$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92f7670f-d78d-320e-be6d-68ec70516570.roa File: 92f7670f-d78d-320e-be6d-68ec70516570.roa (raw, json) Hash identifier: Q5Wh5XFYGhtK4+8zNwPp0KnA3TXVYh0gir8a5S/Y7T0= Subject key identifier: 24:00:0F:57:0B:15:76:B3:7E:DB:71:50:F2:F2:C6:C0:0C:4E:68:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320F7ADEEBBFFE770A6130 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92f7670f-d78d-320e-be6d-68ec70516570.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396592 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0f:7a:de:eb:bf:fe:77:0a:61:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=c6a80fd9-ef47-43d8-9231-50e17c79d7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:ee:10:56:04:e2:1b:c4:59:1d:f9:84:d9: a4:9c:92:3d:92:58:d3:39:60:79:be:29:04:10:c2: c9:da:84:c0:39:61:4b:19:95:55:e5:4b:58:63:3f: 7f:69:95:ba:7e:8e:2a:de:72:05:cb:5a:01:fd:0e: 21:cb:da:d8:c9:e0:d5:ca:65:f3:a9:bb:f7:0a:9c: 47:89:5d:a3:a2:bb:7e:45:82:d2:11:fd:67:97:3d: ae:1a:2a:9f:ea:b2:01:c6:e1:71:5d:92:ec:f2:cc: 5a:d0:bf:af:97:cb:55:60:7d:8f:d1:7d:6a:43:9f: 61:18:a7:26:1d:89:dc:be:45:de:75:39:76:91:f4: 59:76:96:a2:6c:c1:34:ec:c0:4f:a1:87:c5:fc:08: d5:8f:f2:4d:51:f3:28:58:de:10:65:ca:7f:3e:75: 09:12:bd:a9:61:fe:7e:3a:e4:95:39:49:78:c7:82: 37:e4:b2:cf:9c:1f:ae:19:16:d8:92:a6:3f:bd:b5: 93:1f:21:e7:a5:5c:39:51:da:d0:19:39:6c:7a:40: ac:1c:20:c3:05:94:5e:c7:bc:85:3f:ee:8c:e8:a1: 1c:2e:9b:db:16:f3:94:e6:0c:10:d4:7d:47:a3:95: 11:fd:d0:09:ee:d6:65:10:48:0c:f7:54:43:2d:8c: a4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:0F:57:0B:15:76:B3:7E:DB:71:50:F2:F2:C6:C0:0C:4E:68:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92f7670f-d78d-320e-be6d-68ec70516570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:3f:71:34:6c:bc:82:89:44:21:63:7e:3d:e3:31:16:f0:48: 55:1c:ad:dc:b5:0e:1a:b6:3d:98:95:94:4b:67:9a:5f:c0:13: db:13:ff:2a:4c:62:a4:b1:23:a7:66:7d:19:ff:ac:a0:be:b8: 6b:cc:53:cf:44:83:ea:4e:b1:38:48:16:44:58:ef:cd:55:d5: af:89:6f:5e:52:54:7a:da:de:5e:19:5d:6e:13:c3:cf:c9:04: b3:b1:94:db:30:38:eb:c1:11:0f:70:dd:b6:00:88:26:23:e2: 86:85:35:18:81:1a:a2:84:74:02:70:a7:0c:ad:a9:a4:4a:9c: 0e:ea:c2:47:5d:5a:80:14:2f:03:27:cd:09:23:c7:63:de:82: 92:aa:4a:9b:b6:07:dc:e7:56:86:3e:85:fb:3b:eb:9a:70:26: 28:c9:44:00:b2:e7:07:b1:d0:7a:77:71:25:36:00:2d:68:0e: a8:82:b1:81:50:66:21:fc:32:e3:c7:4a:76:04:d5:05:d9:3e: f2:f3:6f:48:80:e7:2a:1c:c8:50:b9:96:fc:9b:4e:12:ac:05: 5b:39:0a:fa:10:0a:65:19:93:8b:41:3f:56:b3:88:e1:d1:b3: 11:68:9d:46:f0:6b:50:f0:fe:2d:56:30:cf:73:0e:be:e3:1a: 07:03:87:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg963uu//ncKYTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YzZhODBmZDktZWY0Ny00M2Q4LTkyMzEtNTBlMTdjNzlkN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlbuEFYE4hvEWR35hNmknJI9kljTOWB5vikE EMLJ2oTAOWFLGZVV5UtYYz9/aZW6fo4q3nIFy1oB/Q4hy9rYyeDVymXzqbv3CpxH iV2jort+RYLSEf1nlz2uGiqf6rIBxuFxXZLs8sxa0L+vl8tVYH2P0X1qQ59hGKcm HYncvkXedTl2kfRZdpaibME07MBPoYfF/AjVj/JNUfMoWN4QZcp/PnUJEr2pYf5+ OuSVOUl4x4I35LLPnB+uGRbYkqY/vbWTHyHnpVw5UdrQGTlsekCsHCDDBZRex7yF P+6M6KEcLpvbFvOU5gwQ1H1Ho5UR/dAJ7tZlEEgM91RDLYykxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQAD1cLFXazfttxUPLyxsAMTmiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTJmNzY3MGYtZDc4ZC0z MjBlLWJlNmQtNjhlYzcwNTE2NTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALE/cTRsvIKJRCFjfj3jMRbwSFUcrdy1Dhq2PZiVlEtnml/AE9sT /ypMYqSxI6dmfRn/rKC+uGvMU89Eg+pOsThIFkRY781V1a+Jb15SVHra3l4ZXW4T w8/JBLOxlNswOOvBEQ9w3bYAiCYj4oaFNRiBGqKEdAJwpwytqaRKnA7qwkddWoAU LwMnzQkjx2PegpKqSpu2B9znVoY+hfs765pwJijJRACy5wex0Hp3cSU2AC1oDqiC sYFQZiH8MuPHSnYE1QXZPvLzb0iA5yocyFC5lvybThKsBVs5CvoQCmUZk4tBP1az iOHRsxFonUbwa1Dw/i1WMM9zDr7jGgcDh70= -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:00 2025 by rpki-client