$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa File: b9001f23-1985-332d-89db-692bdc60fc6a.roa (raw, json) Hash identifier: A5aVnC4rB5SROyO2vgwmZyDFa5UGa21SBq5Vy/SVZOo= Subject key identifier: 67:FA:49:9E:0C:4B:D5:EE:F8:D5:D7:8E:36:45:B2:05:A9:81:50:9E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F375735FF809742D7DB1F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 19836 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:57:35:ff:80:97:42:d7:db:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=91b3e1d2-a718-4b52-b220-dc49f7c26635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:3b:1e:e9:44:30:c4:a8:04:eb:78:ef:b0: 48:4e:bd:ff:8b:af:28:04:b3:c0:85:7f:c6:4a:31: 53:ea:3c:d3:8b:14:57:38:e8:7d:2c:25:af:9c:68: 82:03:a8:b5:17:5d:f0:da:86:bf:c5:9c:6a:9f:17: 02:b3:5f:b6:3e:5e:ea:d8:5d:6c:b2:90:10:1e:56: ee:1a:9c:a3:ab:c5:38:4c:a5:60:76:29:13:9b:be: f9:2d:c7:6e:ab:6d:e8:94:77:39:a5:90:d0:1a:2c: 0d:81:0e:bf:70:5a:9e:c8:10:f9:77:41:5b:bd:b3: 04:0d:71:bb:de:61:a4:b9:85:c0:e8:94:a1:64:ca: 64:6d:70:e1:b8:b4:d8:41:b9:2c:9e:cf:01:12:10: 55:92:a2:00:f1:3e:ce:f9:74:87:af:c4:79:1f:6e: a1:10:89:4e:25:24:e9:bd:f8:fc:e2:0c:65:7a:c5: c8:4f:50:72:69:a8:48:c5:41:5f:ab:f1:c1:07:84: 86:a2:bc:4d:15:c4:86:45:36:3d:a8:51:8b:ed:00: 7e:94:13:3a:7b:61:5d:36:6c:9d:f8:fa:53:5d:56: e6:df:e3:cf:91:03:bb:45:b9:be:9a:37:5e:b1:20: 2f:09:d6:4d:fb:f3:26:9d:d7:e3:ab:9a:74:e3:dc: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FA:49:9E:0C:4B:D5:EE:F8:D5:D7:8E:36:45:B2:05:A9:81:50:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9001f23-1985-332d-89db-692bdc60fc6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5e:58:79:4d:e6:fa:61:d3:06:c0:7a:17:5d:40:e8:2d:53: 75:10:b8:59:fa:3f:a4:94:d1:92:18:ba:fd:98:65:49:ab:c4: 42:0a:32:41:c8:d2:57:b1:7a:02:a9:b5:06:30:b5:00:ae:3b: e6:ec:7d:8d:a9:75:a3:e1:71:b3:11:66:e3:20:82:76:96:55: 6e:d1:7a:f8:94:df:e8:76:8e:15:bb:35:11:1c:2b:2c:73:bd: 80:9e:03:c3:89:1e:a4:98:5c:62:60:41:a8:4c:64:ab:b0:95: d6:42:e8:e8:08:65:78:4b:25:bd:d0:65:1d:dd:3b:72:c4:00: bb:cf:60:c1:e4:64:76:96:84:54:d2:30:79:67:37:74:e1:b6: 6d:16:82:0a:73:37:40:1f:48:2a:0b:9c:b2:72:89:89:c6:ca: fc:5a:70:91:56:54:19:86:fa:a2:02:f0:6e:eb:a9:88:77:cb: 2b:38:33:2a:31:ac:d2:db:20:d6:ae:b4:79:f6:67:86:0d:a8: 93:6e:2c:25:7f:10:12:e2:58:4a:43:a5:67:3c:99:5e:93:b4: f5:ba:a4:91:1d:72:98:dc:df:93:a8:74:57:03:73:0c:60:2c: e1:9c:44:9b:67:f0:cb:75:97:e5:3f:d0:63:9c:70:d7:40:73: f1:4b:aa:3f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1c1/4CXQtfbHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OTFiM2UxZDItYTcxOC00YjUyLWIyMjAtZGM0OWY3YzI2NjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fI7HulEMMSoBOt477BITr3/i68oBLPAhX/G SjFT6jzTixRXOOh9LCWvnGiCA6i1F13w2oa/xZxqnxcCs1+2Pl7q2F1sspAQHlbu Gpyjq8U4TKVgdikTm775Lcduq23olHc5pZDQGiwNgQ6/cFqeyBD5d0FbvbMEDXG7 3mGkuYXA6JShZMpkbXDhuLTYQbksns8BEhBVkqIA8T7O+XSHr8R5H26hEIlOJSTp vfj84gxlesXIT1ByaahIxUFfq/HBB4SGorxNFcSGRTY9qFGL7QB+lBM6e2FdNmyd +PpTXVbm3+PPkQO7Rbm+mjdesSAvCdZN+/Mmndfjq5p049xrpQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGf6SZ4MS9Xu+NXXjjZFsgWpgVCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjkwMDFmMjMtMTk4NS0z MzJkLTg5ZGItNjkyYmRjNjBmYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFXlh5Teb6YdMGwHoXXUDoLVN1ELhZ+j+klNGS GLr9mGVJq8RCCjJByNJXsXoCqbUGMLUArjvm7H2NqXWj4XGzEWbjIIJ2llVu0Xr4 lN/odo4VuzURHCssc72AngPDiR6kmFxiYEGoTGSrsJXWQujoCGV4SyW90GUd3Tty xAC7z2DB5GR2loRU0jB5Zzd04bZtFoIKczdAH0gqC5yycomJxsr8WnCRVlQZhvqi AvBu66mId8srODMqMazS2yDWrrR59meGDaiTbiwlfxAS4lhKQ6VnPJlek7T1uqSR HXKY3N+TqHRXA3MMYCzhnESbZ/DLdZflP9BjnHDXQHPxS6o/ -----END CERTIFICATE-----Generated at Mon Oct 20 06:52:59 2025 by rpki-client