$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2d717b-3f29-398d-a922-b355003a77ff.roa File: ef2d717b-3f29-398d-a922-b355003a77ff.roa (raw, json) Hash identifier: z+NIRytuPPXWc5c+1hc7rv16wl6Dpto+atjwzYjJg3g= Subject key identifier: 10:2C:F3:97:01:4E:5F:22:36:7E:79:30:3B:C4:AE:FA:C6:59:D3:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F3757C2672DA352EB574500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2d717b-3f29-398d-a922-b355003a77ff.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 27544 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:57:c2:67:2d:a3:52:eb:57:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3c97ee8c-9d6e-474c-941f-6bbbc9f61bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:5c:47:7d:57:b0:56:66:49:52:94:a1:66: 91:cb:ec:90:7b:c2:66:c6:6a:d2:88:35:8e:91:17: f2:a5:0e:dc:37:9e:35:6a:f5:91:0c:07:98:f4:fe: 3b:dd:0f:aa:96:f4:3e:cf:70:d4:73:27:99:13:1c: 8f:67:06:3f:f0:7f:7c:de:e5:f2:44:bc:a8:7f:c6: a7:5d:2c:52:1f:19:50:37:99:fa:30:90:70:ee:dd: 3f:11:c3:be:c2:e3:18:4d:72:83:00:fe:c8:ff:e9: 5f:ec:bb:4c:fd:52:25:f4:44:e6:aa:ac:45:8f:b2: b9:a9:72:d5:a7:61:d5:5d:f0:d8:75:b9:4d:f8:21: cd:f9:8e:74:96:3f:54:09:58:9e:3b:dd:fe:a2:0f: c9:21:92:38:a9:43:f3:fa:42:8a:c8:2c:ac:42:25: bd:62:cd:aa:f0:e7:28:d8:8f:52:2d:dd:aa:d6:d8: 90:7b:c2:ca:c3:52:1c:dc:d6:ae:37:58:9b:82:7a: ad:5e:77:cc:1c:7a:8c:c2:da:71:18:41:bd:02:1b: 10:3f:0b:a1:d8:86:a7:87:69:64:ec:ea:30:03:ee: bc:5b:02:cc:f3:54:f5:f0:52:17:1a:a8:52:62:63: 78:28:ce:29:95:54:00:ab:81:b8:b7:3b:d7:fa:bb: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:F3:97:01:4E:5F:22:36:7E:79:30:3B:C4:AE:FA:C6:59:D3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2d717b-3f29-398d-a922-b355003a77ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6f:07:dd:59:29:5e:ce:ec:d1:13:c4:dc:fa:59:55:1a:53: 60:00:fa:ae:7a:9c:aa:23:e2:e5:cb:88:eb:ca:c9:b7:03:cd: 8c:40:e0:5b:43:79:80:33:67:e8:01:37:05:9b:f8:f3:e5:74: 44:d1:b0:71:fc:d3:47:ff:b6:10:25:08:b3:cf:42:0d:d4:f4: 4d:91:66:4b:64:70:96:53:76:a4:87:4b:b5:27:14:7e:5a:40: 30:94:78:7c:04:4d:b9:7d:be:46:78:36:a0:54:8a:99:52:1b: 48:ad:66:d9:21:b7:13:71:b8:e3:52:44:c3:9a:37:2d:89:f1: af:9e:b1:56:0a:9e:e3:f2:99:3f:a6:74:6d:3c:c5:d9:15:8f: 48:c2:53:80:26:4b:84:5a:35:c4:ec:43:69:67:bc:d2:29:9d: 70:3d:7c:07:50:9a:ae:8e:ce:08:5f:e2:ae:95:eb:9e:b7:4e: 0f:7e:1b:ec:df:5c:65:29:10:c3:65:c2:c5:ac:ae:ae:b2:ec: 1e:4c:e7:2b:84:bf:e3:25:f7:28:2e:ec:cc:e0:eb:38:bb:df: 39:4f:48:73:dd:d3:e5:cf:6e:6f:54:d1:4b:72:b7:c2:14:cc: c3:49:6c:38:ad:db:3c:05:60:cf:72:6a:35:a9:f0:f1:6a:49: e2:df:a0:4e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1fCZy2jUutXRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2M5N2VlOGMtOWQ2ZS00NzRjLTk0MWYtNmJiYmM5ZjYxYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqhcR31XsFZmSVKUoWaRy+yQe8JmxmrSiDWO kRfypQ7cN541avWRDAeY9P473Q+qlvQ+z3DUcyeZExyPZwY/8H983uXyRLyof8an XSxSHxlQN5n6MJBw7t0/EcO+wuMYTXKDAP7I/+lf7LtM/VIl9ETmqqxFj7K5qXLV p2HVXfDYdblN+CHN+Y50lj9UCVieO93+og/JIZI4qUPz+kKKyCysQiW9Ys2q8Oco 2I9SLd2q1tiQe8LKw1Ic3NauN1ibgnqtXnfMHHqMwtpxGEG9AhsQPwuh2Ianh2lk 7OowA+68WwLM81T18FIXGqhSYmN4KM4plVQAq4G4tzvX+rsL3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBAs85cBTl8iNn55MDvErvrGWdMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWYyZDcxN2ItM2YyOS0z OThkLWE5MjItYjM1NTAwM2E3N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAUbwfdWSlezuzRE8Tc+llVGlNgAPquepyqI+Ll y4jrysm3A82MQOBbQ3mAM2foATcFm/jz5XRE0bBx/NNH/7YQJQizz0IN1PRNkWZL ZHCWU3akh0u1JxR+WkAwlHh8BE25fb5GeDagVIqZUhtIrWbZIbcTcbjjUkTDmjct ifGvnrFWCp7j8pk/pnRtPMXZFY9IwlOAJkuEWjXE7ENpZ7zSKZ1wPXwHUJqujs4I X+Kuleuet04Pfhvs31xlKRDDZcLFrK6usuweTOcrhL/jJfcoLuzM4Os4u985T0hz 3dPlz25vVNFLcrfCFMzDSWw4rds8BWDPcmo1qfDxakni36BO -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:43 2025 by rpki-client