$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa File: 926ea4bf-bd76-3931-a192-05e08f68364c.roa (raw, json) Hash identifier: h/7fhUf2tUegS9xqgByCzKUVZW8ECxy6QrzeRftC2fo= Subject key identifier: 5F:5B:E8:F5:B9:D3:3D:93:A5:09:65:F4:2A:73:DD:D7:78:43:48:09 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B59A1DC23F2AD7DE0CD8203A4 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 396586 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:dc:23:f2:ad:7d:e0:cd:82:03:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=901ea279-b8b5-46b4-b7f8-b69268f71b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:37:0d:d6:0a:8a:c0:c5:27:6f:48:12:81: 57:6e:18:02:d3:de:fd:f8:ab:6a:06:08:04:45:fa: 6c:14:9d:6f:5e:2f:a1:18:ed:6f:52:ee:20:1b:05: 0f:f5:c5:a6:00:e3:03:b6:98:8d:a5:a7:97:0d:64: c1:0f:63:98:4c:15:dd:a1:ea:f3:7f:6e:0c:68:23: 97:d8:73:ae:35:ad:2f:5e:64:b1:2d:97:12:0c:87: 35:a6:4c:ee:18:2d:d7:45:b2:c0:05:e7:22:a8:39: d4:ba:3c:38:b4:0e:0b:75:be:90:9b:17:cd:52:b1: 91:39:26:aa:94:8a:62:8c:d7:6f:ac:23:f0:f3:b0: 19:69:60:e8:38:4c:7d:c8:f6:11:d8:bb:c1:df:63: 35:b5:db:ba:4a:6d:78:a2:03:47:88:e1:4e:e9:1b: 3a:bb:da:f5:b2:9a:9d:99:96:b8:a1:b0:3f:d4:07: c7:3e:7a:2e:37:2d:22:54:12:ac:47:52:ef:a7:53: ca:00:06:84:e1:e7:a2:f5:0e:1c:25:63:f5:fb:8b: ce:99:6e:a7:d2:b4:ed:9e:1a:53:49:17:2d:21:5c: 4e:ac:eb:5e:8b:f9:e8:05:0d:3f:78:e1:ba:03:55: 66:dd:32:e7:18:43:f6:95:f9:92:b3:7e:aa:12:fa: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5B:E8:F5:B9:D3:3D:93:A5:09:65:F4:2A:73:DD:D7:78:43:48:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fb:24:6a:55:a6:61:d1:2f:f7:8a:ff:3b:e1:c9:87:e1:f1: e2:43:67:b0:58:c8:0a:bf:62:04:e7:72:5b:46:48:86:dc:46: ce:6e:5a:4e:21:9f:f8:40:a3:6f:7b:83:20:82:aa:ad:2c:e3: 65:1f:68:08:86:46:77:ae:54:c4:25:d8:0e:f9:d5:35:41:e4: bc:04:52:4d:4b:af:dc:41:94:0e:2f:15:81:6e:49:9c:3e:fd: dd:76:fb:9b:94:3e:c8:de:f9:b8:c9:a9:ab:33:10:3b:17:b8: ba:c3:23:2f:96:b7:b4:66:ce:7f:64:ae:d4:2c:95:f2:b6:aa: b5:68:c0:b5:dd:6d:6a:70:57:c2:02:16:9c:d1:f2:80:50:c5: 28:96:3b:1b:fb:42:1c:2c:c3:5c:0b:8a:fb:61:ce:2c:c2:f2: aa:57:08:fa:70:6a:c7:30:05:d4:a1:45:ae:1e:3d:64:ea:23: 5c:dd:ac:40:7f:49:b1:83:df:3d:e5:93:b6:71:a0:df:55:01: 89:03:cb:85:c0:4f:2d:ee:fc:57:77:8f:7d:5a:ba:9c:4e:25: f4:69:95:3c:06:cb:15:98:44:67:80:d0:55:15:4b:d7:c2:59: 7c:bc:1a:0c:1c:1b:df:54:4f:fd:58:44:50:79:79:ef:fa:95: ee:b4:7e:b9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodwj8q194M2CA6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk OTAxZWEyNzktYjhiNS00NmI0LWI3ZjgtYjY5MjY4ZjcxYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGQ3DdYKisDFJ29IEoFXbhgC0979+KtqBggE RfpsFJ1vXi+hGO1vUu4gGwUP9cWmAOMDtpiNpaeXDWTBD2OYTBXdoerzf24MaCOX 2HOuNa0vXmSxLZcSDIc1pkzuGC3XRbLABeciqDnUujw4tA4Ldb6QmxfNUrGROSaq lIpijNdvrCPw87AZaWDoOEx9yPYR2LvB32M1tdu6Sm14ogNHiOFO6Rs6u9r1spqd mZa4obA/1AfHPnouNy0iVBKsR1Lvp1PKAAaE4eei9Q4cJWP1+4vOmW6n0rTtnhpT SRctIVxOrOtei/noBQ0/eOG6A1Vm3TLnGEP2lfmSs36qEvrqEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF9b6PW50z2TpQll9Cpz3dd4Q0gJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTI2ZWE0YmYtYmQ3Ni0z OTMxLWExOTItMDVlMDhmNjgzNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9+yRqVaZh0S/3iv874cmH4fHiQ2ewWMgKv2IE 53JbRkiG3EbOblpOIZ/4QKNve4MggqqtLONlH2gIhkZ3rlTEJdgO+dU1QeS8BFJN S6/cQZQOLxWBbkmcPv3ddvublD7I3vm4yamrMxA7F7i6wyMvlre0Zs5/ZK7ULJXy tqq1aMC13W1qcFfCAhac0fKAUMUoljsb+0IcLMNcC4r7Yc4swvKqVwj6cGrHMAXU oUWuHj1k6iNc3axAf0mxg9895ZO2caDfVQGJA8uFwE8t7vxXd499WrqcTiX0aZU8 BssVmERngNBVFUvXwll8vBoMHBvfVE/9WERQeXnv+pXutH65 -----END CERTIFICATE-----Generated at Mon Oct 20 07:00:41 2025 by rpki-client