$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa File: 9f57b5fe-9a49-347f-99a9-78749563a00a.roa (raw, json) Hash identifier: khizbHvRPzcKElXYaunrqYoQ8aeSWhxoS6EwktFLlmY= Subject key identifier: A2:38:0A:EB:C2:83:A6:76:65:F5:E0:83:53:EA:01:70:F3:78:4A:B8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B3AEC529C0D6E95846C47F080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 396611 IP address blocks: 2001:500:30ff::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:52:9c:0d:6e:95:84:6c:47:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=c1fa4404-a7c6-40d0-904f-7f1e7849521e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:63:07:91:da:da:d3:78:be:b0:32:1d:39:66: 61:b1:6b:0a:56:f4:1e:f7:c6:04:52:35:11:30:c3: aa:24:45:3a:81:4a:d6:ff:04:9f:cd:44:de:d1:e0: 1f:d1:60:78:82:2a:99:75:c7:b5:96:b8:3f:41:9e: 00:32:42:37:01:34:16:78:47:4c:e7:f2:1a:9a:36: f5:0d:f3:cb:e4:53:53:5d:4e:b7:31:6f:8b:21:72: f1:83:06:ca:ea:18:10:16:e4:e8:a5:37:52:e8:e8: f1:61:02:bc:55:e2:d8:11:79:6a:0f:48:fa:22:f3: ad:e0:16:0b:d9:d1:d8:7d:8d:eb:81:ce:80:54:60: ff:90:55:c2:91:8a:28:5b:ec:b2:9e:fd:5a:56:9b: 04:53:c0:7e:33:cd:6e:8f:1b:70:8d:00:f7:40:2a: 98:70:9a:9e:44:25:90:35:85:89:3c:0e:e1:82:a8: f9:30:67:cf:7a:1c:3b:c5:19:25:f5:c6:99:1e:f8: c2:ee:81:47:12:9f:bf:68:4e:f4:23:a0:26:3e:24: 1d:b0:6b:87:75:da:fa:38:3c:53:b7:f6:84:d9:7e: 99:48:19:e3:52:e1:44:ef:25:47:a8:56:12:45:43: 9f:f0:87:3d:19:99:a5:c0:8d:a8:cd:b6:5e:20:bc: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:38:0A:EB:C2:83:A6:76:65:F5:E0:83:53:EA:01:70:F3:78:4A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:3d:5a:61:c7:35:c3:b1:80:ae:1d:bf:16:8e:09:e4:eb:98: 99:c9:4f:ee:25:cf:c1:df:2f:be:a9:db:62:fc:5d:c8:18:86: 13:85:cb:c6:15:df:36:d8:97:88:e1:a0:64:fa:13:ee:91:66: 0a:b9:56:7d:ba:bd:6a:30:e8:19:7b:2c:4b:e5:8b:3d:a1:34: a3:9d:b9:aa:c6:6c:69:24:61:84:05:b2:2c:5c:2a:95:01:9f: 83:21:35:a0:15:7c:28:11:a5:b3:b4:e8:c1:c4:20:cc:c0:b0: 0b:e2:ef:05:0e:ba:83:74:29:d5:0a:8d:75:36:52:8a:6a:c5: 27:36:3b:49:6a:78:37:a3:cc:23:d3:0c:7b:77:95:83:d0:4a: b0:53:f0:8f:31:6b:7e:ae:c2:fb:ae:19:68:9f:6c:ad:bf:9a: e7:1d:29:fc:32:18:c7:16:18:25:71:d8:ea:18:bb:b5:bf:52: 83:8c:08:e1:c6:9b:4f:a7:0c:03:96:6e:8c:99:ff:25:b7:9e: c5:24:76:1e:60:ad:fa:7e:80:9a:79:ad:0c:3a:07:4f:f0:92: 40:f6:2c:fb:2a:11:d1:5a:52:c5:09:ec:a1:bb:a0:98:4f:06: 7e:c2:76:d9:61:18:42:8b:44:f0:97:f6:8b:b7:ab:88:30:ef: d8:b2:3e:8f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs67FKcDW6VhGxH8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk YzFmYTQ0MDQtYTdjNi00MGQwLTkwNGYtN2YxZTc4NDk1MjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GMHkdra03i+sDIdOWZhsWsKVvQe98YEUjUR MMOqJEU6gUrW/wSfzUTe0eAf0WB4giqZdce1lrg/QZ4AMkI3ATQWeEdM5/Iamjb1 DfPL5FNTXU63MW+LIXLxgwbK6hgQFuTopTdS6OjxYQK8VeLYEXlqD0j6IvOt4BYL 2dHYfY3rgc6AVGD/kFXCkYooW+yynv1aVpsEU8B+M81ujxtwjQD3QCqYcJqeRCWQ NYWJPA7hgqj5MGfPehw7xRkl9caZHvjC7oFHEp+/aE70I6AmPiQdsGuHddr6ODxT t/aE2X6ZSBnjUuFE7yVHqFYSRUOf8Ic9GZmlwI2ozbZeILxQfwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKI4CuvCg6Z2ZfXgg1PqAXDzeEq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWY1N2I1ZmUtOWE0OS0z NDdmLTk5YTktNzg3NDk1NjNhMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC+PVphxzXDsYCuHb8Wjgnk65iZyU/uJc/B3y++ qdti/F3IGIYThcvGFd822JeI4aBk+hPukWYKuVZ9ur1qMOgZeyxL5Ys9oTSjnbmq xmxpJGGEBbIsXCqVAZ+DITWgFXwoEaWztOjBxCDMwLAL4u8FDrqDdCnVCo11NlKK asUnNjtJang3o8wj0wx7d5WD0EqwU/CPMWt+rsL7rhlon2ytv5rnHSn8MhjHFhgl cdjqGLu1v1KDjAjhxptPpwwDlm6Mmf8lt57FJHYeYK36foCaea0MOgdP8JJA9iz7 KhHRWlLFCeyhu6CYTwZ+wnbZYRhCi0Twl/aLt6uIMO/Ysj6P -----END CERTIFICATE-----Generated at Mon Oct 20 03:30:54 2025 by rpki-client