$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d88e9add-958f-311a-ad5d-1635bfe0a8b0.roa File: d88e9add-958f-311a-ad5d-1635bfe0a8b0.roa (raw, json) Hash identifier: mF6xME/ZU4jdLx1ugeiuexhG62kERfYZ5EW0KXGJOos= Subject key identifier: B5:20:5E:71:40:97:F0:12:B5:4D:65:3D:BC:A1:7F:DF:FE:3D:7B:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320EBFD91B0E5A48ADB880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d88e9add-958f-311a-ad5d-1635bfe0a8b0.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 397204 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0e:bf:d9:1b:0e:5a:48:ad:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=5fc2d407-b09e-4ad4-af03-65f79b611cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:48:58:0b:a3:fe:27:47:ab:9b:cb:1c:18: 9f:71:e5:ac:28:3a:3d:01:65:09:c0:ae:a6:a1:99: 43:28:ed:54:c4:7b:4a:d3:6c:f8:47:af:7f:e2:b0: 5b:ca:40:c2:5d:68:dd:8b:8a:b2:78:69:e7:34:ba: 72:f5:bd:0e:43:f3:af:09:41:eb:a6:79:81:28:58: a9:1a:ed:e5:f1:f9:e0:82:b6:91:de:87:e7:b5:00: 4a:a9:05:44:e8:e7:02:95:9c:b5:e1:54:a2:2e:9a: 95:20:80:7c:28:dd:fc:05:ae:e0:10:83:68:8d:f8: 09:7b:29:27:da:ea:86:9d:50:a0:70:17:e4:3a:91: 0a:ce:9b:27:af:e9:d0:fc:8d:f8:4f:51:51:64:29: bc:ae:b4:f2:cb:17:a8:2f:ff:43:54:aa:cb:6d:6f: 8b:c8:0d:1d:2e:77:ab:9a:a4:54:47:74:9e:bc:23: 01:7a:fb:10:34:5d:02:ea:74:c2:fc:83:ab:34:bc: 80:71:ed:61:1b:b9:22:0f:96:3a:e1:2a:ef:41:e5: ec:aa:fa:3f:85:27:ae:96:4c:c3:b1:23:24:e6:f4: bb:69:ee:93:c6:31:c9:df:d2:55:dd:8b:97:a1:b2: 88:0e:ee:a5:ea:84:98:4f:f8:27:91:06:4b:03:fc: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:20:5E:71:40:97:F0:12:B5:4D:65:3D:BC:A1:7F:DF:FE:3D:7B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d88e9add-958f-311a-ad5d-1635bfe0a8b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a6:d4:04:3b:a9:c5:3b:b4:28:72:99:ed:c0:ea:3c:18:26: 63:df:47:07:97:f3:f6:e8:81:ee:2c:f3:2d:21:a1:0b:90:d2: d3:67:3e:92:20:57:68:ef:2f:a1:a6:43:46:3b:23:49:35:6a: c6:d8:55:c0:11:1a:a7:12:1c:6e:9f:82:c4:c6:6b:d9:c3:0f: c0:b9:22:fb:a3:06:03:89:12:f1:cc:f8:e1:6f:1d:1e:47:6a: 46:e9:d6:80:2d:d2:fe:38:3f:4c:d7:35:5e:9c:d9:60:e0:65: e0:8a:94:a7:44:2f:7d:97:2e:53:b6:00:43:d4:9c:9d:cd:53: 63:8c:8b:91:b7:cf:34:f8:18:64:d1:d2:99:9b:11:f4:46:a7: 4d:db:c1:5f:08:a2:91:69:55:dc:2d:55:56:24:d7:d2:20:0d: cc:61:40:09:d6:23:5a:85:95:b3:7f:4d:ec:a2:86:0d:49:6c: 7d:f0:05:3a:d7:5f:8e:21:63:52:0f:37:e3:ce:b2:52:a0:2c: c8:8c:6b:ac:b0:e4:d7:16:86:f5:de:ff:06:8a:83:2c:b4:ae: 46:84:91:9b:61:a7:49:2c:e7:17:0f:91:bc:ed:05:fe:06:87: b1:20:88:0e:a7:5d:0a:b4:bc:7f:0e:23:31:ba:89:f6:8b:c2: f8:7c:1f:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg6/2RsOWkituIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NWZjMmQ0MDctYjA5ZS00YWQ0LWFmMDMtNjVmNzliNjExY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTBIWAuj/idHq5vLHBifceWsKDo9AWUJwK6m oZlDKO1UxHtK02z4R69/4rBbykDCXWjdi4qyeGnnNLpy9b0OQ/OvCUHrpnmBKFip Gu3l8fnggraR3ofntQBKqQVE6OcClZy14VSiLpqVIIB8KN38Ba7gEINojfgJeykn 2uqGnVCgcBfkOpEKzpsnr+nQ/I34T1FRZCm8rrTyyxeoL/9DVKrLbW+LyA0dLner mqRUR3SevCMBevsQNF0C6nTC/IOrNLyAce1hG7kiD5Y64SrvQeXsqvo/hSeulkzD sSMk5vS7ae6TxjHJ39JV3YuXobKIDu6l6oSYT/gnkQZLA/wmMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLUgXnFAl/AStU1lPbyhf9/+PXuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDg4ZTlhZGQtOTU4Zi0z MTFhLWFkNWQtMTYzNWJmZTBhOGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHum1AQ7qcU7tChyme3A6jwYJmPfRweX8/boge4s8y0hoQuQ0tNn PpIgV2jvL6GmQ0Y7I0k1asbYVcARGqcSHG6fgsTGa9nDD8C5IvujBgOJEvHM+OFv HR5Hakbp1oAt0v44P0zXNV6c2WDgZeCKlKdEL32XLlO2AEPUnJ3NU2OMi5G3zzT4 GGTR0pmbEfRGp03bwV8IopFpVdwtVVYk19IgDcxhQAnWI1qFlbN/Teyihg1JbH3w BTrXX44hY1IPN+POslKgLMiMa6yw5NcWhvXe/waKgyy0rkaEkZthp0ks5xcPkbzt Bf4Gh7EgiA6nXQq0vH8OIzG6ifaLwvh8H0w= -----END CERTIFICATE-----Generated at Mon Oct 20 03:12:07 2025 by rpki-client