:bd:b8:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg8t7V7iACVTPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MzA0ZGU3NjEtNjg3OC00ZmUwLTk3N2UtNjdmZmEyODAzYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzxWZAgYkuYT1uFPvsnJjUOiaVfKQwh4ciir M9UCtrzG1vxEUiuQ4pOMDjB4/kztqLL5KsPsi/yAsKStb5plysLJE6y4JdCUahbY dAuep0KXATZM3mwHWAN3GqA9PlY7pctztD2KBAzny9yary2auHtMlLtQ1hWX0opy smsPLh18F9KCRq1lbyWab7r73UsnveiGskFVsVX9wXX4htUvP605mpPRRD3guXk/ oTrJe28CogAIN6XiL8cGVgtI2i4DTJJ6qPzerebvm3GSGbes20XzepWY17HDG854 t8W4G5DVr8/7aqpzJz/00C8Hbdus4nNitjbLmYqUVNB4aS+bgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHelm9B9PkIGgaY1msiCGyuWtHg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQ1Y2U3MWMtZDhmNC0z NDAxLTkxYjgtNzJlNDIzNWIwODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIMKJMfbGolwTtcPUiS/EAlXJuPgBQvQ5XxKPm0EVsa+KJBmidYO kVHj6jgXLSWTgTxcjv4YLeCO+/HYBUrA20KJlsuOYioRjB7lReW226TUVUukNxSU oGDmVEONRWY1n+RS6tc7BhdG3fxLwdJr0UpWmyp875KO0H6FpRZXKB3F4mk0qkbD ybUWVBiPxFRHTuo6zSMZbZjlWiveFiqheDDNFiOIZ6lQGgjxoaTO9PFuel+I1GXt WUvwnNL9ZiOmEc4r+mMNalb7sXJXSV+0aMBKL5a0m1p8YunlbkW00BKa5FD69vpQ v+C9LGClzrwE5McF0po80EnrYBDgLP+9uF8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:11:50 2025 by rpki-client