$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc6ed72d-6fad-3004-a1aa-8a6d32fa4a7f.roa File: bc6ed72d-6fad-3004-a1aa-8a6d32fa4a7f.roa (raw, json) Hash identifier: R1ylMjOu0YvsOPW/2WvG5x6N1HWJ39rDWhbe52uLB00= Subject key identifier: 0C:F5:10:AF:43:34:EF:10:CF:B5:B6:44:52:84:EA:A4:D6:B9:D3:6D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B663211A9475AD7A1C2C83500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc6ed72d-6fad-3004-a1aa-8a6d32fa4a7f.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396547 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:11:a9:47:5a:d7:a1:c2:c8:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=e3cc6676-f6eb-45ca-8eac-72836445c66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:47:1d:7f:64:93:61:ba:1c:b4:c1:b4:2c:c7: 71:97:51:83:8b:ac:08:69:82:77:d7:31:23:1b:81: 57:c4:04:83:c8:39:e9:4f:ef:99:7f:f6:db:1b:dd: e2:cd:51:e9:ea:2d:e2:f4:52:70:37:3d:2a:55:65: ea:5c:f6:d6:19:9c:c1:6d:0e:02:49:0c:b0:c9:ed: 6a:89:6f:1c:3a:39:c9:5c:99:5c:98:46:67:9f:5c: 47:a6:20:7e:e7:74:89:62:9e:eb:27:d1:27:d7:83: de:42:34:90:1b:9f:32:0b:f6:a7:87:01:e8:af:0e: 22:0a:1c:1f:e5:17:31:8a:5e:85:88:95:80:a9:ba: 50:56:75:b1:96:82:17:47:e9:a6:5d:6a:c7:1d:49: 9e:37:b4:3a:dd:33:03:c4:54:38:4c:94:15:de:99: 8f:99:07:b5:f6:61:e9:85:ba:dc:01:43:31:fe:e4: db:40:4e:21:25:ee:0b:4b:ac:ef:92:7e:45:f0:48: 1f:e6:47:17:4b:eb:b9:dd:95:17:61:4f:13:82:cf: 66:85:be:a5:99:b1:e8:61:a0:56:dc:cc:6d:5c:72: 5c:1b:80:08:5e:8b:53:2f:cc:35:fb:78:35:ec:61: 4c:5b:c4:25:9e:7e:d3:4b:76:b8:d0:b6:b5:04:74: ab:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F5:10:AF:43:34:EF:10:CF:B5:B6:44:52:84:EA:A4:D6:B9:D3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc6ed72d-6fad-3004-a1aa-8a6d32fa4a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8f:96:b3:f7:36:57:2b:df:3a:d6:90:6c:9a:a3:a9:04:bc: 99:1d:41:62:5c:54:07:18:fa:80:12:cc:7d:6e:95:dd:4a:d9: 2c:0b:22:35:9f:1f:39:5a:61:7f:80:2c:82:cb:36:2d:91:67: 57:2c:e3:14:27:cf:4c:12:31:a3:42:81:cd:0a:a3:a1:41:be: fe:0e:0e:b4:f2:d0:14:c0:ec:71:56:b2:99:b7:92:84:f7:fb: 63:8e:ae:e0:b2:5f:39:b8:eb:4c:9b:e6:7d:90:f9:36:83:ce: e3:3e:15:5c:e6:ef:c5:e3:d3:7a:06:2c:cc:27:bc:30:11:97: 0b:01:7b:30:1a:1c:1c:91:6b:b7:07:46:9c:a0:ff:54:5f:e8: 8c:55:08:5f:65:a3:42:72:cb:4a:84:ed:fd:6c:b9:6e:4d:5d: 69:55:3e:50:21:52:6b:52:51:b7:33:48:20:37:4a:91:ad:8b: d8:57:84:20:c1:8d:ae:75:d1:a3:93:91:51:75:cf:c2:9e:6a: 79:83:30:f3:99:d8:65:73:a8:83:08:c7:e4:d6:7e:08:c6:eb: 56:9a:a8:77:e3:82:f4:70:6a:08:58:a7:cb:74:d2:c7:fd:b0: 74:96:f1:06:2f:99:94:84:26:4f:ce:11:1b:b3:a6:0d:df:91: 47:82:e1:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhGpR1rXocLINQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTNjYzY2NzYtZjZlYi00NWNhLThlYWMtNzI4MzY0NDVjNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0cdf2STYboctMG0LMdxl1GDi6wIaYJ31zEj G4FXxASDyDnpT++Zf/bbG93izVHp6i3i9FJwNz0qVWXqXPbWGZzBbQ4CSQywye1q iW8cOjnJXJlcmEZnn1xHpiB+53SJYp7rJ9En14PeQjSQG58yC/anhwHorw4iChwf 5Rcxil6FiJWAqbpQVnWxloIXR+mmXWrHHUmeN7Q63TMDxFQ4TJQV3pmPmQe19mHp hbrcAUMx/uTbQE4hJe4LS6zvkn5F8Egf5kcXS+u53ZUXYU8Tgs9mhb6lmbHoYaBW 3MxtXHJcG4AIXotTL8w1+3g17GFMW8Qlnn7TS3a40La1BHSrOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAz1EK9DNO8Qz7W2RFKE6qTWudNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmM2ZWQ3MmQtNmZhZC0z MDA0LWExYWEtOGE2ZDMyZmE0YTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6PlrP3Nlcr3zrWkGyao6kEvJkdQWJcVAcY+oASzH1uld1K2SwL IjWfHzlaYX+ALILLNi2RZ1cs4xQnz0wSMaNCgc0Ko6FBvv4ODrTy0BTA7HFWspm3 koT3+2OOruCyXzm460yb5n2Q+TaDzuM+FVzm78Xj03oGLMwnvDARlwsBezAaHByR a7cHRpyg/1Rf6IxVCF9lo0Jyy0qE7f1suW5NXWlVPlAhUmtSUbczSCA3SpGti9hX hCDBja510aOTkVF1z8KeanmDMPOZ2GVzqIMIx+TWfgjG61aaqHfjgvRwaghYp8t0 0sf9sHSW8QYvmZSEJk/OERuzpg3fkUeC4Uo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:45:13 2025 by rpki-client