$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbd52ea-36d6-38dc-8874-8b6349c91e10.roa File: acbd52ea-36d6-38dc-8874-8b6349c91e10.roa (raw, json) Hash identifier: rslHz5DIsZShfvrL1viFkHVCyZXT4lbE7Lpg8WwHFm8= Subject key identifier: 1E:7B:9D:70:08:24:61:CF:64:41:CF:7E:87:A2:BB:3E:65:FF:86:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F3750FA9ADE36F541F4D8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbd52ea-36d6-38dc-8874-8b6349c91e10.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396575 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:50:fa:9a:de:36:f5:41:f4:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=4a85e156-dae4-4565-8db0-b283dae8a13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:cb:53:67:7c:ef:aa:73:82:81:54:84:58: 0d:4d:41:e2:7f:e3:65:aa:1a:0e:94:17:1a:fa:c0: 5d:2d:23:5c:dc:31:94:b6:12:9e:f6:8c:7d:70:e2: a6:9a:c3:10:43:09:cb:44:90:9e:46:06:04:f9:74: 3e:fe:fd:23:b8:20:13:1a:c2:13:56:7c:c9:26:3d: 06:2c:18:8d:79:f3:d9:bd:e9:3f:53:fe:9b:06:af: 05:49:98:cb:4f:39:8f:80:b9:ba:e0:17:36:02:e7: af:f2:0f:db:17:c6:01:c6:8f:a6:bb:d1:3f:16:14: 58:39:04:ab:af:83:5e:6d:bd:30:31:c9:95:af:f8: f1:0c:15:50:0d:42:25:24:51:1c:50:9a:0c:ae:7a: bf:52:64:1d:cb:10:57:31:a9:30:89:71:ef:85:b3: 85:cc:23:6e:6f:34:8f:f6:7a:ef:8e:53:e3:43:67: ff:16:25:aa:04:bb:3b:0b:a5:35:f7:3e:92:5d:32: 06:3e:06:30:50:c0:67:89:23:01:85:5a:b0:c5:b4: bc:64:6e:cb:b6:32:91:e5:7a:b9:52:ca:a2:69:51: 99:1e:e2:09:b3:ab:d6:07:59:4e:3e:a3:45:66:59: cd:84:71:69:d7:61:6b:43:bb:b6:4b:7c:a9:88:1c: 9b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:9D:70:08:24:61:CF:64:41:CF:7E:87:A2:BB:3E:65:FF:86:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbd52ea-36d6-38dc-8874-8b6349c91e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c6:f9:dc:48:5f:67:e6:2b:a6:71:8b:07:12:29:25:a6:ac: e4:d1:0d:a1:b7:bc:a4:2c:23:db:44:c6:1d:1e:45:b6:fd:cc: 0b:f8:82:64:50:6a:13:99:a6:2c:2a:aa:c8:ad:ce:3a:3c:7b: 12:b5:9d:16:9a:f1:26:b9:75:0a:6b:3b:87:20:56:17:9a:9a: 04:27:87:93:79:68:33:e2:3b:53:c3:b7:03:c5:05:51:8a:b7: bb:98:7b:1a:59:a9:da:93:74:a0:2e:33:53:09:34:b8:20:a0: 99:9f:94:26:5a:01:d9:35:be:80:4e:12:3f:d4:96:07:29:38: 71:dd:df:49:5e:fc:3b:30:57:ec:21:74:e3:e3:23:8a:34:0c: c1:a3:a9:80:4b:e8:62:15:b4:30:cb:33:97:6d:72:93:bc:b0: a1:98:c8:cc:db:c4:3e:fc:e2:33:86:90:0e:55:9f:1e:6c:b6: 8b:fb:16:0f:71:9a:c1:7d:29:e8:5d:f0:63:6b:b9:5c:81:2b: 54:13:3d:73:77:7a:4b:47:5f:37:07:4a:4f:b2:f1:bc:58:9b: 77:f7:51:e4:83:09:bd:55:39:23:f4:00:df:50:e0:4e:96:a8: 6c:31:df:2f:f8:d0:11:c7:6d:4c:08:be:64:de:a6:7b:36:9c: 7f:a8:33:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1D6mt429UH02MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NGE4NWUxNTYtZGFlNC00NTY1LThkYjAtYjI4M2RhZThhMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOfLU2d876pzgoFUhFgNTUHif+NlqhoOlBca +sBdLSNc3DGUthKe9ox9cOKmmsMQQwnLRJCeRgYE+XQ+/v0juCATGsITVnzJJj0G LBiNefPZvek/U/6bBq8FSZjLTzmPgLm64Bc2Auev8g/bF8YBxo+mu9E/FhRYOQSr r4Nebb0wMcmVr/jxDBVQDUIlJFEcUJoMrnq/UmQdyxBXMakwiXHvhbOFzCNubzSP 9nrvjlPjQ2f/FiWqBLs7C6U19z6SXTIGPgYwUMBniSMBhVqwxbS8ZG7LtjKR5Xq5 UsqiaVGZHuIJs6vWB1lOPqNFZlnNhHFp12FrQ7u2S3ypiByb1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB57nXAIJGHPZEHPfoeiuz5l/4beMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWNiZDUyZWEtMzZkNi0z OGRjLTg4NzQtOGI2MzQ5YzkxZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7xvncSF9n5iumcYsHEiklpqzk0Q2ht7ykLCPb RMYdHkW2/cwL+IJkUGoTmaYsKqrIrc46PHsStZ0WmvEmuXUKazuHIFYXmpoEJ4eT eWgz4jtTw7cDxQVRire7mHsaWanak3SgLjNTCTS4IKCZn5QmWgHZNb6AThI/1JYH KThx3d9JXvw7MFfsIXTj4yOKNAzBo6mAS+hiFbQwyzOXbXKTvLChmMjM28Q+/OIz hpAOVZ8ebLaL+xYPcZrBfSnoXfBja7lcgStUEz1zd3pLR183B0pPsvG8WJt391Hk gwm9VTkj9ADfUOBOlqhsMd8v+NARx21MCL5k3qZ7Npx/qDOO -----END CERTIFICATE-----Generated at Mon Oct 20 15:20:44 2025 by rpki-client