$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7ffa615-858e-3e0b-b2b7-63ac78d4b72d.roa File: b7ffa615-858e-3e0b-b2b7-63ac78d4b72d.roa (raw, json) Hash identifier: C3Id+Cra/GeI26kaXHAXlz2OaBlJVZ0+6+OXJ/F48Lc= Subject key identifier: D4:9F:8A:E3:CA:37:4F:79:6F:1B:BF:E2:62:5D:0D:85:41:13:01:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC6CF040ABC0BAE2942200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7ffa615-858e-3e0b-b2b7-63ac78d4b72d.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 211369 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:6c:f0:40:ab:c0:ba:e2:94:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=6904773e-94c2-4638-ac1b-6096074d2ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:11:00:0a:b7:2a:fb:9e:42:e3:8a:75:57:1a: c6:90:d8:07:e1:eb:6c:9b:94:c7:f6:1a:50:28:cd: 17:ad:04:5f:b6:0c:19:5a:29:06:db:98:c6:9f:a6: 6d:3a:9f:9b:df:68:54:b0:a2:98:4f:7a:a3:bc:c0: 23:9b:1b:f7:32:5e:fb:ff:f9:9a:5f:6f:56:fc:0a: fe:6f:4e:2d:a8:ea:16:35:2a:3a:f8:9c:50:6d:3f: ec:1e:35:23:a1:3f:11:33:d3:5c:ba:a0:2f:9d:42: 92:14:32:b4:67:d1:96:b8:5f:29:43:5d:c4:aa:3b: dd:d9:8c:72:fc:21:0f:56:56:43:ec:ac:d7:b5:a7: 3a:58:45:18:cb:7a:ec:e9:5e:4a:52:b9:da:65:98: 45:73:0b:b7:7c:a6:dc:84:76:ec:b0:ec:29:1a:31: d6:28:bf:85:b8:0e:fa:86:54:1a:c7:fa:3f:33:64: 68:ef:87:0b:a3:34:dc:18:03:b2:12:4a:12:03:96: b4:01:9a:86:99:1f:78:c1:a2:42:3a:9a:56:14:f2: 1d:1f:db:cb:21:5f:f3:7e:43:e3:26:13:87:e6:c8: 96:e7:1a:7f:1d:33:68:e4:e2:ef:c4:60:10:34:42: b7:52:11:bb:c9:79:ae:71:ab:82:e9:2d:38:fe:b3: e9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:8A:E3:CA:37:4F:79:6F:1B:BF:E2:62:5D:0D:85:41:13:01:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7ffa615-858e-3e0b-b2b7-63ac78d4b72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:1a:a2:eb:ef:6c:5b:ee:2e:3f:54:c8:4a:25:21:08:9a:59: 15:8a:c6:81:5a:2d:46:f4:5c:95:17:b1:9f:a7:c1:97:6d:91: 50:a8:a7:bb:d9:d0:0e:72:df:8b:f9:c2:4d:09:e4:a3:24:82: 8b:76:04:ae:1d:e4:31:6d:80:77:b2:4a:aa:cd:8f:4e:0d:a9: e2:76:b4:26:24:e1:29:3f:ce:fb:91:ad:e5:45:61:4e:a4:55: 59:44:13:b2:95:44:db:c8:5c:d5:9c:9c:1d:35:99:97:dd:0b: 3f:cf:09:74:7f:c4:77:37:1a:97:a5:21:1e:4a:68:73:91:6a: 92:e5:cc:4c:79:01:d3:15:eb:71:b4:f8:6b:3b:23:3c:3c:16: 0d:7c:7b:58:58:2f:41:e8:2e:19:c1:e9:86:ea:9c:79:46:1d: c0:62:a8:8f:f6:19:61:34:54:ea:c1:81:5b:fb:f3:ee:d5:24: fc:ed:da:5f:55:61:5c:4e:2f:54:18:7c:4d:6a:da:b2:96:e5: 28:b4:d1:a4:b1:52:de:8d:02:5f:a2:33:a6:ae:5e:2e:e4:e9: 50:e4:35:34:13:d6:e3:68:e1:32:8c:14:11:09:f5:f6:88:45: fe:da:94:1c:ec:22:d1:12:dd:ac:1b:a8:ca:74:97:0f:85:a7: 6b:d0:84:c2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGzwQKvAuuKUIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk NjkwNDc3M2UtOTRjMi00NjM4LWFjMWItNjA5NjA3NGQyZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhREACrcq+55C44p1VxrGkNgH4etsm5TH9hpQ KM0XrQRftgwZWikG25jGn6ZtOp+b32hUsKKYT3qjvMAjmxv3Ml77//maX29W/Ar+ b04tqOoWNSo6+JxQbT/sHjUjoT8RM9NcuqAvnUKSFDK0Z9GWuF8pQ13Eqjvd2Yxy /CEPVlZD7KzXtac6WEUYy3rs6V5KUrnaZZhFcwu3fKbchHbssOwpGjHWKL+FuA76 hlQax/o/M2Ro74cLozTcGAOyEkoSA5a0AZqGmR94waJCOppWFPIdH9vLIV/zfkPj JhOH5siW5xp/HTNo5OLvxGAQNEK3UhG7yXmucauC6S04/rPpWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNSfiuPKN095bxu/4mJdDYVBEwGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjdmZmE2MTUtODU4ZS0z ZTBiLWIyYjctNjNhYzc4ZDRiNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC3GqLr72xb7i4/VMhKJSEImlkVisaBWi1G9FyV F7Gfp8GXbZFQqKe72dAOct+L+cJNCeSjJIKLdgSuHeQxbYB3skqqzY9ODanidrQm JOEpP877ka3lRWFOpFVZRBOylUTbyFzVnJwdNZmX3Qs/zwl0f8R3NxqXpSEeSmhz kWqS5cxMeQHTFetxtPhrOyM8PBYNfHtYWC9B6C4ZwemG6px5Rh3AYqiP9hlhNFTq wYFb+/Pu1ST87dpfVWFcTi9UGHxNatqyluUotNGksVLejQJfojOmrl4u5OlQ5DU0 E9bjaOEyjBQRCfX2iEX+2pQc7CLREt2sG6jKdJcPhadr0ITC -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:29 2025 by rpki-client