$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa File: ddc65554-e3b0-3017-b4a9-4be5acf37481.roa (raw, json) Hash identifier: M8mYEdKl3s7KUIMc/9MHlr63RU0VB+KDXrBNyi5YTMo= Subject key identifier: CE:D9:60:65:E9:45:51:2B:C4:63:17:40:07:04:B7:59:2F:B3:72:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC70435A5F3F6560C8BCC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 396545 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:70:43:5a:5f:3f:65:60:c8:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=b8ff1981-138b-447a-b51a-db3c2b9549be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:09:50:d0:2a:be:46:1b:2d:77:6f:3d:6d: c5:d8:ed:82:0c:6c:0b:cc:74:70:7c:e9:8b:c3:a9: 47:5d:45:0d:d5:54:e3:80:b1:b5:d8:eb:8b:70:c4: bd:fa:9a:6d:9c:5a:a9:2d:4f:09:8b:a9:f8:ec:02: 16:8e:ba:ff:f7:b7:bb:2b:c0:51:bc:54:d8:b6:b3: a9:23:73:c1:71:81:d2:91:68:47:6a:dd:b7:41:f9: 6e:cc:3d:7d:6c:bf:f9:18:1e:ef:53:1f:4b:96:cd: 1c:7a:ff:7b:46:45:a5:c3:16:88:33:37:d1:38:a7: 29:cd:15:e2:d3:f7:b2:cc:16:4f:84:31:00:22:5a: 15:9c:46:d3:14:90:20:9e:8d:dd:42:f8:2d:79:3a: b0:aa:aa:38:39:57:d9:ce:71:16:91:d2:ef:74:48: ff:99:42:3b:aa:05:23:7c:c5:30:e8:65:7a:c2:b2: 87:f1:8c:f2:ff:56:33:ff:f1:50:e6:fa:04:55:e2: 1c:85:36:8e:b5:0b:1f:df:6c:f8:b2:eb:80:f8:5e: 28:87:cb:45:24:5e:c4:11:3a:87:4a:56:91:fe:ad: a8:15:46:30:35:ec:df:9f:5e:cd:7f:17:9d:62:24: e2:9b:05:28:ae:fd:4c:6e:48:3b:d8:42:6c:8d:d7: 98:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D9:60:65:E9:45:51:2B:C4:63:17:40:07:04:B7:59:2F:B3:72:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc65554-e3b0-3017-b4a9-4be5acf37481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3e:a6:6e:51:21:f0:25:b2:75:49:21:c5:d5:92:74:4b:89: b3:2c:cb:65:b1:4a:2c:1a:a3:68:8f:75:e0:28:d5:8f:59:3b: e9:c5:14:70:5b:e2:d5:0e:d9:af:87:f4:2d:1d:65:4e:17:f9: c6:8d:4e:58:49:85:36:3a:7a:b9:52:65:b4:3f:19:35:91:3f: e9:a9:90:4d:8c:19:86:c5:04:db:33:c7:31:5c:2b:23:c7:5d: 64:f7:10:3d:e8:60:ce:5a:97:97:d2:c8:4d:4c:36:c3:3d:7c: d2:24:80:2f:c6:86:6c:56:73:3a:b3:bc:43:5a:cc:3a:c0:2a: ab:c9:99:b0:a6:d6:b9:38:62:7b:67:56:bb:06:29:9f:8a:6e: 07:3f:76:cb:84:df:6d:29:74:44:aa:ca:9f:fa:ad:be:ee:24: 84:49:f4:f5:3e:70:01:71:92:2b:0f:98:40:eb:de:8a:0c:6a: d9:84:83:3a:f9:92:a5:1b:7f:0a:c2:50:01:6c:cb:82:69:ca: 44:59:9e:1c:19:20:83:df:fa:07:21:78:c8:e2:c5:9a:87:b7: 3a:ea:30:93:f1:25:9a:7e:a5:a3:09:e1:4c:87:2e:93:61:3c: fc:6b:cf:86:58:43:bb:73:3e:4c:3c:27:d3:b4:92:71:8e:06: 2c:86:fe:28 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrHBDWl8/ZWDIvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YjhmZjE5ODEtMTM4Yi00NDdhLWI1MWEtZGIzYzJiOTU0OWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqusJUNAqvkYbLXdvPW3F2O2CDGwLzHRwfOmL w6lHXUUN1VTjgLG12OuLcMS9+pptnFqpLU8Ji6n47AIWjrr/97e7K8BRvFTYtrOp I3PBcYHSkWhHat23QfluzD19bL/5GB7vUx9Lls0cev97RkWlwxaIMzfROKcpzRXi 0/eyzBZPhDEAIloVnEbTFJAgno3dQvgteTqwqqo4OVfZznEWkdLvdEj/mUI7qgUj fMUw6GV6wrKH8Yzy/1Yz//FQ5voEVeIchTaOtQsf32z4suuA+F4oh8tFJF7EETqH SlaR/q2oFUYwNezfn17NfxedYiTimwUorv1Mbkg72EJsjdeYtwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM7ZYGXpRVErxGMXQAcEt1kvs3IqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRjNjU1NTQtZTNiMC0z MDE3LWI0YTktNGJlNWFjZjM3NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBaPqZuUSHwJbJ1SSHF1ZJ0S4mzLMtlsUosGqNo j3XgKNWPWTvpxRRwW+LVDtmvh/QtHWVOF/nGjU5YSYU2Onq5UmW0Pxk1kT/pqZBN jBmGxQTbM8cxXCsjx11k9xA96GDOWpeX0shNTDbDPXzSJIAvxoZsVnM6s7xDWsw6 wCqryZmwpta5OGJ7Z1a7Bimfim4HP3bLhN9tKXREqsqf+q2+7iSESfT1PnABcZIr D5hA696KDGrZhIM6+ZKlG38KwlABbMuCacpEWZ4cGSCD3/oHIXjI4sWah7c66jCT 8SWafqWjCeFMhy6TYTz8a8+GWEO7cz5MPCfTtJJxjgYshv4o -----END CERTIFICATE-----Generated at Mon Oct 20 03:40:20 2025 by rpki-client