$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa994d3b-076e-3912-acf0-98362aad8466.roa File: aa994d3b-076e-3912-acf0-98362aad8466.roa (raw, json) Hash identifier: m7sKvQkmWcL2Iz9POGXnVbgPpTyjigmIwvgp4kDm+8k= Subject key identifier: A0:50:90:53:9F:9D:53:95:61:4A:6E:C0:D1:BF:9A:0F:CF:CB:4E:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC68409B9F601717BF4980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa994d3b-076e-3912-acf0-98362aad8466.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 396543 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:68:40:9b:9f:60:17:17:bf:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=a9819fae-3b09-40a5-b29e-f1841bda49eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:76:b8:17:51:a5:88:51:aa:ab:40:99:be: 95:30:c3:16:eb:77:86:ca:7e:9b:48:94:2a:53:5f: 4b:b1:ce:08:a2:3c:f1:c9:29:05:91:6d:68:51:33: a3:14:42:5a:3b:99:5b:2c:6d:50:a3:ad:15:15:09: 91:f0:d2:b0:a8:08:28:49:28:e0:ab:ef:2d:9f:d0: 97:85:50:34:7b:3c:08:88:d8:d8:6c:84:96:03:e2: 8b:f6:c4:5d:e8:d0:0f:a7:3d:8b:00:d7:68:36:58: 6e:13:a1:ad:c3:e1:50:c5:d1:93:b3:d6:76:b0:52: a4:85:43:2b:c5:d4:c4:78:14:76:b6:e9:78:38:33: aa:15:90:19:8d:44:77:ae:ec:61:4b:63:1f:31:6a: 6e:62:31:79:62:52:00:46:b8:8d:9c:87:02:38:6d: f0:61:a1:93:bb:26:c5:94:9d:92:ae:5a:89:cd:ff: 9b:7b:60:c2:ad:fa:fa:cb:28:e8:fc:8d:13:34:09: 87:c0:c0:0c:a4:aa:f7:cf:ac:84:bc:9e:72:44:94: 8e:bd:7d:82:3f:e8:85:86:b1:bc:72:94:9c:70:2d: fa:1f:3f:e5:92:15:60:1b:34:72:13:1e:f1:dd:6d: 61:0a:4b:82:e9:2a:b3:f4:3a:49:0d:5f:1a:ec:e8: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:50:90:53:9F:9D:53:95:61:4A:6E:C0:D1:BF:9A:0F:CF:CB:4E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa994d3b-076e-3912-acf0-98362aad8466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ab:89:64:6a:be:af:04:84:b7:05:3a:34:40:d4:4f:ef:c6: fb:c4:b7:8e:ea:ad:92:e6:31:a4:b3:52:a4:df:df:f6:80:7c: 16:42:49:20:f1:3c:cc:5f:3a:5a:5f:77:37:b6:d6:f1:2e:9f: 2e:bf:a1:c7:a4:e2:41:b1:be:a7:3c:6c:73:b9:d6:2d:de:f0: c6:eb:2a:0e:a9:1f:59:77:1b:38:cc:02:96:5f:01:b9:dc:5d: 5d:0c:d0:cc:2e:14:14:2d:d2:28:14:ad:af:a0:0c:b5:92:89: 61:6f:e2:2e:25:d3:ed:db:c2:da:f2:76:08:ca:73:53:85:51: e0:44:83:04:e4:57:50:cf:d5:aa:ca:52:73:46:a0:73:a0:6f: 36:bc:86:0c:80:a7:90:37:32:c9:8e:3a:d3:4a:0d:6e:de:40: c8:8a:2a:04:16:2c:ad:a5:51:7a:a8:a4:c0:b9:24:c3:15:fa: 8f:21:56:23:ff:d1:7f:ef:d4:d3:e0:11:76:f2:dd:7f:a5:67: 3b:86:7d:f1:0f:46:f2:46:05:4d:be:4b:80:26:ab:40:04:10: a3:2b:b9:c1:7e:12:7f:3d:07:6a:5c:39:9e:91:4b:8c:4c:72: f6:9c:d4:0e:13:89:8c:6f:f1:49:da:50:be:d3:64:c2:63:48: 49:fa:e6:55 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGhAm59gFxe/SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YTk4MTlmYWUtM2IwOS00MGE1LWIyOWUtZjE4NDFiZGE0OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHt2uBdRpYhRqqtAmb6VMMMW63eGyn6bSJQq U19Lsc4IojzxySkFkW1oUTOjFEJaO5lbLG1Qo60VFQmR8NKwqAgoSSjgq+8tn9CX hVA0ezwIiNjYbISWA+KL9sRd6NAPpz2LANdoNlhuE6Gtw+FQxdGTs9Z2sFKkhUMr xdTEeBR2tul4ODOqFZAZjUR3ruxhS2MfMWpuYjF5YlIARriNnIcCOG3wYaGTuybF lJ2SrlqJzf+be2DCrfr6yyjo/I0TNAmHwMAMpKr3z6yEvJ5yRJSOvX2CP+iFhrG8 cpSccC36Hz/lkhVgGzRyEx7x3W1hCkuC6Sqz9DpJDV8a7Ohe5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKBQkFOfnVOVYUpuwNG/mg/Py04yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE5OTRkM2ItMDc2ZS0z OTEyLWFjZjAtOTgzNjJhYWQ4NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGq4lkar6vBIS3BTo0QNRP78b7xLeO6q2S5jGk s1Kk39/2gHwWQkkg8TzMXzpaX3c3ttbxLp8uv6HHpOJBsb6nPGxzudYt3vDG6yoO qR9Zdxs4zAKWXwG53F1dDNDMLhQULdIoFK2voAy1kolhb+IuJdPt28La8nYIynNT hVHgRIME5FdQz9WqylJzRqBzoG82vIYMgKeQNzLJjjrTSg1u3kDIiioEFiytpVF6 qKTAuSTDFfqPIVYj/9F/79TT4BF28t1/pWc7hn3xD0byRgVNvkuAJqtABBCjK7nB fhJ/PQdqXDmekUuMTHL2nNQOE4mMb/FJ2lC+02TCY0hJ+uZV -----END CERTIFICATE-----Generated at Mon Oct 20 06:56:46 2025 by rpki-client