$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5585f1c-87b4-3d51-a0c6-7978f175c61e.roa File: d5585f1c-87b4-3d51-a0c6-7978f175c61e.roa (raw, json) Hash identifier: HIv9QYnecR9ormFbu8uFr1TAI/UZUx/ONNGGr+6+FAM= Subject key identifier: 39:FB:68:59:08:A5:A9:89:A0:CD:64:36:A6:45:11:67:35:A8:4E:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320C7895BC612BD83FB480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5585f1c-87b4-3d51-a0c6-7978f175c61e.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396596 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0c:78:95:bc:61:2b:d8:3f:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=2cdb092b-fec4-4f4d-855f-a22338bcee89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:d8:5d:f3:c8:1e:55:fc:2a:db:91:26:cd: 89:c1:ee:e1:9d:44:1d:c5:19:e5:ee:bc:44:be:fa: f9:f0:dc:56:c9:f2:b2:6f:bb:bc:e4:57:32:4f:db: 1c:31:d9:99:13:e7:4c:ec:0a:b1:f9:f0:70:3f:c0: 4a:37:ca:9e:31:c4:07:8a:29:1e:bf:47:6e:8c:d8: 1e:e3:6d:15:54:81:e5:00:cf:a4:87:7a:a9:d8:36: a9:5a:0a:96:c7:ec:a0:80:03:dd:65:97:f2:42:23: 28:0a:ea:0a:67:8a:c9:94:84:35:a1:99:83:90:e4: b3:07:ed:78:41:66:fd:5a:7b:ee:9d:29:64:32:dd: 47:03:06:20:47:7f:30:72:89:91:c9:e4:a6:59:8a: fb:14:87:7f:ad:b2:7b:77:20:51:6b:a0:73:9a:b9: 53:6a:93:6f:39:ae:6c:41:06:d6:54:84:45:9f:5e: 6b:b9:74:2d:15:b5:8f:26:9f:af:fb:cc:46:73:7c: 85:fc:10:d4:c8:16:8a:d1:f3:68:ef:a9:78:ad:a9: 41:1d:66:b0:9a:fb:f7:1c:4f:43:61:81:d6:18:c6: c3:2e:01:44:e5:57:fe:ea:e3:d2:92:31:b2:53:c6: 29:16:c1:3d:6e:db:8b:cc:11:e3:ed:2e:0d:a1:9a: 89:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FB:68:59:08:A5:A9:89:A0:CD:64:36:A6:45:11:67:35:A8:4E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5585f1c-87b4-3d51-a0c6-7978f175c61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:79:22:6d:d8:b4:b5:ca:e9:c8:dc:0e:d8:51:bd:1b:95:08: cf:95:bb:fe:ac:16:d5:01:88:59:be:69:c7:25:12:e2:9e:a4: 74:a1:d9:b6:56:bf:fc:c0:36:b7:e3:89:29:e4:ea:7b:da:35: f4:b7:55:11:42:7d:08:af:4a:0a:81:ea:5d:ef:ab:7d:47:f0: 00:18:38:d1:17:d1:32:d9:80:74:64:10:ed:a6:17:68:80:96: ff:42:36:59:11:7f:53:c1:ff:1a:cb:f2:31:c0:69:69:1a:fc: 0c:7c:83:df:78:f4:df:ad:1d:53:78:d2:fd:a6:23:ba:36:06: ca:4d:73:2c:7e:18:e8:7a:bb:f0:5b:60:c4:3e:10:23:44:fc: d3:ef:41:fd:9e:64:9f:58:1a:cc:24:47:5d:4b:cb:83:60:3c: f5:a4:49:46:25:aa:d6:6f:cf:41:82:3a:0d:d1:eb:91:bd:5c: 28:8e:2f:8e:b2:97:82:1b:b5:42:08:50:6c:d0:06:78:62:a9: f5:59:9f:98:42:fe:b2:0a:74:5a:ea:9c:3b:b5:84:1f:0a:77: 25:26:c3:5f:a9:d9:03:31:d4:19:8f:7d:33:36:12:18:78:a5: 6b:72:a3:67:e1:11:22:e0:df:53:46:30:48:3f:36:b3:9e:91: 6c:f9:62:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMgx4lbxhK9g/tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MmNkYjA5MmItZmVjNC00ZjRkLTg1NWYtYTIyMzM4YmNlZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsHYXfPIHlX8KtuRJs2Jwe7hnUQdxRnl7rxE vvr58NxWyfKyb7u85FcyT9scMdmZE+dM7Aqx+fBwP8BKN8qeMcQHiikev0dujNge 420VVIHlAM+kh3qp2DapWgqWx+yggAPdZZfyQiMoCuoKZ4rJlIQ1oZmDkOSzB+14 QWb9WnvunSlkMt1HAwYgR38wcomRyeSmWYr7FId/rbJ7dyBRa6BzmrlTapNvOa5s QQbWVIRFn15ruXQtFbWPJp+v+8xGc3yF/BDUyBaK0fNo76l4ralBHWawmvv3HE9D YYHWGMbDLgFE5Vf+6uPSkjGyU8YpFsE9btuLzBHj7S4NoZqJEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDn7aFkIpamJoM1kNqZFEWc1qE5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDU1ODVmMWMtODdiNC0z ZDUxLWEwYzYtNzk3OGYxNzVjNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAId5Im3YtLXK6cjcDthRvRuVCM+Vu/6sFtUBiFm+acclEuKepHSh 2bZWv/zANrfjiSnk6nvaNfS3VRFCfQivSgqB6l3vq31H8AAYONEX0TLZgHRkEO2m F2iAlv9CNlkRf1PB/xrL8jHAaWka/Ax8g9949N+tHVN40v2mI7o2BspNcyx+GOh6 u/BbYMQ+ECNE/NPvQf2eZJ9YGswkR11Ly4NgPPWkSUYlqtZvz0GCOg3R65G9XCiO L46yl4IbtUIIUGzQBnhiqfVZn5hC/rIKdFrqnDu1hB8KdyUmw1+p2QMx1BmPfTM2 Ehh4pWtyo2fhESLg31NGMEg/NrOekWz5Yn0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:22 2025 by rpki-client