$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ac7433-a50a-3311-84ff-aaecad515502.roa File: f6ac7433-a50a-3311-84ff-aaecad515502.roa (raw, json) Hash identifier: v68HV7tZ2uCcPIFQf2RIQcdZdRLD9wAo+to4nwSEhbA= Subject key identifier: AC:94:3E:AA:71:92:34:F5:12:9B:6A:12:4E:43:B7:87:FE:79:6D:4A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F37538FF68E7D5E9EB5C680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ac7433-a50a-3311-84ff-aaecad515502.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 397204 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:53:8f:f6:8e:7d:5e:9e:b5:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=65ef7a04-ae4d-4b81-ade4-1c8912807692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:75:9d:8a:f4:01:52:d3:9b:bc:0e:93:7b: 42:88:bc:24:ea:0c:4c:1c:54:2a:00:38:ff:a6:a5: 6e:18:b5:9c:0f:b9:9d:bd:6e:17:4d:a0:9a:2b:ae: b0:c2:9d:e9:89:42:dc:c0:ad:94:b8:ee:73:2a:41: 90:07:36:51:5d:22:5b:46:90:77:ea:59:8a:0f:99: 48:50:8e:58:7c:47:8d:a3:28:10:7e:4d:11:d9:7a: 6e:8a:72:0b:03:a3:5a:8e:1e:5c:db:84:7f:e3:ce: 45:f3:b3:ff:32:05:04:c7:b0:09:86:78:d3:c6:03: 51:7d:10:23:d9:8b:ab:55:aa:0f:aa:3b:49:44:6a: e2:0c:2d:c8:79:48:69:b4:8b:84:ef:65:f8:b0:32: cf:0a:73:24:6f:18:1f:7f:21:e3:f2:a9:04:24:89: 39:7a:5c:3c:c6:6b:a3:56:a1:84:32:3e:b0:ba:fe: f2:99:a2:05:b1:2f:ba:cf:d4:7c:59:28:ea:53:3d: 04:eb:2a:df:cf:7f:c9:56:0d:20:02:54:e8:21:a4: e2:78:38:bc:c2:31:5c:07:e9:f3:b2:08:ee:6a:b2: ce:89:48:2b:ff:26:bf:99:45:3f:0d:f3:db:b7:5b: e9:b3:6d:2b:70:5a:31:31:1e:15:f6:51:22:36:db: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:94:3E:AA:71:92:34:F5:12:9B:6A:12:4E:43:B7:87:FE:79:6D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ac7433-a50a-3311-84ff-aaecad515502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:61:1f:45:02:c8:07:d1:bd:8f:36:f1:3c:0e:93:78:26:f5: 53:37:d0:52:dd:57:e8:94:a2:09:79:f2:af:93:d5:5f:59:4a: b8:de:c7:0a:e9:2b:41:b4:94:b2:c2:57:e3:ce:39:83:a3:61: e3:86:8a:e1:c6:83:f7:55:67:f4:db:a8:87:31:a0:35:4d:b9: 07:29:2f:cf:d4:61:e8:3a:9d:3e:99:c5:b2:7c:be:b1:7e:22: bd:58:8c:dd:e8:1a:07:65:25:c1:ec:db:a6:0e:86:67:91:86: a3:ac:5b:fb:28:93:5c:39:dc:74:68:a6:1f:41:f2:08:4e:36: 30:7d:67:1e:13:45:2e:59:64:66:eb:60:44:69:c3:97:22:bf: c1:58:34:63:80:74:21:3b:e3:37:fa:38:97:34:c9:92:da:2a: 78:bc:3a:7e:c3:12:aa:e1:52:9b:b4:9e:dc:7d:47:5e:87:ff: 3c:18:54:3f:e5:e6:71:cc:bf:d0:06:82:98:f0:d1:ae:d4:51: d6:ba:32:50:a8:45:b1:64:48:ed:18:03:04:3b:0b:31:19:15: d8:72:69:fe:44:40:7f:4c:65:c3:71:1f:ab:e4:20:71:be:66: 61:64:ad:91:ea:c6:f0:02:88:a0:8e:48:2e:67:12:3c:f2:f0: 17:5a:a1:40 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1OP9o59Xp61xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NjVlZjdhMDQtYWU0ZC00YjgxLWFkZTQtMWM4OTEyODA3NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojd1nYr0AVLTm7wOk3tCiLwk6gxMHFQqADj/ pqVuGLWcD7mdvW4XTaCaK66wwp3piULcwK2UuO5zKkGQBzZRXSJbRpB36lmKD5lI UI5YfEeNoygQfk0R2XpuinILA6Najh5c24R/485F87P/MgUEx7AJhnjTxgNRfRAj 2YurVaoPqjtJRGriDC3IeUhptIuE72X4sDLPCnMkbxgffyHj8qkEJIk5elw8xmuj VqGEMj6wuv7ymaIFsS+6z9R8WSjqUz0E6yrfz3/JVg0gAlToIaTieDi8wjFcB+nz sgjuarLOiUgr/ya/mUU/DfPbt1vps20rcFoxMR4V9lEiNts6wwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKyUPqpxkjT1EptqEk5Dt4f+eW1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjZhYzc0MzMtYTUwYS0z MzExLTg0ZmYtYWFlY2FkNTE1NTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCbYR9FAsgH0b2PNvE8DpN4JvVTN9BS3VfolKIJ efKvk9VfWUq43scK6StBtJSywlfjzjmDo2HjhorhxoP3VWf026iHMaA1TbkHKS/P 1GHoOp0+mcWyfL6xfiK9WIzd6BoHZSXB7NumDoZnkYajrFv7KJNcOdx0aKYfQfII TjYwfWceE0UuWWRm62BEacOXIr/BWDRjgHQhO+M3+jiXNMmS2ip4vDp+wxKq4VKb tJ7cfUdeh/88GFQ/5eZxzL/QBoKY8NGu1FHWujJQqEWxZEjtGAMEOwsxGRXYcmn+ REB/TGXDcR+r5CBxvmZhZK2R6sbwAoigjkguZxI88vAXWqFA -----END CERTIFICATE-----Generated at Mon Oct 20 03:50:49 2025 by rpki-client