$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f66daaf9-1f44-3162-b257-fd7c7a07b6db.roa File: f66daaf9-1f44-3162-b257-fd7c7a07b6db.roa (raw, json) Hash identifier: Hg1oMwmfH4vPWTrOTrZ2tDlzh/7hhtcEa4dci0ZL0Jg= Subject key identifier: 88:2B:55:31:D3:FE:7F:78:4A:86:84:2C:14:05:C8:9E:64:4F:17:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320DDD3F706AF3034FC4D8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f66daaf9-1f44-3162-b257-fd7c7a07b6db.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396574 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0d:dd:3f:70:6a:f3:03:4f:c4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=15c84f2f-df7a-4dd5-9da0-14865c2209f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:f0:20:6e:61:1c:cf:57:53:c4:b3:f0:92: 55:6d:e2:08:68:8a:38:3f:ed:b1:40:da:21:68:31: 31:ea:47:93:22:df:25:4e:85:f7:1c:e7:16:15:e2: bd:c3:6b:94:5b:03:a5:68:72:2e:7b:79:fb:df:52: 47:a0:77:c4:7d:42:4b:d3:af:ae:9a:f5:7b:02:72: a6:66:b3:f0:75:d4:61:1b:8f:6f:90:65:57:53:d6: ea:c2:ad:f8:31:72:b2:78:3b:1d:71:fb:12:17:0f: b6:fe:6b:a5:55:94:cc:55:9f:d5:67:22:54:9e:06: e5:55:82:1d:1a:da:dc:26:cc:b8:ed:3c:53:41:fa: c8:f5:dd:a1:cf:39:e9:7a:d4:b5:9c:99:ef:fa:38: e4:49:9f:46:e0:dc:29:9a:cc:6c:fd:27:5d:55:cb: 50:26:33:0d:55:0b:96:93:75:cf:f4:1e:c7:5c:fc: 0b:35:67:af:88:b7:f6:fe:99:de:91:5a:8e:76:e4: a5:b7:82:c9:9a:ee:24:d7:b0:0f:b6:e1:51:48:fd: da:f6:4b:ab:86:2e:f7:84:b9:aa:6d:2f:c6:7e:43: 97:8e:96:0e:bc:f6:df:10:5d:cb:d6:ec:d6:b7:e5: 01:86:df:2e:25:ff:4d:57:0b:a4:ce:fa:a8:e0:a3: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2B:55:31:D3:FE:7F:78:4A:86:84:2C:14:05:C8:9E:64:4F:17:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f66daaf9-1f44-3162-b257-fd7c7a07b6db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:08:56:87:42:02:9d:d5:fa:83:d0:0f:24:50:0b:de:bf:d4: bd:93:0d:4a:bc:90:a3:4b:96:34:af:0e:30:24:c2:99:48:da: da:9e:8e:6a:bb:30:ed:f6:48:0d:a6:c2:95:76:2a:fa:af:b5: af:fc:53:d9:45:74:db:f9:3d:b2:49:d2:8f:a1:32:fa:44:0d: 06:41:3b:af:0b:b3:ea:fd:0b:5f:e7:c5:e9:12:3e:7b:6d:ce: 3d:05:49:eb:8f:94:3d:69:fa:a3:2a:98:74:97:fa:d2:5f:6d: 8d:20:f9:fe:df:b7:8e:df:b2:e0:f0:04:ce:47:f3:da:65:ab: 17:ab:c9:85:d2:82:17:53:68:3c:d2:01:67:fe:b5:a0:24:81: c8:cc:be:5c:d7:37:0d:20:d0:77:45:39:d5:40:45:1c:8b:e2: c5:70:24:bc:65:89:d0:a8:76:7e:6d:dd:eb:ed:0f:c8:f8:d2: b7:1c:98:7d:04:ff:4c:55:cb:2c:d6:f1:12:3c:23:1b:58:86: 60:ae:c4:59:be:9d:e4:44:ba:95:af:db:af:9f:e4:dc:78:85: 16:a5:fb:64:da:8f:22:5a:44:a0:9d:86:2f:62:47:59:3a:10: 0f:59:94:8a:13:ca:90:01:12:f9:db:f6:4b:77:d0:bc:42:87: 53:68:2e:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg3dP3Bq8wNPxNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MTVjODRmMmYtZGY3YS00ZGQ1LTlkYTAtMTQ4NjVjMjIwOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqbwIG5hHM9XU8Sz8JJVbeIIaIo4P+2xQNoh aDEx6keTIt8lToX3HOcWFeK9w2uUWwOlaHIue3n731JHoHfEfUJL06+umvV7AnKm ZrPwddRhG49vkGVXU9bqwq34MXKyeDsdcfsSFw+2/mulVZTMVZ/VZyJUngblVYId GtrcJsy47TxTQfrI9d2hzznpetS1nJnv+jjkSZ9G4Nwpmsxs/SddVctQJjMNVQuW k3XP9B7HXPwLNWeviLf2/pnekVqOduSlt4LJmu4k17APtuFRSP3a9kurhi73hLmq bS/GfkOXjpYOvPbfEF3L1uzWt+UBht8uJf9NVwukzvqo4KOE2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgrVTHT/n94SoaELBQFyJ5kTxe6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjY2ZGFhZjktMWY0NC0z MTYyLWIyNTctZmQ3YzdhMDdiNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkIVodCAp3V+oPQDyRQC96/1L2TDUq8kKNLljSvDjAkwplI2tqe jmq7MO32SA2mwpV2Kvqvta/8U9lFdNv5PbJJ0o+hMvpEDQZBO68Ls+r9C1/nxekS Pnttzj0FSeuPlD1p+qMqmHSX+tJfbY0g+f7ft47fsuDwBM5H89plqxeryYXSghdT aDzSAWf+taAkgcjMvlzXNw0g0HdFOdVARRyL4sVwJLxlidCodn5t3evtD8j40rcc mH0E/0xVyyzW8RI8IxtYhmCuxFm+neREupWv26+f5Nx4hRal+2TajyJaRKCdhi9i R1k6EA9ZlIoTypABEvnb9kt30LxCh1NoLpw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:45 2025 by rpki-client