$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa File: aaeab459-55b6-3d1b-8a79-b4db77e31200.roa (raw, json) Hash identifier: 3rtjl7q0SjcWUEiR2mXOBj4G/koAMC8VK4nuuw9JSd8= Subject key identifier: 82:9D:EC:9C:8B:DE:38:B0:57:96:95:60:EB:94:61:45:A7:0B:19:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320D327F70090B08EC8320 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396590 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0d:32:7f:70:09:0b:08:ec:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=b10adeaa-ab4a-4e73-9438-48ff1a4fa08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:1e:6e:62:a9:76:29:64:29:52:0e:41:ed: ae:f6:29:57:30:03:bc:69:29:c2:4c:9b:a4:1c:6f: 17:23:c4:35:53:30:43:e5:ba:15:23:d0:aa:b0:02: 80:4f:6b:16:44:56:50:54:75:11:a6:d4:f8:ad:1f: b2:ab:5a:ad:d9:9a:1d:fa:15:f2:16:76:e4:52:ac: f4:d8:32:5b:eb:a1:c7:29:c6:4a:e6:9e:4e:a8:a0: 20:8b:8a:fb:c2:f5:e0:c0:52:99:a9:b4:82:c3:b9: b0:bf:f6:74:b1:e8:ba:57:36:60:37:bb:69:6b:67: de:e0:d5:5f:27:00:24:34:b5:05:5b:f8:3a:c2:ef: 56:6d:4f:2f:19:cd:e7:97:92:f3:66:6c:02:33:68: 87:a4:fc:79:ab:06:dd:48:02:83:6b:a3:e8:ba:17: a3:08:d5:a2:bd:32:5a:1e:da:9b:65:1a:6e:59:6c: 22:62:78:3f:f8:e9:db:d4:6d:c6:3c:e9:08:19:22: 71:c2:08:6e:fc:7f:e4:e1:9e:8a:b8:2d:6a:6a:8b: 6f:e9:72:f4:cf:93:7a:72:a3:5b:85:ac:a6:65:14: 7e:f0:a9:6d:fa:8c:3e:35:fd:b2:5c:42:96:21:6b: 7c:32:b5:f7:dd:7b:c6:42:9b:0f:4e:4b:a1:1e:94: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9D:EC:9C:8B:DE:38:B0:57:96:95:60:EB:94:61:45:A7:0B:19:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f0:07:b1:de:9f:d4:50:b3:b8:75:07:39:1e:b5:a0:76:99: 82:f5:38:bd:3f:3e:80:72:bf:d5:06:2e:35:fc:54:24:8e:bc: bc:4c:0a:af:6b:67:37:f8:1e:a3:4a:66:4d:e5:53:1a:23:f5: e9:c6:f5:a7:c9:0f:9d:0d:46:e7:79:a2:f6:42:60:1e:96:d4: da:b4:27:f6:23:c4:e2:9e:bc:4e:7d:40:b8:43:60:6a:c1:c4: d3:70:f4:e0:01:7d:08:6e:51:c4:ae:ca:24:87:42:99:bc:15: 16:aa:a8:8a:23:a0:87:1f:63:53:18:a5:98:18:a5:43:75:df: fd:05:66:3c:4c:d2:41:eb:86:f9:2f:b8:94:ee:72:b4:e6:5a: 2d:3a:e9:13:40:7d:43:f3:d2:85:ea:81:b2:bd:d9:1f:a1:b8: 42:42:ba:cf:f6:71:4b:97:4f:78:00:62:04:9a:1d:9c:24:b0: cf:88:59:93:9a:24:3f:5b:18:c7:96:cd:56:72:cd:21:91:ec: fb:be:bf:3e:b6:f5:59:e2:03:ef:b4:40:5a:d2:0d:fa:53:8d: 7d:41:a5:27:8f:c0:7e:47:cf:a4:6c:ad:00:9e:dc:5f:aa:f8: 77:d4:3d:07:2e:ed:97:a5:3a:10:bd:13:e0:d7:88:14:72:2c: 40:a8:32:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg0yf3AJCwjsgyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YjEwYWRlYWEtYWI0YS00ZTczLTk0MzgtNDhmZjFhNGZhMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCwebmKpdilkKVIOQe2u9ilXMAO8aSnCTJuk HG8XI8Q1UzBD5boVI9CqsAKAT2sWRFZQVHURptT4rR+yq1qt2Zod+hXyFnbkUqz0 2DJb66HHKcZK5p5OqKAgi4r7wvXgwFKZqbSCw7mwv/Z0sei6VzZgN7tpa2fe4NVf JwAkNLUFW/g6wu9WbU8vGc3nl5LzZmwCM2iHpPx5qwbdSAKDa6PouhejCNWivTJa HtqbZRpuWWwiYng/+Onb1G3GPOkIGSJxwghu/H/k4Z6KuC1qaotv6XL0z5N6cqNb haymZRR+8Klt+ow+Nf2yXEKWIWt8MrX33XvGQpsPTkuhHpRM7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIKd7JyL3jiwV5aVYOuUYUWnCxl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFlYWI0NTktNTViNi0z ZDFiLThhNzktYjRkYjc3ZTMxMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIHwB7Hen9RQs7h1BzketaB2mYL1OL0/PoByv9UGLjX8VCSOvLxM Cq9rZzf4HqNKZk3lUxoj9enG9afJD50NRud5ovZCYB6W1Nq0J/YjxOKevE59QLhD YGrBxNNw9OABfQhuUcSuyiSHQpm8FRaqqIojoIcfY1MYpZgYpUN13/0FZjxM0kHr hvkvuJTucrTmWi066RNAfUPz0oXqgbK92R+huEJCus/2cUuXT3gAYgSaHZwksM+I WZOaJD9bGMeWzVZyzSGR7Pu+vz629VniA++0QFrSDfpTjX1BpSePwH5Hz6RsrQCe 3F+q+HfUPQcu7ZelOhC9E+DXiBRyLECoMkk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:28 2025 by rpki-client