$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa File: bf8655bf-4d32-34d1-9212-15f1632d728e.roa (raw, json) Hash identifier: NLuN4V0WaZ50bvUN/Rji+/Vd4r1nzyNWx+qZJYNDtQ4= Subject key identifier: C7:CE:3A:C9:D5:83:32:A2:31:FA:20:1E:15:C1:B7:46:34:07:96:CA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC682BFC9DFA2411E89080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 396546 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:68:2b:fc:9d:fa:24:11:e8:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=642c0426-5c07-4d73-8dbe-3d3cf8d9a5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b5:2f:99:fe:c4:58:f6:aa:2f:62:c1:fd:b5: 5d:ed:6c:bf:26:d3:87:38:b9:ec:99:45:c3:a7:3e: d6:2f:97:bc:e3:3c:42:74:f4:52:16:07:41:15:bb: 9c:2c:31:65:1f:68:ce:1d:20:07:67:f9:8a:90:91: 30:83:35:db:99:36:99:60:02:c9:a7:91:a2:25:df: cb:ba:2b:c5:7c:2e:c9:87:f7:ea:11:4d:ac:91:78: 7e:5b:54:1d:b8:2e:97:d0:68:f2:13:af:19:66:09: a4:62:24:2b:37:84:56:79:ac:27:a8:fc:bd:95:5b: 09:64:f3:34:3a:81:ea:55:f4:69:7c:c1:46:b0:02: 33:6b:07:d6:92:a7:2b:3e:03:a3:ee:76:31:91:18: 17:c9:30:49:ed:f2:9b:1c:94:8f:49:f5:69:53:22: 53:5c:32:cc:d8:87:95:d0:60:54:cb:ba:c8:58:d1: 0c:b0:bb:7d:85:53:62:f1:01:82:24:cc:02:af:7c: 17:48:3a:f0:33:f2:7b:91:d3:d2:6d:9e:e0:0f:70: e2:41:c7:57:44:65:d0:84:df:34:01:b4:3b:ae:6f: b7:15:47:33:68:ce:e6:3d:6f:24:73:1e:94:e9:42: 91:64:85:21:2e:51:b8:22:b2:7d:ed:95:09:f2:74: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CE:3A:C9:D5:83:32:A2:31:FA:20:1E:15:C1:B7:46:34:07:96:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4f:a5:9e:c9:e2:40:88:0c:ef:12:4f:82:f5:39:3e:24:0e: 6b:80:b9:6e:50:84:98:f0:26:8a:a9:c5:1d:25:b9:32:98:bc: 84:63:ae:1b:db:55:4a:cc:f2:ef:74:f3:37:f0:ae:93:ee:f3: 64:bb:c7:3e:cc:ae:7a:87:f2:b9:93:c9:ac:e7:7f:62:9a:af: ea:98:7a:66:5b:e6:25:25:e2:7f:b9:d1:0b:f9:e8:22:de:b8: 33:f2:a2:fa:19:14:d0:5c:8a:88:8d:f2:fa:5a:55:eb:a9:84: b2:39:21:43:9e:65:e8:a2:6c:55:20:93:f8:22:07:11:5e:22: e9:f1:10:52:26:10:0d:e4:90:1e:7c:6b:5e:57:44:cb:a6:b0: 47:61:e7:f5:9d:76:bd:71:8f:cf:3f:06:0b:d3:84:28:a2:f5: e3:06:60:d4:a7:e8:87:32:16:1e:b8:d0:15:ce:19:bb:5e:02: cf:5f:4e:57:25:e4:07:9d:41:34:9f:52:4d:a2:1f:24:65:92: b9:ca:7b:e5:5f:9b:d7:a8:d5:6e:39:76:06:8f:17:b6:27:ae: 78:e8:09:15:79:47:1a:e4:c3:77:89:2f:58:c9:3d:17:1a:de: 9e:d7:7f:f9:fe:0a:e4:da:1c:d0:5b:e6:87:9c:17:a2:ed:c4: 75:4f:3f:a9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGgr/J36JBHokIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk NjQyYzA0MjYtNWMwNy00ZDczLThkYmUtM2QzY2Y4ZDlhNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrUvmf7EWPaqL2LB/bVd7Wy/JtOHOLnsmUXD pz7WL5e84zxCdPRSFgdBFbucLDFlH2jOHSAHZ/mKkJEwgzXbmTaZYALJp5GiJd/L uivFfC7Jh/fqEU2skXh+W1QduC6X0GjyE68ZZgmkYiQrN4RWeawnqPy9lVsJZPM0 OoHqVfRpfMFGsAIzawfWkqcrPgOj7nYxkRgXyTBJ7fKbHJSPSfVpUyJTXDLM2IeV 0GBUy7rIWNEMsLt9hVNi8QGCJMwCr3wXSDrwM/J7kdPSbZ7gD3DiQcdXRGXQhN80 AbQ7rm+3FUczaM7mPW8kcx6U6UKRZIUhLlG4IrJ97ZUJ8nSoJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMfOOsnVgzKiMfogHhXBt0Y0B5bKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY4NjU1YmYtNGQzMi0z NGQxLTkyMTItMTVmMTYzMmQ3MjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGT6WeyeJAiAzvEk+C9Tk+JA5rgLluUISY8CaK qcUdJbkymLyEY64b21VKzPLvdPM38K6T7vNku8c+zK56h/K5k8ms539imq/qmHpm W+YlJeJ/udEL+egi3rgz8qL6GRTQXIqIjfL6WlXrqYSyOSFDnmXoomxVIJP4IgcR XiLp8RBSJhAN5JAefGteV0TLprBHYef1nXa9cY/PPwYL04QoovXjBmDUp+iHMhYe uNAVzhm7XgLPX05XJeQHnUE0n1JNoh8kZZK5ynvlX5vXqNVuOXYGjxe2J6546AkV eUca5MN3iS9YyT0XGt6e13/5/grk2hzQW+aHnBei7cR1Tz+p -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:27 2025 by rpki-client