$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c69b9ac2-aaf2-30d6-96c0-1dc72149a11e.roa File: c69b9ac2-aaf2-30d6-96c0-1dc72149a11e.roa (raw, json) Hash identifier: IQDcwi5hb35+Q1VapgoPAy7vwPEb1F+TKF213y6vkZo= Subject key identifier: D1:96:0E:C4:E6:FB:82:7F:29:8A:04:CF:CE:12:DD:15:E2:78:72:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320E26FF0A3D5E5A027E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c69b9ac2-aaf2-30d6-96c0-1dc72149a11e.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 36632 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0e:26:ff:0a:3d:5e:5a:02:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=bef5af14-4c9d-4ee2-a736-2b85b1e1058c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:d9:da:48:33:14:47:c4:63:d8:6a:fa:31: c2:12:5b:e9:b0:c9:02:89:93:17:f1:e5:89:f4:d5: b6:93:94:8e:1e:6a:c4:59:72:79:b6:df:66:6b:71: b2:65:f7:ea:23:f0:c0:60:e7:b6:35:ea:19:0a:81: 5c:c2:5b:69:8e:6a:19:da:c2:80:53:3d:24:d9:ed: dd:34:6c:b3:8e:92:a4:1a:cf:12:6e:44:70:03:1d: 1e:0f:de:db:0c:f3:2c:e4:90:0a:bb:04:f3:de:0b: 4a:85:f5:41:e4:51:9b:2c:1d:f4:92:54:c7:64:2a: be:19:8f:ef:c4:d0:52:a3:80:c4:a1:69:6f:7e:74: e6:d3:91:ca:98:3a:cf:e1:fe:c0:4c:f0:41:86:ed: 77:37:66:d5:0d:af:0a:24:cb:0a:d1:26:c7:d6:6b: 1e:2e:d4:3d:b6:8a:64:5d:cd:2d:92:a7:65:af:18: 0f:fb:80:f9:01:fd:26:59:16:3c:82:8e:41:12:20: bc:95:1b:07:bf:73:c5:a4:16:68:7c:c0:5f:6d:2d: b1:0b:fe:a9:cb:5b:d4:10:3c:49:2a:fd:30:9a:62: 02:de:01:ef:f6:13:08:65:d1:7c:68:77:42:1e:4b: 47:8d:cc:8c:6b:d5:e6:40:31:9e:4f:c2:eb:48:02: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:96:0E:C4:E6:FB:82:7F:29:8A:04:CF:CE:12:DD:15:E2:78:72:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c69b9ac2-aaf2-30d6-96c0-1dc72149a11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ec:4c:9f:96:e3:6a:fb:3b:f9:0b:47:52:c9:dd:c9:e1:a3: 05:71:8d:b5:24:85:0d:68:b7:48:32:dd:29:ab:11:70:fc:f5: 5b:be:8d:4e:4e:66:b2:29:ab:1e:a5:3b:6e:39:22:00:0d:d6: 85:24:24:0d:02:95:89:c9:bb:4f:be:f2:df:0f:86:a9:49:8b: a5:90:ff:d1:ed:9e:f5:41:a1:f3:8e:42:68:74:b7:0d:eb:0a: 29:ce:11:1a:09:09:c6:2d:b5:0e:01:79:70:4a:3c:d6:ab:87: 96:5d:8e:b3:fd:b7:d8:9a:11:87:50:d5:aa:4d:4c:d8:a6:18: 65:01:a6:ed:4c:07:21:b1:ed:79:49:ad:c4:06:69:a5:ee:7b: fe:a0:7e:06:63:cc:ed:d4:fb:03:88:06:ef:49:19:ed:d1:79: fc:b5:4e:29:fc:2a:09:f1:fb:a0:37:35:2b:b1:14:35:19:4f: a3:50:a0:07:1f:aa:64:df:f8:05:a0:b0:a1:62:5b:2e:1b:ba: b3:1a:75:d6:38:6d:4a:0a:36:2b:aa:7f:23:9c:3c:8d:ab:ef: 1c:da:90:ca:3f:2b:73:e0:84:25:b9:e0:e2:83:a7:9b:6f:12: c2:9d:ee:fb:90:ea:91:83:93:29:ad:02:cc:53:34:e8:96:7b: 7f:51:c7:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg4m/wo9XloCfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YmVmNWFmMTQtNGM5ZC00ZWUyLWE3MzYtMmI4NWIxZTEwNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf3Z2kgzFEfEY9hq+jHCElvpsMkCiZMX8eWJ 9NW2k5SOHmrEWXJ5tt9ma3GyZffqI/DAYOe2NeoZCoFcwltpjmoZ2sKAUz0k2e3d NGyzjpKkGs8SbkRwAx0eD97bDPMs5JAKuwTz3gtKhfVB5FGbLB30klTHZCq+GY/v xNBSo4DEoWlvfnTm05HKmDrP4f7ATPBBhu13N2bVDa8KJMsK0SbH1mseLtQ9topk Xc0tkqdlrxgP+4D5Af0mWRY8go5BEiC8lRsHv3PFpBZofMBfbS2xC/6py1vUEDxJ Kv0wmmIC3gHv9hMIZdF8aHdCHktHjcyMa9XmQDGeT8LrSAL6xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGWDsTm+4J/KYoEz84S3RXieHJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzY5YjlhYzItYWFmMi0z MGQ2LTk2YzAtMWRjNzIxNDlhMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbsTJ+W42r7O/kLR1LJ3cnhowVxjbUkhQ1ot0gy3SmrEXD89Vu+ jU5OZrIpqx6lO245IgAN1oUkJA0ClYnJu0++8t8PhqlJi6WQ/9HtnvVBofOOQmh0 tw3rCinOERoJCcYttQ4BeXBKPNarh5ZdjrP9t9iaEYdQ1apNTNimGGUBpu1MByGx 7XlJrcQGaaXue/6gfgZjzO3U+wOIBu9JGe3Refy1Tin8Kgnx+6A3NSuxFDUZT6NQ oAcfqmTf+AWgsKFiWy4burMaddY4bUoKNiuqfyOcPI2r7xzakMo/K3PghCW54OKD p5tvEsKd7vuQ6pGDkymtAsxTNOiWe39Rxw4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:25 2025 by rpki-client