$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa File: bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa (raw, json) Hash identifier: FLfw38TfRHznX6Qrson0dD6HOZcHFeXSKkJjTZ0wtCk= Subject key identifier: BE:BD:97:01:85:38:89:38:2B:84:87:53:82:3C:F3:BD:48:DE:45:CE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC70823A014D3CFEE92430 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 36630 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:70:82:3a:01:4d:3c:fe:e9:24:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=44b33e01-c82e-4331-b1eb-156279e58c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:f4:d2:46:e3:67:10:13:1e:6e:2d:71:a2: 71:3d:c1:e1:35:33:aa:bf:13:09:44:3e:cc:d3:38: f3:e4:11:2f:7a:24:66:00:cf:f8:a6:85:51:b4:0f: 17:7f:b9:da:8d:70:99:92:b9:fa:c7:b1:52:b6:57: 35:39:32:e0:e8:a1:d0:e6:04:d4:c4:c3:ab:60:80: a7:95:ad:50:ca:af:c1:d2:77:7f:cc:cf:5c:e1:ce: 0d:48:32:6f:50:99:38:a1:9e:9b:3f:6b:c1:2d:39: 8b:f0:32:a5:60:5b:f3:7a:3f:41:1b:e6:ba:fc:95: 09:4c:82:8b:71:59:09:39:fd:c7:b3:af:05:75:49: 88:b9:18:da:02:de:b0:94:a8:c8:13:58:8a:82:f0: 00:d7:7c:92:98:b5:5c:94:2a:93:19:a7:8c:68:c3: 4d:71:f7:15:ca:01:94:97:f4:81:35:b8:c9:ce:90: e2:83:2b:41:1c:c8:3b:3a:8d:c9:59:17:58:00:f3: 94:bc:3f:48:44:11:5f:08:f1:71:32:95:ac:e1:ac: 04:80:76:11:ce:eb:60:9a:dc:b9:f3:39:73:0f:c7: 1e:52:37:83:71:11:19:b3:a0:dd:0b:f0:60:58:7c: 6e:ca:6d:82:07:99:0e:d7:86:17:7a:a5:b5:f0:17: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BD:97:01:85:38:89:38:2B:84:87:53:82:3C:F3:BD:48:DE:45:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbadc4c2-0df9-3f7c-bf56-de05d52a42b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:44:af:c1:3e:3b:9b:73:fe:06:d1:73:6f:ed:5a:3b:c9:a0: 37:82:9d:07:a7:ce:44:ab:4c:cb:98:74:9a:e2:e5:4e:f8:7d: cc:05:20:21:8e:01:b2:57:5d:4f:77:9b:dc:a4:83:8d:7f:88: e0:9e:9e:ba:95:f0:f5:44:c8:26:82:52:03:3d:2a:d6:18:3e: d2:a9:82:1f:ea:e1:e8:b8:a0:cb:4c:2a:61:b4:cf:76:e0:74: 27:f7:d4:aa:c4:b5:59:78:00:d2:2b:c1:e3:99:c0:14:40:b4: 18:eb:66:6b:e8:05:61:4f:c3:ae:57:f1:cd:7e:20:36:ac:34: cf:f3:a1:5b:ab:f9:14:49:f7:c6:e3:10:1c:75:56:48:ed:fa: 27:63:86:e1:ec:eb:e8:68:16:65:4e:f4:93:48:2d:51:51:21: 60:03:fd:40:a5:82:c0:05:39:ec:a4:99:48:f9:be:5e:30:7f: 75:7d:ad:ea:e8:c3:14:82:31:80:e3:b7:76:25:58:01:0a:3f: a3:74:e1:9e:88:4a:b1:68:90:da:fe:92:c8:da:40:23:1f:29: ba:02:a3:99:1a:17:eb:f8:05:ea:42:24:77:41:fe:d5:45:9e: aa:a1:36:3e:71:57:ec:a5:81:14:61:8b:0c:93:3b:96:a3:a3: 58:bd:ea:34 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrHCCOgFNPP7pJDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk NDRiMzNlMDEtYzgyZS00MzMxLWIxZWItMTU2Mjc5ZTU4YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MD00kbjZxATHm4tcaJxPcHhNTOqvxMJRD7M 0zjz5BEveiRmAM/4poVRtA8Xf7najXCZkrn6x7FStlc1OTLg6KHQ5gTUxMOrYICn la1Qyq/B0nd/zM9c4c4NSDJvUJk4oZ6bP2vBLTmL8DKlYFvzej9BG+a6/JUJTIKL cVkJOf3Hs68FdUmIuRjaAt6wlKjIE1iKgvAA13ySmLVclCqTGaeMaMNNcfcVygGU l/SBNbjJzpDigytBHMg7Oo3JWRdYAPOUvD9IRBFfCPFxMpWs4awEgHYRzutgmty5 8zlzD8ceUjeDcREZs6DdC/BgWHxuym2CB5kO14YXeqW18Bc50wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL69lwGFOIk4K4SHU4I8871I3kXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJhZGM0YzItMGRmOS0z ZjdjLWJmNTYtZGUwNWQ1MmE0MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQByRK/BPjubc/4G0XNv7Vo7yaA3gp0Hp85Eq0zL mHSa4uVO+H3MBSAhjgGyV11Pd5vcpIONf4jgnp66lfD1RMgmglIDPSrWGD7SqYIf 6uHouKDLTCphtM924HQn99SqxLVZeADSK8HjmcAUQLQY62Zr6AVhT8OuV/HNfiA2 rDTP86Fbq/kUSffG4xAcdVZI7fonY4bh7OvoaBZlTvSTSC1RUSFgA/1ApYLABTns pJlI+b5eMH91fa3q6MMUgjGA47d2JVgBCj+jdOGeiEqxaJDa/pLI2kAjHym6AqOZ Ghfr+AXqQiR3Qf7VRZ6qoTY+cVfspYEUYYsMkzuWo6NYveo0 -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:58 2025 by rpki-client