$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa File: a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa (raw, json) Hash identifier: XxfyyzvfJlRBNTNI2nxRH7h8f+MQYQfOgFu/oSlwojU= Subject key identifier: 4D:B2:14:91:BD:F1:54:04:ED:35:A9:D2:2C:61:09:C3:1E:43:90:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F37502E40511FCCBE6FC280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396606 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:50:2e:40:51:1f:cc:be:6f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=0a588b96-6fe0-47ab-ab72-f8acae62e1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:d2:57:a3:d3:3f:23:0d:19:42:0a:92:54: ce:4e:97:6a:43:1b:44:36:ce:1d:30:a5:82:97:4a: 0f:0f:22:b6:5e:f4:2c:a3:a5:f9:66:63:1f:bc:61: d4:87:4a:98:c4:8d:03:44:d9:c6:fe:60:79:35:33: c6:80:1c:ee:e4:90:b4:98:bb:01:04:df:2d:45:02: 90:7f:de:16:65:9b:7b:7f:30:e2:45:e1:fd:59:3a: 47:49:ab:a1:4d:cd:28:c6:8c:b9:d3:f0:c4:ff:c1: 16:a4:29:64:ba:de:ad:0f:e8:f6:f1:f9:d8:2c:32: f9:08:12:12:c0:de:e2:27:a8:56:e3:a9:c2:b0:fb: a0:fa:19:c9:3c:c9:b9:8c:a4:37:01:ad:c2:39:e4: 64:91:27:50:be:33:3c:81:b9:a9:7f:25:a3:02:a9: 09:6c:fa:49:89:cc:ba:9d:2c:37:b2:8f:1f:c6:21: 3c:4c:1f:03:b2:8b:f4:2c:fb:6b:65:14:81:60:3a: 69:36:dd:80:97:17:63:b2:9c:e0:11:3d:d0:1a:47: 25:30:85:41:ae:5d:6f:e7:7f:5c:d8:ce:5d:b5:66: c7:03:ca:d2:42:0c:3d:b6:26:c5:06:45:9c:09:72: 8b:69:0e:22:f5:c6:3d:54:37:ec:3a:4c:29:22:26: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B2:14:91:BD:F1:54:04:ED:35:A9:D2:2C:61:09:C3:1E:43:90:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:50:31:ac:fd:61:72:d9:f7:d5:06:95:6d:86:df:87:c0:69: c7:28:0e:01:b0:54:08:a2:18:2e:c0:76:0b:68:04:69:13:5e: d2:41:a1:49:60:1c:76:5d:eb:c9:f0:42:5f:08:a3:26:96:e4: 73:68:64:74:03:3c:a3:81:1f:3a:ef:76:a9:fa:05:fc:16:9d: c8:ac:f6:ed:b9:57:1c:f9:38:1f:67:7c:d1:41:e8:c6:98:45: 80:4f:eb:b1:cf:ae:4f:3b:de:c0:fc:94:ed:87:ea:9c:d5:4a: 3f:91:9c:80:30:95:1f:a6:0c:4c:fe:97:6e:1f:33:0e:85:75: 9e:c3:8a:de:27:5a:a0:47:5b:92:09:2e:56:bf:8c:15:92:4b: 4f:67:c8:53:74:c7:8f:1e:fe:fe:41:30:01:7d:9a:13:1f:e9: 42:bc:53:d2:1a:3f:d2:57:35:26:70:d7:93:6e:0b:15:53:4c: 76:1a:71:f5:b2:dd:d1:ed:52:56:2d:4f:45:9c:6c:b4:bf:8f: de:3d:cc:57:de:c5:95:58:b0:31:07:86:7f:ea:cd:24:ff:74: 90:0d:8d:fc:bc:de:ba:5b:32:fb:d8:2c:c6:90:a1:3c:58:fb: 0c:46:1b:3f:95:1b:c5:68:c1:82:0b:53:c2:70:11:d1:ba:06: e2:c7:99:02 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1AuQFEfzL5vwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MGE1ODhiOTYtNmZlMC00N2FiLWFiNzItZjhhY2FlNjJlMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNnSV6PTPyMNGUIKklTOTpdqQxtENs4dMKWC l0oPDyK2XvQso6X5ZmMfvGHUh0qYxI0DRNnG/mB5NTPGgBzu5JC0mLsBBN8tRQKQ f94WZZt7fzDiReH9WTpHSauhTc0oxoy50/DE/8EWpClkut6tD+j28fnYLDL5CBIS wN7iJ6hW46nCsPug+hnJPMm5jKQ3Aa3COeRkkSdQvjM8gbmpfyWjAqkJbPpJicy6 nSw3so8fxiE8TB8Dsov0LPtrZRSBYDppNt2AlxdjspzgET3QGkclMIVBrl1v539c 2M5dtWbHA8rSQgw9tibFBkWcCXKLaQ4i9cY9VDfsOkwpIiYadwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE2yFJG98VQE7TWp0ixhCcMeQ5C3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTJjN2VjNDAtMjVjMS0z ZWU1LWFjOGUtNWQyOTczYWM0OGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC8UDGs/WFy2ffVBpVtht+HwGnHKA4BsFQIohgu wHYLaARpE17SQaFJYBx2XevJ8EJfCKMmluRzaGR0AzyjgR8673ap+gX8Fp3IrPbt uVcc+TgfZ3zRQejGmEWAT+uxz65PO97A/JTth+qc1Uo/kZyAMJUfpgxM/pduHzMO hXWew4reJ1qgR1uSCS5Wv4wVkktPZ8hTdMePHv7+QTABfZoTH+lCvFPSGj/SVzUm cNeTbgsVU0x2GnH1st3R7VJWLU9FnGy0v4/ePcxX3sWVWLAxB4Z/6s0k/3SQDY38 vN66WzL72CzGkKE8WPsMRhs/lRvFaMGCC1PCcBHRugbix5kC -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:06 2025 by rpki-client