$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca8f5b7-b1e0-39bf-9706-2f9314feb3f2.roa File: cca8f5b7-b1e0-39bf-9706-2f9314feb3f2.roa (raw, json) Hash identifier: 6vh+s8biFlpXK1RW2l2BvQBSUmoQqPgke1picYfh7Us= Subject key identifier: 61:30:75:ED:D4:2B:1C:F8:25:65:85:B2:F2:EE:C3:CA:2D:38:77:3F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F37566209FDF5FF02F9FAC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca8f5b7-b1e0-39bf-9706-2f9314feb3f2.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396586 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:56:62:09:fd:f5:ff:02:f9:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3a2db649-27a1-4731-af49-f80d33c20773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:69:48:1d:0b:73:f9:57:61:5f:3e:9c:07:62: cc:e4:d0:9c:f3:32:93:07:8e:3b:5e:7b:6a:9d:fe: a0:99:62:43:e2:ad:ff:d7:2d:cf:f7:ee:b2:85:ed: d6:60:fd:c0:02:8a:05:42:1f:f4:a8:d6:81:8b:8e: 64:10:55:0f:ad:5d:85:15:1c:1a:74:20:c2:3c:50: 49:77:5a:a9:85:28:8f:84:88:e2:a9:b1:8c:84:d1: 7a:f7:f0:bb:bf:47:ea:13:27:9d:7b:9c:31:18:61: 65:56:ce:a6:ba:9e:19:37:b4:0d:26:d5:a8:f1:f0: f6:99:b0:db:b4:77:70:b3:11:59:86:63:8e:0c:ce: b6:d3:2a:e4:52:49:d0:b3:ef:e5:dc:8b:93:41:18: 11:f5:b9:b2:bc:bf:5e:af:ba:45:9c:42:c2:14:4a: b1:db:bc:ad:f6:f0:36:b3:9c:6b:30:2a:79:93:0a: 36:3d:a6:3c:21:b4:47:ba:62:a3:c2:05:d2:5f:95: 7a:00:d1:c3:05:6a:01:0a:a7:64:b1:14:04:ac:be: cd:58:2e:4c:d8:f6:8d:85:39:14:39:65:9c:9f:86: 2f:94:b8:49:7a:56:9d:11:08:9c:2c:ed:cc:90:31: 23:35:7d:e3:d7:1b:c9:c2:b0:55:89:b5:23:f2:67: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:30:75:ED:D4:2B:1C:F8:25:65:85:B2:F2:EE:C3:CA:2D:38:77:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca8f5b7-b1e0-39bf-9706-2f9314feb3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:60:a8:66:80:d7:11:f4:6d:a1:3f:44:f0:e1:3d:ce:b7:3e: 6d:6f:d3:b9:7d:a9:0f:e4:eb:e5:d5:90:31:3c:01:4d:7d:4b: 2f:85:8a:c5:bf:9b:fb:e4:a5:92:63:44:8e:22:de:b5:b4:ea: b2:b9:25:94:8c:d6:e2:47:bc:bb:a8:43:14:37:b7:11:30:0e: 4a:22:bd:f0:9a:71:2c:58:49:a2:2b:cd:a1:5f:6e:ef:8a:26: ea:6f:ea:85:21:6e:3a:2c:d2:fb:31:08:da:f0:9e:86:8b:78: f8:5d:d9:af:36:37:fd:79:75:48:8e:00:02:f4:82:36:ac:95: 6e:12:03:c6:f6:80:5c:13:1f:78:aa:75:f1:04:9e:c4:ef:ad: 2c:f5:eb:20:83:b6:58:29:bb:a9:cd:78:fc:12:74:11:33:6f: 59:48:80:83:5b:4a:38:ed:9e:8a:ae:bb:dc:79:26:29:2a:48: 84:a2:bb:48:a5:37:b0:84:a4:86:44:f6:34:c6:27:2b:14:32: f8:07:bc:41:21:8a:e7:ef:c1:10:b8:fd:f5:a4:72:d9:54:ec: e7:03:d0:9e:74:8d:80:f0:33:62:bf:55:4a:a3:81:ec:89:04: c1:01:d7:53:cf:45:79:7b:02:b7:57:26:48:b4:1c:08:02:66: ff:1f:7d:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1ZiCf31/wL5+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2EyZGI2NDktMjdhMS00NzMxLWFmNDktZjgwZDMzYzIwNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWlIHQtz+VdhXz6cB2LM5NCc8zKTB447Xntq nf6gmWJD4q3/1y3P9+6yhe3WYP3AAooFQh/0qNaBi45kEFUPrV2FFRwadCDCPFBJ d1qphSiPhIjiqbGMhNF69/C7v0fqEyede5wxGGFlVs6mup4ZN7QNJtWo8fD2mbDb tHdwsxFZhmOODM620yrkUknQs+/l3IuTQRgR9bmyvL9er7pFnELCFEqx27yt9vA2 s5xrMCp5kwo2PaY8IbRHumKjwgXSX5V6ANHDBWoBCqdksRQErL7NWC5M2PaNhTkU OWWcn4YvlLhJeladEQicLO3MkDEjNX3j1xvJwrBVibUj8mcG7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGEwde3UKxz4JWWFsvLuw8otOHc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2NhOGY1YjctYjFlMC0z OWJmLTk3MDYtMmY5MzE0ZmViM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVYKhmgNcR9G2hP0Tw4T3Otz5tb9O5fakP5Ovl 1ZAxPAFNfUsvhYrFv5v75KWSY0SOIt61tOqyuSWUjNbiR7y7qEMUN7cRMA5KIr3w mnEsWEmiK82hX27viibqb+qFIW46LNL7MQja8J6Gi3j4XdmvNjf9eXVIjgAC9II2 rJVuEgPG9oBcEx94qnXxBJ7E760s9esgg7ZYKbupzXj8EnQRM29ZSICDW0o47Z6K rrvceSYpKkiEortIpTewhKSGRPY0xicrFDL4B7xBIYrn78EQuP31pHLZVOznA9Ce dI2A8DNiv1VKo4HsiQTBAddTz0V5ewK3VyZItBwIAmb/H30E -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:20 2025 by rpki-client