$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7881e9-a30d-3b5b-9f8a-04717fdbf348.roa File: cf7881e9-a30d-3b5b-9f8a-04717fdbf348.roa (raw, json) Hash identifier: rxY6Dg1/Det4qrCouIJWvMoS+i6MnAwyYVKYnkz3FTs= Subject key identifier: 42:30:4F:B6:97:30:E8:CC:69:01:A5:31:C8:CE:87:13:34:45:1A:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320D9161677527E8E84000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7881e9-a30d-3b5b-9f8a-04717fdbf348.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 36619 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0d:91:61:67:75:27:e8:e8:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=39b3a24f-e9ed-4380-bc36-c50442a8d149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:b2:68:d1:2f:3b:8d:48:24:df:45:a0:29: 26:12:6b:32:9d:2f:8d:41:12:2a:9d:a2:89:d6:10: 5a:a1:bf:8c:ea:d0:47:7a:2d:68:92:1d:48:a6:ed: 82:01:75:c2:54:d0:f8:91:be:84:1e:ba:76:cf:37: 06:e7:c4:07:18:5f:e9:f3:b4:31:51:00:29:c9:cb: d6:78:4a:33:3f:cf:22:92:6a:07:af:f0:0e:16:54: 78:e4:0e:87:c3:59:e8:9f:b5:b0:02:43:1b:22:29: d8:87:7d:fc:64:97:34:e7:42:c2:7f:ad:ef:7a:24: 7e:df:fd:b0:32:c8:23:73:9f:48:83:0d:54:ba:15: eb:5c:b5:21:62:e5:85:51:2b:f9:fd:32:f2:f6:21: 58:0f:08:f8:d8:0c:d4:38:76:fd:bf:c2:9b:73:64: 65:d9:3c:ff:73:3a:6d:61:d1:2b:84:0c:4a:e8:db: aa:b4:f9:01:f0:f6:6b:27:df:bc:f8:29:b7:f3:4f: ed:00:b6:41:0c:ad:9f:e2:e4:0f:ee:8d:66:69:eb: 90:9f:61:3a:3e:13:b3:5c:2d:be:fd:c3:b7:e1:93: 28:50:07:64:73:a7:ca:81:5c:18:39:81:6d:9a:8b: bf:fd:bf:f1:1d:bf:6b:1d:e5:97:83:2f:ce:d5:e9: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:4F:B6:97:30:E8:CC:69:01:A5:31:C8:CE:87:13:34:45:1A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7881e9-a30d-3b5b-9f8a-04717fdbf348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:7c:14:e4:33:ec:4e:50:ec:86:89:36:3f:65:d6:28:2e:fe: da:cf:2f:2b:f1:bd:82:f3:d4:16:5f:e2:08:69:e4:15:79:1d: bf:33:f6:7c:a1:60:47:de:d4:78:55:d1:76:52:bc:5f:94:4c: ce:c7:0b:b5:5b:70:b1:aa:a4:86:5b:90:db:12:0b:4e:2c:b1: 6a:a8:07:94:28:cf:b2:21:49:5e:8f:99:0b:19:42:d0:66:4a: 2b:e7:02:0f:c1:e1:05:1a:b3:7b:a8:d0:5a:a4:cc:44:17:e3: 61:dc:42:b1:3e:6c:7d:cb:13:6d:6f:31:91:23:44:6b:3c:ae: ca:d6:16:58:17:47:22:4a:b7:18:2b:c7:da:71:09:84:07:78: 07:60:93:8c:0c:72:bc:6e:45:9c:5b:13:1f:1b:d2:c4:25:e7: 83:16:c4:b8:89:91:06:89:73:eb:cb:f2:3d:61:20:4b:f9:98: e5:e4:41:9b:1a:5c:93:90:1b:58:49:a0:ea:13:7c:6c:d9:b1: 0b:c9:f3:46:ff:71:ed:88:26:9b:4a:bf:40:70:d6:05:4a:80: 06:c3:c8:1c:2a:69:b2:d4:a3:9b:49:9c:f8:be:05:b1:11:4a: a6:06:fc:4e:e5:e6:25:fa:43:b5:09:69:ac:ee:de:8e:b7:44: a0:a3:7f:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg2RYWd1J+joQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MzliM2EyNGYtZTllZC00MzgwLWJjMzYtYzUwNDQyYThkMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzeyaNEvO41IJN9FoCkmEmsynS+NQRIqnaKJ 1hBaob+M6tBHei1okh1Ipu2CAXXCVND4kb6EHrp2zzcG58QHGF/p87QxUQApycvW eEozP88ikmoHr/AOFlR45A6Hw1non7WwAkMbIinYh338ZJc050LCf63veiR+3/2w Msgjc59Igw1UuhXrXLUhYuWFUSv5/TLy9iFYDwj42AzUOHb9v8Kbc2Rl2Tz/czpt YdErhAxK6NuqtPkB8PZrJ9+8+Cm380/tALZBDK2f4uQP7o1maeuQn2E6PhOzXC2+ /cO34ZMoUAdkc6fKgVwYOYFtmou//b/xHb9rHeWXgy/O1ekILwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEIwT7aXMOjMaQGlMcjOhxM0RRqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y3ODgxZTktYTMwZC0z YjViLTlmOGEtMDQ3MTdmZGJmMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJV8FOQz7E5Q7IaJNj9l1igu/trPLyvxvYLz1BZf4ghp5BV5Hb8z 9nyhYEfe1HhV0XZSvF+UTM7HC7VbcLGqpIZbkNsSC04ssWqoB5Qoz7IhSV6PmQsZ QtBmSivnAg/B4QUas3uo0FqkzEQX42HcQrE+bH3LE21vMZEjRGs8rsrWFlgXRyJK txgrx9pxCYQHeAdgk4wMcrxuRZxbEx8b0sQl54MWxLiJkQaJc+vL8j1hIEv5mOXk QZsaXJOQG1hJoOoTfGzZsQvJ80b/ce2IJptKv0Bw1gVKgAbDyBwqabLUo5tJnPi+ BbERSqYG/E7l5iX6Q7UJaazu3o63RKCjf0g= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:39 2025 by rpki-client