$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffac7a4c-c8a8-32c2-ab3a-145f30cbac67.roa File: ffac7a4c-c8a8-32c2-ab3a-145f30cbac67.roa (raw, json) Hash identifier: jaAgkC0O3ud8dpDZ7UN6fpqTGpztMpAVqNxvJkEgQMI= Subject key identifier: 05:9F:33:51:92:9A:1B:56:FE:8C:E8:A6:0F:F0:01:BF:AD:08:D5:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66321452AEB09F6C7F620CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffac7a4c-c8a8-32c2-ab3a-145f30cbac67.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396544 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:14:52:ae:b0:9f:6c:7f:62:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=dc8f7d66-c345-4fe2-8c5b-bc6e4a66c78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0c:61:5c:40:c2:17:3d:e2:d7:cd:0b:92:37: b7:e4:26:86:68:f1:c1:07:4e:3e:19:19:77:46:71: 3d:ad:3f:45:d4:47:a2:7e:74:52:31:d7:dc:84:8a: f4:20:52:42:ee:d6:5b:3c:5c:a8:0b:bb:6e:f7:92: 8c:f7:80:f9:f1:ab:0a:4b:f1:26:97:83:52:e1:86: 79:2d:e0:2d:4c:bd:c3:06:ec:b1:75:27:27:d7:fc: 14:44:eb:3f:a5:1e:2c:bc:d8:00:9c:11:cc:4b:a4: 01:b3:fa:90:37:a0:75:06:ee:96:63:7a:1e:7d:42: 41:14:8a:c6:b3:22:40:2f:18:43:7c:3f:cc:7c:40: 9d:97:cb:32:3c:b9:7e:4c:3b:62:24:06:db:70:94: 42:2a:24:a7:09:7f:8e:36:12:21:1a:d3:20:12:f7: 77:4c:af:ce:c8:37:1b:4d:f7:21:2b:31:e6:96:90: 16:ae:f1:b7:2d:2a:76:e3:df:ba:23:e6:d8:43:7f: ef:ce:37:c7:bf:dc:84:fc:9a:11:4a:b1:87:6d:33: 64:98:b4:2f:d7:cc:27:90:f4:67:7e:cf:fa:6b:84: 60:65:81:7e:24:3c:af:6e:08:56:51:d4:e4:f6:a9: 3b:85:b8:06:ea:58:ab:48:30:df:2e:94:5b:bc:77: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9F:33:51:92:9A:1B:56:FE:8C:E8:A6:0F:F0:01:BF:AD:08:D5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffac7a4c-c8a8-32c2-ab3a-145f30cbac67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bb:8e:f7:2e:6a:a3:d7:e8:b7:e8:21:35:2b:25:dd:20:bd: eb:59:ca:ff:26:02:84:05:72:1c:64:2c:34:a3:9d:f1:1f:3c: 2f:05:c9:09:a8:ee:23:0d:ff:35:a3:53:0a:47:66:22:42:91: 37:97:6a:2d:38:81:2d:5d:59:97:5d:c1:7c:a3:d6:f0:fe:b1: 7f:1a:6d:c5:68:5c:1b:b6:61:5c:6b:77:d0:75:ee:1d:5b:4f: 3b:a3:33:93:b1:01:ef:ce:56:28:ec:5c:b4:85:55:07:1e:47: 6a:40:70:7a:65:c7:16:3d:48:8f:b5:97:94:92:b1:7a:9c:d8: 17:dc:35:7b:7b:9f:39:74:ad:81:d4:05:fe:a8:8f:6d:dc:00: 53:00:c8:e8:6f:18:0c:0f:43:49:95:b8:56:6b:d0:59:b3:2f: 8d:3d:d1:1b:c6:9c:e2:c6:eb:9f:7f:36:d6:3e:52:a0:23:c7: 63:81:50:d2:06:ab:e2:2c:95:c6:ab:84:2a:29:e1:6b:f8:7a: 3b:fa:af:7a:fa:ce:5f:df:5e:01:99:a2:2e:9d:af:59:26:c9: cb:ac:44:d1:90:43:85:d0:f3:7c:44:96:a8:73:31:76:45:12: 0a:ae:a9:05:04:98:c4:fb:f9:da:89:61:05:fb:bf:8d:12:06: 66:86:a5:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhRSrrCfbH9iDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZGM4ZjdkNjYtYzM0NS00ZmUyLThjNWItYmM2ZTRhNjZjNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAxhXEDCFz3i180Lkje35CaGaPHBB04+GRl3 RnE9rT9F1EeifnRSMdfchIr0IFJC7tZbPFyoC7tu95KM94D58asKS/Eml4NS4YZ5 LeAtTL3DBuyxdScn1/wUROs/pR4svNgAnBHMS6QBs/qQN6B1Bu6WY3oefUJBFIrG syJALxhDfD/MfECdl8syPLl+TDtiJAbbcJRCKiSnCX+ONhIhGtMgEvd3TK/OyDcb TfchKzHmlpAWrvG3LSp249+6I+bYQ3/vzjfHv9yE/JoRSrGHbTNkmLQv18wnkPRn fs/6a4RgZYF+JDyvbghWUdTk9qk7hbgG6lirSDDfLpRbvHdhwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAWfM1GSmhtW/ozopg/wAb+tCNXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZhYzdhNGMtYzhhOC0z MmMyLWFiM2EtMTQ1ZjMwY2JhYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJC7jvcuaqPX6LfoITUrJd0gvetZyv8mAoQFchxkLDSjnfEfPC8F yQmo7iMN/zWjUwpHZiJCkTeXai04gS1dWZddwXyj1vD+sX8abcVoXBu2YVxrd9B1 7h1bTzujM5OxAe/OVijsXLSFVQceR2pAcHplxxY9SI+1l5SSsXqc2BfcNXt7nzl0 rYHUBf6oj23cAFMAyOhvGAwPQ0mVuFZr0FmzL4090RvGnOLG659/NtY+UqAjx2OB UNIGq+IslcarhCop4Wv4ejv6r3r6zl/fXgGZoi6dr1kmycusRNGQQ4XQ83xElqhz MXZFEgquqQUEmMT7+dqJYQX7v40SBmaGpS0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:21 2025 by rpki-client