$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa File: c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa (raw, json) Hash identifier: /fFMGnkL6wDRiGmmqyJT2u0bWFl8e5b+MuRNn1ZvaZw= Subject key identifier: 51:1A:07:56:49:C0:70:E0:88:DB:A2:BE:2D:C1:F8:EF:97:F1:AF:86 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F37558564CEF85392264740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396581 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:55:85:64:ce:f8:53:92:26:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=a3e297ea-78cd-4cb1-b85e-46c2ed6507e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0c:ba:44:10:bf:b2:36:52:eb:ef:64:6a:ba: af:84:eb:0e:c6:49:19:f4:b3:ea:26:2e:33:29:d5: 85:3b:eb:cd:8f:01:22:9f:57:9d:32:f2:6c:37:4f: 2c:70:41:66:21:89:ea:7b:fc:63:ac:e4:ee:13:2d: 67:10:85:21:52:4d:90:5c:10:bb:11:cc:26:97:03: cf:e2:eb:c9:1f:52:5a:e9:0c:46:20:66:6c:3d:be: 4d:c4:7c:1f:93:8f:cc:c4:4a:e0:28:55:c6:30:d1: fd:4d:37:dd:6e:61:b7:68:94:77:83:4c:cb:7d:58: 40:8f:74:c0:98:09:9d:b3:38:fe:04:dc:4c:82:34: 6d:ac:8b:ab:aa:f6:68:74:e0:ef:87:77:96:c7:ff: 58:02:29:59:0f:43:6b:58:39:1e:8b:b3:a1:a8:ba: cc:ae:9a:b2:1d:a1:99:85:b9:7f:40:07:bf:7e:66: fa:12:b3:9e:46:d2:cd:75:a4:da:c4:f5:a7:8f:80: 67:f0:a7:6f:83:b3:d6:08:92:d1:7e:5a:5a:c3:1e: b7:09:b2:46:4c:57:af:82:20:c7:dc:19:03:30:28: fc:04:cc:8e:07:31:f2:43:93:53:35:09:25:7a:4c: 62:74:c1:f8:3f:3a:0e:95:c8:44:88:dc:38:85:0f: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1A:07:56:49:C0:70:E0:88:DB:A2:BE:2D:C1:F8:EF:97:F1:AF:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4e:7c:63:a2:9d:15:a0:cb:af:23:e7:01:d6:61:71:b8:a9: ae:fe:b6:fe:07:7b:14:cb:d2:be:68:d9:cd:44:f6:79:8d:34: c4:6a:ca:bc:55:fd:75:49:07:ea:35:b4:d9:9e:89:98:b2:6d: 4a:77:cf:86:f8:81:09:03:c8:a6:45:51:db:f2:df:8d:10:24: 8c:c3:4d:41:03:f1:4a:0a:af:b5:be:16:42:55:51:bb:ff:aa: 85:0a:a5:b1:ba:ab:ff:a5:07:95:82:9e:2b:04:bd:cd:c1:36: b0:5b:a2:4b:4e:47:07:df:9d:f8:41:59:e9:1b:29:be:01:d7: 43:00:c3:0d:d0:2d:4f:0e:27:da:66:16:52:94:82:2f:3e:3a: 29:5c:a4:6c:ec:40:43:a9:9e:9b:75:dd:c7:16:51:22:9f:19: 1b:3f:ec:24:0c:8b:9c:b3:f7:13:23:2a:9f:26:e0:94:f0:e2: 56:31:01:a6:c2:d7:1d:85:d8:39:cd:3b:5f:6f:a5:54:be:19: e6:b6:ca:a8:e5:f6:de:2a:f8:49:09:54:5a:fb:ca:0b:90:3e: a4:3c:26:0c:3c:0c:67:35:8b:6c:de:a4:28:b6:9b:e1:0c:99: 76:fc:99:1a:bc:63:20:4a:78:b9:0c:64:59:8b:b4:1d:6e:69: 5a:ee:a2:9b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1WFZM74U5ImR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YTNlMjk3ZWEtNzhjZC00Y2IxLWI4NWUtNDZjMmVkNjUwN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wy6RBC/sjZS6+9karqvhOsOxkkZ9LPqJi4z KdWFO+vNjwEin1edMvJsN08scEFmIYnqe/xjrOTuEy1nEIUhUk2QXBC7EcwmlwPP 4uvJH1Ja6QxGIGZsPb5NxHwfk4/MxErgKFXGMNH9TTfdbmG3aJR3g0zLfVhAj3TA mAmdszj+BNxMgjRtrIurqvZodODvh3eWx/9YAilZD0NrWDkei7OhqLrMrpqyHaGZ hbl/QAe/fmb6ErOeRtLNdaTaxPWnj4Bn8Kdvg7PWCJLRflpawx63CbJGTFevgiDH 3BkDMCj8BMyOBzHyQ5NTNQklekxidMH4PzoOlchEiNw4hQ9YBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFEaB1ZJwHDgiNuivi3B+O+X8a+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQzOGVlYzgtYTVhNS0z NmYxLWIwNzEtMmQ1ODFiZmUxNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB+Tnxjop0VoMuvI+cB1mFxuKmu/rb+B3sUy9K+ aNnNRPZ5jTTEasq8Vf11SQfqNbTZnomYsm1Kd8+G+IEJA8imRVHb8t+NECSMw01B A/FKCq+1vhZCVVG7/6qFCqWxuqv/pQeVgp4rBL3NwTawW6JLTkcH3534QVnpGym+ AddDAMMN0C1PDifaZhZSlIIvPjopXKRs7EBDqZ6bdd3HFlEinxkbP+wkDIucs/cT IyqfJuCU8OJWMQGmwtcdhdg5zTtfb6VUvhnmtsqo5fbeKvhJCVRa+8oLkD6kPCYM PAxnNYts3qQotpvhDJl2/JkavGMgSni5DGRZi7Qdbmla7qKb -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:15 2025 by rpki-client