$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ec88c2-471c-3b0e-8d3d-cca4a76f6495.roa File: 59ec88c2-471c-3b0e-8d3d-cca4a76f6495.roa (raw, json) Hash identifier: JkCAaJnO6G6AJ8AkkCmKttGC7wSm0Z0BxCi3aXZlgwY= Subject key identifier: 24:7E:38:23:08:B0:B8:B2:12:28:37:BC:0C:38:62:52:AB:90:39:4C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320E73708B1D1704B8CE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ec88c2-471c-3b0e-8d3d-cca4a76f6495.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396543 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0e:73:70:8b:1d:17:04:b8:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=83ece1d8-bc32-430a-84df-34b7147cb6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:9e:b8:94:b3:fb:5b:27:5b:70:bf:5c:b5: 58:9a:5f:99:f8:29:55:19:f0:cd:8a:a2:d5:cb:77: 9d:b8:a6:62:a2:60:05:bc:7d:a4:66:bf:ef:dc:c6: 20:58:54:99:8c:7d:92:03:17:14:27:cf:69:75:0c: 42:01:8d:fa:e4:c1:34:24:50:fa:46:e3:9d:cb:aa: fd:32:4e:77:ba:e5:40:f3:10:3a:49:98:e7:f0:4b: ca:65:5f:5e:6e:6a:1e:a2:05:06:b2:f6:31:13:48: 55:57:f6:27:4e:da:d5:d6:94:41:83:0e:83:c5:54: de:3a:e6:29:32:89:3b:f6:0b:94:42:30:aa:bc:2e: 1e:8e:8f:73:d2:bd:af:9f:e4:b0:c0:28:77:c9:14: 90:a2:3c:e5:ef:82:67:b5:2a:11:a2:0c:c7:9b:a5: 4e:2c:a7:f1:00:aa:03:70:05:63:d1:a9:00:3c:52: c4:93:e2:0a:e9:c2:94:a2:f9:d8:01:a1:b8:4d:da: 6f:f6:35:79:7d:be:23:e8:62:f3:b9:3b:81:b9:d6: 3c:5d:6c:6c:df:54:4f:ad:39:67:25:76:ea:d9:02: d4:17:0c:e4:60:d9:e4:9f:df:2b:7c:7c:29:a1:0d: 63:1c:2d:80:cf:c5:5b:42:28:bb:9b:60:31:1e:41: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7E:38:23:08:B0:B8:B2:12:28:37:BC:0C:38:62:52:AB:90:39:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ec88c2-471c-3b0e-8d3d-cca4a76f6495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:18:24:a1:6c:1c:1a:ee:db:f1:30:f7:0f:b3:6c:85:57:55: 41:7c:a0:ad:f2:c6:a7:e5:ed:ea:16:60:e3:40:56:e2:65:ce: 6a:fe:b2:83:7f:f4:1e:82:62:e4:ed:06:72:bc:b0:2c:cd:49: 4b:83:f9:d9:be:8c:27:c9:6f:44:c1:5d:d6:76:0e:83:eb:31: 95:77:ff:7b:40:f3:11:79:c6:e2:f5:13:53:7c:e8:26:24:1a: 5f:2c:ae:a3:ea:86:db:b4:63:a9:ce:87:9d:5f:55:b3:3a:63: f0:bb:a7:1a:c7:c3:dc:81:11:96:a3:27:37:4f:6f:63:c9:6f: 42:ce:79:2e:cc:56:b9:39:5c:e8:f2:f0:ae:fa:00:18:06:ef: 4d:10:35:0d:12:18:c1:dc:a3:0f:1e:6a:46:ae:36:0d:47:cc: 26:b2:1e:ee:51:8d:30:cc:39:f9:9d:bb:32:ee:84:4d:8f:82: cb:3c:03:12:0d:a5:1e:8c:e6:54:8c:6e:66:d4:c2:92:f2:e9: 02:cb:4e:f1:7e:04:d6:cb:60:d7:6b:73:14:90:20:57:7a:b3: db:b3:6d:e1:f4:df:52:7f:4f:c1:de:be:a2:64:6a:fe:7b:05: ba:64:e5:96:9e:b4:63:7e:ed:57:03:53:de:f3:8a:51:67:93: 67:48:9c:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg5zcIsdFwS4zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ODNlY2UxZDgtYmMzMi00MzBhLTg0ZGYtMzRiNzE0N2NiNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfaeuJSz+1snW3C/XLVYml+Z+ClVGfDNiqLV y3eduKZiomAFvH2kZr/v3MYgWFSZjH2SAxcUJ89pdQxCAY365ME0JFD6RuOdy6r9 Mk53uuVA8xA6SZjn8EvKZV9ebmoeogUGsvYxE0hVV/YnTtrV1pRBgw6DxVTeOuYp Mok79guUQjCqvC4ejo9z0r2vn+SwwCh3yRSQojzl74JntSoRogzHm6VOLKfxAKoD cAVj0akAPFLEk+IK6cKUovnYAaG4Tdpv9jV5fb4j6GLzuTuBudY8XWxs31RPrTln JXbq2QLUFwzkYNnkn98rfHwpoQ1jHC2Az8VbQii7m2AxHkG70wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCR+OCMIsLiyEig3vAw4YlKrkDlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTllYzg4YzItNDcxYy0z YjBlLThkM2QtY2NhNGE3NmY2NDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIMYJKFsHBru2/Ew9w+zbIVXVUF8oK3yxqfl7eoWYONAVuJlzmr+ soN/9B6CYuTtBnK8sCzNSUuD+dm+jCfJb0TBXdZ2DoPrMZV3/3tA8xF5xuL1E1N8 6CYkGl8srqPqhtu0Y6nOh51fVbM6Y/C7pxrHw9yBEZajJzdPb2PJb0LOeS7MVrk5 XOjy8K76ABgG700QNQ0SGMHcow8eakauNg1HzCayHu5RjTDMOfmduzLuhE2Pgss8 AxINpR6M5lSMbmbUwpLy6QLLTvF+BNbLYNdrcxSQIFd6s9uzbeH031J/T8HevqJk av57Bbpk5ZaetGN+7VcDU97zilFnk2dInNo= -----END CERTIFICATE-----Generated at Wed Oct 29 07:00:49 2025 by rpki-client