$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafd0a0f-c59f-3c37-93aa-88a3146a2119.roa File: cafd0a0f-c59f-3c37-93aa-88a3146a2119.roa (raw, json) Hash identifier: NP63ojYdZnTFp3bzk7mtQCYwh96Vbv+2VRzuguKeoKE= Subject key identifier: 48:B1:10:99:85:BF:DD:4D:6C:D8:06:95:48:48:FD:A5:45:C3:BF:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320F0908A55DB93D9138B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafd0a0f-c59f-3c37-93aa-88a3146a2119.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396564 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0f:09:08:a5:5d:b9:3d:91:38:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=30c04862-6672-414c-bbdc-89a6982b72d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:53:18:f3:62:77:0c:aa:c4:ac:b5:20:59: 60:03:92:eb:01:0f:7f:64:1d:83:9e:31:37:66:5f: 4b:6a:f5:cd:f8:0b:d7:4f:28:83:e5:5a:7a:03:b2: b7:a1:74:b8:6b:11:dd:c9:f0:94:da:d3:75:8c:f8: b3:6f:33:d8:af:cd:9d:4a:ff:41:c6:ee:fc:6d:41: a3:16:76:64:3e:0e:32:df:cd:e5:ff:39:c1:fc:c9: 63:82:ff:3a:49:12:be:47:58:3a:3c:e3:04:e7:fd: d0:0b:e6:cf:19:d9:c7:d6:c8:ec:7a:12:07:c4:e1: d0:13:cd:2d:dd:cd:f0:52:95:44:a8:d2:d9:60:fb: 8f:29:b2:f7:36:44:01:ce:ec:d0:1c:1c:49:47:23: 78:58:8c:cf:13:ef:f9:32:8a:83:10:ab:f0:c0:62: c2:5f:cf:04:13:17:f7:da:a1:02:45:c6:83:f9:ff: d4:e1:0b:aa:35:95:ab:ec:ef:57:cb:40:80:10:f6: 6e:7f:c6:72:48:58:57:aa:38:35:6b:40:bf:ba:9e: ab:4a:57:6e:62:3a:79:ac:c8:43:80:79:91:24:c1: bc:a7:dd:92:86:9e:38:88:b5:f9:da:34:5a:79:70: cc:37:af:8c:73:25:61:ff:6d:0c:df:e5:10:87:0b: 0a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:10:99:85:BF:DD:4D:6C:D8:06:95:48:48:FD:A5:45:C3:BF:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafd0a0f-c59f-3c37-93aa-88a3146a2119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c8:32:4c:d2:41:9e:aa:e2:76:94:bc:0e:70:18:a2:c6:0a: 83:ca:75:a5:a7:64:c5:a1:22:a2:c1:11:e5:d0:42:6d:5d:41: 42:93:63:85:dd:58:35:2f:b1:00:31:74:75:d8:14:92:e2:e7: 63:8f:36:36:e5:85:73:c1:d5:1c:2b:13:9d:02:39:9d:29:b9: bd:f7:48:84:a5:cc:ce:77:fe:a7:cf:68:1c:93:97:30:f7:3d: c1:4c:86:b8:19:3b:b7:29:0b:92:21:5f:d3:53:e3:df:e0:95: 02:46:fc:9f:79:86:83:94:3a:67:ac:62:a2:31:1f:87:38:74: 56:0e:e0:ce:25:6c:14:8b:ef:67:35:4c:99:b3:05:dc:84:fd: 25:07:13:0c:c1:e5:3a:7d:47:22:bc:59:7e:0f:1c:89:d9:71: f8:8e:47:6d:24:93:8e:ac:38:b8:a3:d9:14:b0:00:19:74:56: 45:30:53:82:3b:38:d2:c1:a8:55:d5:b8:9c:cd:91:ec:53:f0: 26:37:22:59:70:f9:27:f2:66:8f:59:1a:97:ce:96:e4:29:66: 12:cb:e3:e6:45:be:83:90:1e:ee:d6:dc:f4:20:66:50:46:3d: c5:af:aa:dc:20:7a:3d:24:0f:9f:27:1a:70:3a:84:e2:60:13: c7:63:48:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg8JCKVduT2ROLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MzBjMDQ4NjItNjY3Mi00MTRjLWJiZGMtODlhNjk4MmI3MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xBTGPNidwyqxKy1IFlgA5LrAQ9/ZB2DnjE3 Zl9LavXN+AvXTyiD5Vp6A7K3oXS4axHdyfCU2tN1jPizbzPYr82dSv9Bxu78bUGj FnZkPg4y383l/znB/Mljgv86SRK+R1g6POME5/3QC+bPGdnH1sjsehIHxOHQE80t 3c3wUpVEqNLZYPuPKbL3NkQBzuzQHBxJRyN4WIzPE+/5MoqDEKvwwGLCX88EExf3 2qECRcaD+f/U4QuqNZWr7O9Xy0CAEPZuf8ZySFhXqjg1a0C/up6rSlduYjp5rMhD gHmRJMG8p92Shp44iLX52jRaeXDMN6+McyVh/20M3+UQhwsKUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEixEJmFv91NbNgGlUhI/aVFw78eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FmZDBhMGYtYzU5Zi0z YzM3LTkzYWEtODhhMzE0NmEyMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvIMkzSQZ6q4naUvA5wGKLGCoPKdaWnZMWhIqLBEeXQQm1dQUKT Y4XdWDUvsQAxdHXYFJLi52OPNjblhXPB1RwrE50COZ0pub33SISlzM53/qfPaByT lzD3PcFMhrgZO7cpC5IhX9NT49/glQJG/J95hoOUOmesYqIxH4c4dFYO4M4lbBSL 72c1TJmzBdyE/SUHEwzB5Tp9RyK8WX4PHInZcfiOR20kk46sOLij2RSwABl0VkUw U4I7ONLBqFXVuJzNkexT8CY3Illw+SfyZo9ZGpfOluQpZhLL4+ZFvoOQHu7W3PQg ZlBGPcWvqtwgej0kD58nGnA6hOJgE8djSLA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:02 2025 by rpki-client