$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa File: a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa (raw, json) Hash identifier: tP0dpSQT2J6HgpyqH6YtdPpdrmAZ/0Vs3iOMsoVfSYk= Subject key identifier: F4:77:D4:4B:84:E9:43:2D:15:F9:D2:3A:0E:69:62:1E:6F:B3:8B:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC6D2EA12B5BB8DBEA0780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 396573 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:6d:2e:a1:2b:5b:b8:db:ea:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=964f885c-b37b-41e6-b00b-f1942a8d796f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fb:d6:a8:22:86:1f:d5:ca:0a:f8:ab:f4:f3: 57:3d:e0:28:1f:46:76:8c:80:b4:29:44:79:20:a5: 19:ce:02:d6:07:8a:6d:1e:b8:08:06:82:c0:d8:2c: 7c:a2:3a:80:78:f8:60:d1:4b:fa:05:25:c4:be:af: 57:29:3b:f8:3a:e9:0b:a6:14:e1:c8:fc:7a:94:40: ec:64:a6:29:4d:c8:5f:31:12:ea:e8:d1:f8:13:ac: e4:a7:ad:cd:78:59:06:af:8e:e0:1f:a3:69:4b:88: 7d:d6:14:10:88:9b:5f:5c:90:33:9b:fe:2f:33:84: 25:8b:c2:0b:57:93:2a:93:76:72:28:e1:49:4d:40: ed:39:eb:07:c2:ea:90:fe:b8:a2:eb:3d:39:32:7c: 73:1b:d0:00:8c:8b:99:e1:58:a3:40:dd:9c:9f:18: 7f:bd:a3:69:8b:45:6b:18:fc:44:c4:7e:01:38:62: dd:dd:13:01:4b:ba:79:14:40:c4:56:72:78:09:b6: 7d:e8:2b:2e:f6:b8:fb:31:46:c9:2f:51:76:6d:d1: 59:00:7c:d5:3c:6f:c7:cf:cc:0c:30:2c:53:99:64: a1:f7:91:d0:67:32:dd:09:a1:66:79:e8:cd:cc:ec: 60:fd:dd:74:73:23:bf:bb:cc:67:02:41:20:e2:63: 08:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:77:D4:4B:84:E9:43:2D:15:F9:D2:3A:0E:69:62:1E:6F:B3:8B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:96:3d:80:5d:d8:64:da:0c:bb:71:06:db:82:9c:d0:fe:4c: d2:38:61:db:87:9f:76:8d:fe:b6:c0:2e:a3:99:a4:4f:05:07: ad:06:74:55:a5:0f:62:fa:8d:e8:84:d9:0b:c7:66:00:6e:a9: 45:9b:f0:ea:75:a5:80:c9:90:10:76:1e:36:fa:50:f3:b2:d9: f6:a8:02:bc:59:4a:ec:50:25:34:96:65:25:71:c6:34:2e:f8: ae:58:dd:c2:29:fb:bf:ef:8b:c3:7e:2f:b7:2a:57:bb:29:ed: a0:2d:df:aa:ea:83:a0:31:7d:0f:51:9c:ad:c1:42:18:d1:d2: df:44:07:52:71:4d:ee:05:e2:e0:0d:fa:8e:8d:e3:98:ab:94: 87:63:04:ae:ff:f9:de:d0:05:78:1d:56:04:f8:02:94:dc:eb: 92:a7:5e:14:6a:f4:c9:55:e3:c8:9c:c4:6c:dd:78:91:43:7b: b0:f4:89:62:3a:a0:a2:9a:14:45:b3:0a:80:69:bd:56:f4:da: c1:f8:c0:15:7f:02:70:2f:98:32:2e:11:4e:ef:69:07:55:dd: 89:8b:43:dd:2c:33:da:1c:28:7f:f4:34:3f:4b:d9:47:d8:08: c2:9b:8e:92:d3:4f:ca:42:c8:8a:43:57:b0:26:58:c0:a9:a0: 21:a3:22:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrG0uoStbuNvqB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk OTY0Zjg4NWMtYjM3Yi00MWU2LWIwMGItZjE5NDJhOGQ3OTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfvWqCKGH9XKCvir9PNXPeAoH0Z2jIC0KUR5 IKUZzgLWB4ptHrgIBoLA2Cx8ojqAePhg0Uv6BSXEvq9XKTv4OukLphThyPx6lEDs ZKYpTchfMRLq6NH4E6zkp63NeFkGr47gH6NpS4h91hQQiJtfXJAzm/4vM4Qli8IL V5Mqk3ZyKOFJTUDtOesHwuqQ/rii6z05MnxzG9AAjIuZ4VijQN2cnxh/vaNpi0Vr GPxExH4BOGLd3RMBS7p5FEDEVnJ4CbZ96Csu9rj7MUbJL1F2bdFZAHzVPG/Hz8wM MCxTmWSh95HQZzLdCaFmeejNzOxg/d10cyO/u8xnAkEg4mMIywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPR31EuE6UMtFfnSOg5pYh5vs4uzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFhOTA1YzgtYThhOS0z NjgxLWJlNmYtNDRmYWFjMGU1YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC+lj2AXdhk2gy7cQbbgpzQ/kzSOGHbh592jf62 wC6jmaRPBQetBnRVpQ9i+o3ohNkLx2YAbqlFm/DqdaWAyZAQdh42+lDzstn2qAK8 WUrsUCU0lmUlccY0LviuWN3CKfu/74vDfi+3Kle7Ke2gLd+q6oOgMX0PUZytwUIY 0dLfRAdScU3uBeLgDfqOjeOYq5SHYwSu//ne0AV4HVYE+AKU3OuSp14UavTJVePI nMRs3XiRQ3uw9IliOqCimhRFswqAab1W9NrB+MAVfwJwL5gyLhFO72kHVd2Ji0Pd LDPaHCh/9DQ/S9lH2AjCm46S00/KQsiKQ1ewJljAqaAhoyJ5 -----END CERTIFICATE-----Generated at Mon Oct 20 03:19:48 2025 by rpki-client