$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa File: ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa (raw, json) Hash identifier: Hj6l666alfi+ByhV6TwRfngfXzrdCalLYkflf6mIXpg= Subject key identifier: CE:3C:CC:B5:75:6A:D3:3D:09:75:2E:56:20:FA:F0:4C:75:3E:48:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B59A1D9E5E5B016EA39F46900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 396599 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d9:e5:e5:b0:16:ea:39:f4:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=65be937b-69c6-4cd1-90b7-f867e6ca14a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:a0:5e:f4:5c:18:84:04:ca:f0:d5:e4:d9: 30:7f:71:d9:e2:95:2b:ea:06:78:d4:99:a3:da:db: da:5f:da:8a:78:18:0b:59:71:f4:4d:d4:c6:66:aa: ce:a2:62:2b:8e:58:42:a9:a6:83:21:46:81:36:6d: f9:c4:9a:f5:ea:07:86:a0:ac:b4:a7:39:02:3d:a3: dd:64:9f:e9:db:cc:af:0d:53:ac:2c:84:e2:66:4b: 77:1a:2f:45:87:3a:99:79:82:07:cd:16:31:1f:e0: b1:84:8d:02:e8:ec:48:be:2c:71:e0:8d:24:b1:6f: 0d:2a:7f:2f:bb:a3:8e:a1:53:97:92:d1:cf:f8:d1: 23:1d:05:97:5b:12:d4:3e:46:b7:ab:bf:73:f7:f6: 22:a3:34:69:91:c6:fc:01:14:f7:26:ad:b5:87:d5: dc:22:7e:50:cf:21:ac:04:2c:b0:47:03:b2:d5:9a: ff:7d:db:f9:83:f9:94:0b:30:e0:50:15:99:79:23: d6:f1:fd:06:43:8b:ba:fe:68:75:4d:ab:84:08:7f: d1:ea:08:78:81:62:58:1e:f2:7c:f2:a5:45:55:4f: 87:b6:c6:bb:01:39:b6:8c:2d:d7:f8:28:68:bf:67: b0:4f:67:e2:11:4d:31:ca:7b:ff:16:d8:e8:f5:d0: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3C:CC:B5:75:6A:D3:3D:09:75:2E:56:20:FA:F0:4C:75:3E:48:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e3:42:a3:18:f4:81:c2:84:0a:15:78:73:02:cc:c8:5a:24: 2c:d2:d1:e2:30:b7:08:08:f2:c6:14:42:84:a1:d8:95:03:c5: 64:43:4f:67:5b:44:0b:0d:d0:99:3f:45:c6:1f:f7:08:51:13: 00:95:82:e5:76:e3:7e:75:60:ca:cc:9f:da:b0:30:fe:11:c4: 6b:b7:78:e2:97:7e:f6:08:07:ab:34:e9:03:07:1d:28:d1:d7: 6f:0e:10:0c:5d:c3:ed:36:fc:a0:30:39:b7:b5:0c:7f:66:73: dc:ff:80:8b:cd:70:e3:49:ec:ca:30:44:6d:93:2a:97:25:87: e2:85:18:37:9b:6d:34:02:37:7c:85:0c:bf:c2:e7:47:4b:cd: 52:55:9a:4e:82:f7:0e:53:e3:72:4e:54:44:07:c9:aa:46:ef: f3:8c:23:da:3f:14:0c:44:8c:46:32:18:31:5c:4c:1e:ec:48: 89:68:1d:c2:f4:33:f8:4f:e3:eb:ce:bc:14:50:7e:51:6a:5c: 21:02:0f:59:cd:f5:81:54:8e:d4:c3:ec:17:11:3c:d9:a2:bf: 32:17:a6:c4:7b:8c:1a:2d:61:6c:f5:bd:55:e9:66:86:52:da: 88:3c:e8:99:7e:e6:fb:8b:0c:81:65:e6:81:ac:84:7f:d3:74: 93:13:23:19 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodnl5bAW6jn0aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NjViZTkzN2ItNjljNi00Y2QxLTkwYjctZjg2N2U2Y2ExNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR+gXvRcGIQEyvDV5Nkwf3HZ4pUr6gZ41Jmj 2tvaX9qKeBgLWXH0TdTGZqrOomIrjlhCqaaDIUaBNm35xJr16geGoKy0pzkCPaPd ZJ/p28yvDVOsLITiZkt3Gi9FhzqZeYIHzRYxH+CxhI0C6OxIvixx4I0ksW8NKn8v u6OOoVOXktHP+NEjHQWXWxLUPka3q79z9/YiozRpkcb8ART3Jq21h9XcIn5QzyGs BCywRwOy1Zr/fdv5g/mUCzDgUBWZeSPW8f0GQ4u6/mh1TauECH/R6gh4gWJYHvJ8 8qVFVU+Htsa7ATm2jC3X+Chov2ewT2fiEU0xynv/Ftjo9dDIcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM48zLV1atM9CXUuViD68Ex1PkhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWU5OWM2N2YtNTNhMS0z MWQyLTk4OTYtMDhhNmY5ZjQ1OGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBj40KjGPSBwoQKFXhzAszIWiQs0tHiMLcICPLG FEKEodiVA8VkQ09nW0QLDdCZP0XGH/cIURMAlYLlduN+dWDKzJ/asDD+EcRrt3ji l372CAerNOkDBx0o0ddvDhAMXcPtNvygMDm3tQx/ZnPc/4CLzXDjSezKMERtkyqX JYfihRg3m200Ajd8hQy/wudHS81SVZpOgvcOU+NyTlREB8mqRu/zjCPaPxQMRIxG MhgxXEwe7EiJaB3C9DP4T+PrzrwUUH5RalwhAg9ZzfWBVI7Uw+wXETzZor8yF6bE e4waLWFs9b1V6WaGUtqIPOiZfub7iwyBZeaBrIR/03STEyMZ -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:01 2025 by rpki-client