$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0616569-464f-35d0-ad47-65a16ad97d6a.roa File: a0616569-464f-35d0-ad47-65a16ad97d6a.roa (raw, json) Hash identifier: bv/9qdjHrQHsa/qu9EWse3/BleWY89W3iqQlnm55vww= Subject key identifier: B2:70:DE:87:21:FF:3A:4E:29:5C:39:6B:B3:58:8F:C3:9D:06:16:96 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B59A1DD6F369AD2FEFB627D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0616569-464f-35d0-ad47-65a16ad97d6a.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 396583 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:dd:6f:36:9a:d2:fe:fb:62:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=e786c5d8-2c6d-4b40-829a-66bf61e118d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:bb:e8:fb:93:f1:cd:b4:ae:d5:64:09:1f: d3:51:e2:6d:29:f2:b6:0a:e3:f1:a5:cb:15:ff:9f: 20:32:0f:b3:f1:a5:96:d1:32:7d:7d:08:c9:f1:39: b1:73:77:f9:49:96:e7:21:c6:d2:e9:c1:b9:c7:55: 54:ac:4a:3b:5a:33:f9:f6:2a:c6:74:4f:59:fb:be: ac:a1:54:b8:52:02:4b:88:ef:21:f4:1c:9e:54:ee: 6e:22:51:a4:17:b2:cb:69:55:98:10:e7:30:28:e2: b7:f8:12:93:64:21:42:a1:2a:aa:19:fc:e1:e6:da: 96:67:19:c4:13:28:f0:4f:fa:94:13:a6:b5:68:71: 21:62:dd:7b:80:86:e8:19:78:a0:82:b1:f5:54:54: f8:55:a7:c5:7f:43:0e:63:37:69:c1:c5:4a:98:4d: f1:90:78:c9:a9:7d:e5:4c:0b:72:b9:4f:67:54:77: 95:93:ca:f0:8a:b6:9e:34:80:3e:e1:ed:34:d6:20: 34:f6:85:2f:53:cb:70:1f:82:b1:0d:a9:26:3d:5d: f1:00:c3:fe:99:f2:1a:f1:1a:2f:43:93:5e:48:be: 2a:95:93:46:6a:dc:22:17:93:34:57:58:82:41:c8: a0:2c:86:b5:93:f1:6f:d7:1f:00:a8:4f:1b:da:88: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:70:DE:87:21:FF:3A:4E:29:5C:39:6B:B3:58:8F:C3:9D:06:16:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0616569-464f-35d0-ad47-65a16ad97d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d6:a3:8a:d8:0e:08:f4:fa:82:68:df:b4:ce:ed:cb:e3:d9: 1e:1b:96:18:3a:37:0f:17:a8:ff:63:6e:3f:20:36:07:c5:2a: b9:38:00:ab:3e:0c:dc:e8:44:77:2f:c2:c5:b4:c3:8e:7f:de: 11:6a:4c:46:67:67:45:03:ac:55:f5:a2:ab:8a:98:65:6f:26: bb:60:21:bc:ea:57:26:e2:02:26:e6:1c:31:c2:99:f3:18:44: cb:54:3a:6e:b2:f3:c3:b0:c2:84:61:fa:95:73:53:39:b3:3b: cd:4b:93:2a:83:f3:ef:3a:41:41:aa:e1:b7:86:66:98:74:ba: 75:16:35:d0:43:92:05:d4:d1:69:bc:4f:5a:f2:86:49:0b:83: 5d:0a:54:b9:09:1f:56:ab:18:3d:44:39:34:db:ca:71:3a:de: 03:c1:20:47:dc:b1:a9:84:94:30:51:e4:95:ad:80:bb:7b:41: a1:1a:a9:a4:be:ff:ee:3f:5a:a4:c7:ea:72:5a:9b:e7:79:e9: 3a:3c:f9:60:42:ff:38:dd:3c:5e:81:e5:b7:3f:8d:c0:36:47: c9:28:39:cb:6d:26:27:3b:14:a8:76:62:9d:cc:13:37:cd:d4: 63:79:f9:97:1e:aa:5a:f2:09:92:1c:43:c5:08:36:59:3d:43: 42:83:d3:da -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZod1vNprS/vtifQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk ZTc4NmM1ZDgtMmM2ZC00YjQwLTgyOWEtNjZiZjYxZTExOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuS76PuT8c20rtVkCR/TUeJtKfK2CuPxpcsV /58gMg+z8aWW0TJ9fQjJ8Tmxc3f5SZbnIcbS6cG5x1VUrEo7WjP59irGdE9Z+76s oVS4UgJLiO8h9ByeVO5uIlGkF7LLaVWYEOcwKOK3+BKTZCFCoSqqGfzh5tqWZxnE EyjwT/qUE6a1aHEhYt17gIboGXiggrH1VFT4VafFf0MOYzdpwcVKmE3xkHjJqX3l TAtyuU9nVHeVk8rwiraeNIA+4e001iA09oUvU8twH4KxDakmPV3xAMP+mfIa8Rov Q5NeSL4qlZNGatwiF5M0V1iCQcigLIa1k/Fv1x8AqE8b2oh2TQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLJw3och/zpOKVw5a7NYj8OdBhaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTA2MTY1NjktNDY0Zi0z NWQwLWFkNDctNjVhMTZhZDk3ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAs1qOK2A4I9PqCaN+0zu3L49keG5YYOjcPF6j/ Y24/IDYHxSq5OACrPgzc6ER3L8LFtMOOf94RakxGZ2dFA6xV9aKriphlbya7YCG8 6lcm4gIm5hwxwpnzGETLVDpusvPDsMKEYfqVc1M5szvNS5Mqg/PvOkFBquG3hmaY dLp1FjXQQ5IF1NFpvE9a8oZJC4NdClS5CR9Wqxg9RDk028pxOt4DwSBH3LGphJQw UeSVrYC7e0GhGqmkvv/uP1qkx+pyWpvneek6PPlgQv843TxegeW3P43ANkfJKDnL bSYnOxSodmKdzBM3zdRjefmXHqpa8gmSHEPFCDZZPUNCg9Pa -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:42 2025 by rpki-client