$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a06a3796-c111-3ec8-ad77-a4b1417897d7.roa File: a06a3796-c111-3ec8-ad77-a4b1417897d7.roa (raw, json) Hash identifier: TC4F6CjMKtjPq4MZy9HXqctMQosgImT0MSICWkWcsCc= Subject key identifier: 74:2D:51:F7:A6:CB:D0:4A:90:1C:55:EE:96:BD:C4:96:2E:C4:30:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F3751E324F88CF2857B3C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a06a3796-c111-3ec8-ad77-a4b1417897d7.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36620 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:51:e3:24:f8:8c:f2:85:7b:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=91d02e04-6be4-4231-af66-41b38b0ec1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d7:89:e3:3f:4e:58:88:0d:0b:67:67:73:e6: 3f:65:e2:34:e2:e0:98:50:4c:a6:bf:a1:c1:f5:01: c4:e4:3f:19:8a:9a:bf:cb:21:90:46:66:96:90:2f: 25:47:d0:88:92:44:d2:71:f2:8d:f5:bf:e8:e5:b2: 53:33:79:e6:f4:d3:a2:a9:cc:75:3c:88:3c:ef:2f: 18:25:47:1e:f2:0f:0f:61:18:f0:74:59:49:7b:46: 5f:d5:31:e3:d3:af:fe:a2:9a:89:14:46:6d:ec:1e: f0:27:bd:d2:01:0f:9b:6a:dc:ee:c8:9a:25:3b:69: f2:6c:79:40:8f:2b:fa:d6:44:d9:b1:1e:cf:ea:7f: 51:65:bf:19:df:71:98:0b:32:9a:54:84:f4:e8:fb: d1:b7:ee:c6:e2:0b:2e:6d:05:17:e0:94:08:48:38: aa:46:8f:95:f3:4b:69:34:79:23:63:1b:3d:a4:b2: 14:03:d4:aa:b9:8c:0b:d3:16:12:f9:ad:4a:9d:0e: 52:5c:c8:64:3f:38:d5:ab:98:bc:bc:2b:32:e5:a0: 3c:91:9b:2b:96:64:4c:99:79:96:b1:f1:c3:c0:46: 4c:14:d2:07:b8:9a:0e:6f:0e:80:15:81:a4:c2:0e: 50:cc:86:0f:2d:0f:1f:0c:b7:fa:66:bb:20:03:aa: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2D:51:F7:A6:CB:D0:4A:90:1C:55:EE:96:BD:C4:96:2E:C4:30:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a06a3796-c111-3ec8-ad77-a4b1417897d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c5:7c:3c:73:f1:48:49:ed:b3:bf:17:b6:bc:ce:be:b5:ee: 7f:19:73:7b:5e:a3:e0:92:eb:66:29:89:65:dc:31:8f:9f:11: 28:91:52:65:bd:61:21:32:49:ea:ff:32:6c:29:26:1e:60:e5: d8:3a:56:64:6e:d4:a0:4b:e1:f6:e9:e6:c6:10:e0:de:15:e8: 86:55:c2:64:e5:61:62:0d:53:04:fc:b3:e0:52:97:db:d4:1b: e0:f1:3d:28:5e:b2:54:a4:e7:59:df:73:2f:b0:e4:fb:71:6c: e2:38:bc:60:54:b3:06:94:2f:84:de:46:55:ea:7e:f7:a1:20: 1f:e8:34:d9:7a:6e:d5:88:6f:4d:9f:4d:95:ce:60:58:26:49: 22:4b:de:66:16:1e:a5:1d:e2:df:a7:92:8a:ec:bd:7d:54:52: 3b:ed:8b:14:b1:bf:3e:15:12:cd:2c:e3:21:0c:87:34:3e:06: 74:83:f6:7c:cd:93:4d:e3:fe:f2:08:cd:bc:ee:9e:03:72:50: f5:cc:7d:d2:fd:79:fc:d8:1e:8d:70:71:ed:43:8f:3b:ac:09: ab:6b:a2:ad:47:be:dd:e4:70:a4:6c:17:aa:7f:e2:ba:69:70: 08:e9:8a:ea:b2:1a:bf:c8:5b:7b:99:5d:94:80:e8:34:37:90: 0b:dd:4f:fe -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1HjJPiM8oV7PEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OTFkMDJlMDQtNmJlNC00MjMxLWFmNjYtNDFiMzhiMGVjMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNeJ4z9OWIgNC2dnc+Y/ZeI04uCYUEymv6HB 9QHE5D8Zipq/yyGQRmaWkC8lR9CIkkTScfKN9b/o5bJTM3nm9NOiqcx1PIg87y8Y JUce8g8PYRjwdFlJe0Zf1THj06/+opqJFEZt7B7wJ73SAQ+batzuyJolO2nybHlA jyv61kTZsR7P6n9RZb8Z33GYCzKaVIT06PvRt+7G4gsubQUX4JQISDiqRo+V80tp NHkjYxs9pLIUA9SquYwL0xYS+a1KnQ5SXMhkPzjVq5i8vCsy5aA8kZsrlmRMmXmW sfHDwEZMFNIHuJoObw6AFYGkwg5QzIYPLQ8fDLf6ZrsgA6rsEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHQtUfemy9BKkBxV7pa9xJYuxDArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTA2YTM3OTYtYzExMS0z ZWM4LWFkNzctYTRiMTQxNzg5N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCuxXw8c/FISe2zvxe2vM6+te5/GXN7XqPgkutm KYll3DGPnxEokVJlvWEhMknq/zJsKSYeYOXYOlZkbtSgS+H26ebGEODeFeiGVcJk 5WFiDVME/LPgUpfb1Bvg8T0oXrJUpOdZ33MvsOT7cWziOLxgVLMGlC+E3kZV6n73 oSAf6DTZem7ViG9Nn02VzmBYJkkiS95mFh6lHeLfp5KK7L19VFI77YsUsb8+FRLN LOMhDIc0PgZ0g/Z8zZNN4/7yCM287p4DclD1zH3S/Xn82B6NcHHtQ487rAmra6Kt R77d5HCkbBeqf+K6aXAI6Yrqshq/yFt7mV2UgOg0N5AL3U/+ -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:20 2025 by rpki-client