$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1bac85-1e42-3899-abc0-b75ceb2dafdf.roa File: fd1bac85-1e42-3899-abc0-b75ceb2dafdf.roa (raw, json) Hash identifier: kAvr7CWDksq1dsSRdpJ/s7hwEtW1aoYi50XYL04tHtg= Subject key identifier: B3:43:04:56:A7:C4:7D:C4:37:2D:A3:B2:6D:3B:6D:3D:5F:45:43:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66321354FE9600B41CC70D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1bac85-1e42-3899-abc0-b75ceb2dafdf.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 397200 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:13:54:fe:96:00:b4:1c:c7:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=a67e1944-5483-4ee6-a1a0-ef2e4ffd1d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:0e:14:be:1c:7c:d2:ca:19:eb:a1:f6:23: 83:9e:4e:35:c3:fa:f0:a9:46:dd:b5:15:d5:ab:f6: 02:05:de:34:62:e6:b7:6f:7e:5d:ad:ae:9f:3e:4f: f3:22:84:8e:a3:a7:30:79:1f:8e:90:6e:e2:fe:8b: 0d:03:12:df:c6:6f:24:b9:8c:00:b2:d1:34:c5:d1: d1:dc:7f:6c:f2:b5:b1:48:e8:80:c2:b9:8b:e3:ee: b3:b7:99:a8:1d:28:ff:fb:9b:12:c4:2d:34:b5:e6: b9:8b:3e:0e:c5:02:3a:23:7f:e9:aa:ba:dd:56:88: be:9b:60:44:df:22:a2:01:a5:64:74:41:c6:da:4c: f5:47:57:c2:49:1f:c9:02:cc:35:d2:02:20:52:15: 5d:35:f4:8b:3b:9e:7e:a1:79:e0:bd:3f:bd:bd:ef: a5:2e:4e:84:a5:d7:7d:46:5f:f1:7d:39:3e:b9:8c: b4:dc:1b:ea:87:c1:21:a8:e6:11:19:59:a5:25:a2: e3:59:47:76:41:ff:2f:69:b2:19:d0:21:1f:a4:b6: 0c:b9:2d:56:14:dc:eb:b8:20:c9:be:56:85:99:40: 1f:0b:29:79:bb:de:e4:c4:ba:51:b2:ba:29:02:39: f6:ff:4c:e9:6b:a6:88:ec:41:43:9e:ae:2f:d1:f0: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:43:04:56:A7:C4:7D:C4:37:2D:A3:B2:6D:3B:6D:3D:5F:45:43:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1bac85-1e42-3899-abc0-b75ceb2dafdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3a:ec:6f:04:0d:8a:f8:d6:97:08:40:c5:b5:fa:86:fd:dd: b4:a0:7f:41:ee:55:aa:71:5b:96:99:50:c3:e5:36:cb:ae:44: 69:35:37:b9:54:5b:00:9a:2e:c1:8c:df:36:de:d0:9d:e5:cb: fa:19:02:95:d6:9d:2b:12:c9:a4:a1:d2:f8:4f:ef:52:c6:9a: 13:d3:bd:ca:11:67:c3:1d:de:f7:cf:cb:64:76:5b:0c:a3:89: 0a:b6:62:e0:13:ff:a1:dd:a7:e1:9e:a3:49:7c:7b:a6:36:0f: ca:5c:69:d7:2d:af:96:0b:ca:5b:cd:dd:35:35:6a:0f:ce:56: 12:4b:97:1c:25:77:e4:e8:47:e6:1b:16:15:65:a3:ad:c4:c8: e7:45:80:16:ff:83:84:e7:30:a8:f0:40:a9:0f:65:58:ad:26: 7e:66:f0:1a:61:2b:73:55:ae:1a:d3:df:94:bd:bf:b3:1f:f1: 32:6b:ce:a7:ed:78:d8:9b:cf:33:0d:b0:c2:81:bd:c2:64:3d: ca:62:e1:18:e6:ee:43:3c:79:bd:ce:d6:a8:22:96:68:f7:e1: a1:43:58:a4:94:84:fd:89:de:4b:ad:1c:c5:37:d6:f2:ef:8e: c1:b6:6a:bd:80:30:e7:ff:d4:47:71:e9:d2:2b:73:85:ec:32: e0:ba:b5:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhNU/pYAtBzHDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YTY3ZTE5NDQtNTQ4My00ZWU2LWExYTAtZWYyZTRmZmQxZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuroOFL4cfNLKGeuh9iODnk41w/rwqUbdtRXV q/YCBd40Yua3b35dra6fPk/zIoSOo6cweR+OkG7i/osNAxLfxm8kuYwAstE0xdHR 3H9s8rWxSOiAwrmL4+6zt5moHSj/+5sSxC00tea5iz4OxQI6I3/pqrrdVoi+m2BE 3yKiAaVkdEHG2kz1R1fCSR/JAsw10gIgUhVdNfSLO55+oXngvT+9ve+lLk6Epdd9 Rl/xfTk+uYy03Bvqh8EhqOYRGVmlJaLjWUd2Qf8vabIZ0CEfpLYMuS1WFNzruCDJ vlaFmUAfCyl5u97kxLpRsropAjn2/0zpa6aI7EFDnq4v0fDrewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLNDBFanxH3ENy2jsm07bT1fRUO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQxYmFjODUtMWU0Mi0z ODk5LWFiYzAtYjc1Y2ViMmRhZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABA67G8EDYr41pcIQMW1+ob93bSgf0HuVapxW5aZUMPlNsuuRGk1 N7lUWwCaLsGM3zbe0J3ly/oZApXWnSsSyaSh0vhP71LGmhPTvcoRZ8Md3vfPy2R2 WwyjiQq2YuAT/6Hdp+Geo0l8e6Y2D8pcadctr5YLylvN3TU1ag/OVhJLlxwld+To R+YbFhVlo63EyOdFgBb/g4TnMKjwQKkPZVitJn5m8BphK3NVrhrT35S9v7Mf8TJr zqfteNibzzMNsMKBvcJkPcpi4Rjm7kM8eb3O1qgilmj34aFDWKSUhP2J3kutHMU3 1vLvjsG2ar2AMOf/1Edx6dIrc4XsMuC6tU4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:55 2025 by rpki-client