$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c0f23c4-a313-38f1-9ce0-2c9bd832b020.roa File: 5c0f23c4-a313-38f1-9ce0-2c9bd832b020.roa (raw, json) Hash identifier: 2+QR/d3fUvigoXqa3hb8wTV3+xAvPW2L8/dn7lGvqYU= Subject key identifier: 85:96:7F:75:D3:B0:F7:78:6B:BB:D8:FD:9D:7B:75:F0:7C:C4:1D:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B5F37582FEA8FA0E238C0F480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c0f23c4-a313-38f1-9ce0-2c9bd832b020.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396616 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:58:2f:ea:8f:a0:e2:38:c0:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=6210e045-3f65-4ace-8783-aedee9cddb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:f4:46:6d:fb:e5:64:db:58:bf:e0:ca:cc: 91:ae:b6:f1:38:6b:e8:f5:24:85:d3:3f:e5:05:e6: 22:12:48:9a:47:11:f6:d5:ee:0e:78:c3:03:aa:10: 11:67:da:11:80:d3:4e:fc:71:0b:23:55:6e:6b:79: 8f:aa:cc:cc:46:b1:5c:1c:05:d6:e6:87:eb:e3:00: 7e:cb:e2:5b:31:88:ab:ab:05:2d:de:49:8c:cb:d6: 80:6e:e8:ff:b4:4a:df:1a:96:f0:97:77:27:95:00: ed:04:02:7d:00:2f:2c:59:c2:60:f3:eb:8c:f9:ca: 9e:7e:36:34:ef:0b:a4:67:74:44:c5:c7:71:50:06: 7e:63:d2:e5:61:a9:b2:0a:69:ad:3c:38:03:dd:c2: 7f:b4:b9:68:1b:88:18:e8:4d:b8:4e:ab:6b:52:d9: ba:1c:7d:f8:77:48:9c:df:ca:7d:2f:9b:4b:50:6e: c5:67:c1:83:17:36:26:40:57:27:c6:4f:bc:32:56: 6a:0d:81:ba:ba:ca:70:e2:38:ed:2a:91:a1:c6:5a: fd:de:49:16:4c:be:10:7c:f1:72:11:20:02:c7:75: 78:bf:cb:a0:df:83:25:3a:21:39:e7:b8:fa:12:ec: 21:da:d6:42:55:0f:ea:b3:a9:ec:1f:6b:c9:53:a8: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:96:7F:75:D3:B0:F7:78:6B:BB:D8:FD:9D:7B:75:F0:7C:C4:1D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c0f23c4-a313-38f1-9ce0-2c9bd832b020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4a:ea:19:86:6b:33:ec:d5:73:cb:7f:a3:e6:29:96:77:23: 59:e0:ec:e1:8f:b1:16:48:e1:8a:07:66:b8:30:d9:bf:a6:d9: 49:60:83:e2:45:5a:0a:4d:49:1b:55:3e:fe:45:13:37:48:1a: 69:68:da:f0:75:7c:8f:2c:61:53:61:29:e0:bc:96:ec:0c:ed: bf:84:77:3d:2a:74:ab:e3:24:3f:db:68:61:5a:61:ec:01:2b: 8a:ec:7c:4c:0e:7b:d9:5c:4b:8d:7f:ac:0a:7a:aa:f4:49:6b: 14:e8:3c:b6:77:04:9b:35:8c:ad:13:d6:36:39:b1:2e:73:ab: 74:10:32:73:f4:f0:6c:1d:ac:bf:98:9f:ab:5f:96:1f:b3:9a: c2:29:c1:c3:e4:66:44:21:8a:f6:4b:59:5c:7c:45:f2:a4:fe: 71:90:8b:96:4f:e8:24:96:b4:24:9f:bb:76:73:09:4f:18:3e: b2:8e:c1:53:9b:eb:e4:50:b9:c1:0f:57:59:ff:f0:ec:0d:b6: 03:5f:9d:d9:d9:b0:a2:fc:de:39:83:29:ea:00:31:e0:e7:6a: cf:b0:e7:0c:a2:a1:61:09:e9:11:50:0e:fc:5b:ec:16:9f:40: e5:e0:38:4f:13:6c:ed:7b:b0:cd:32:d2:bf:09:7e:a0:e1:4f: 3a:7a:65:4c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1gv6o+g4jjA9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NjIxMGUwNDUtM2Y2NS00YWNlLTg3ODMtYWVkZWU5Y2RkYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6L0Rm375WTbWL/gysyRrrbxOGvo9SSF0z/l BeYiEkiaRxH21e4OeMMDqhARZ9oRgNNO/HELI1Vua3mPqszMRrFcHAXW5ofr4wB+ y+JbMYirqwUt3kmMy9aAbuj/tErfGpbwl3cnlQDtBAJ9AC8sWcJg8+uM+cqefjY0 7wukZ3RExcdxUAZ+Y9LlYamyCmmtPDgD3cJ/tLloG4gY6E24TqtrUtm6HH34d0ic 38p9L5tLUG7FZ8GDFzYmQFcnxk+8MlZqDYG6uspw4jjtKpGhxlr93kkWTL4QfPFy ESACx3V4v8ug34MlOiE557j6Euwh2tZCVQ/qs6nsH2vJU6gbawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIWWf3XTsPd4a7vY/Z17dfB8xB1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWMwZjIzYzQtYTMxMy0z OGYxLTljZTAtMmM5YmQ4MzJiMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBnSuoZhmsz7NVzy3+j5imWdyNZ4Ozhj7EWSOGK B2a4MNm/ptlJYIPiRVoKTUkbVT7+RRM3SBppaNrwdXyPLGFTYSngvJbsDO2/hHc9 KnSr4yQ/22hhWmHsASuK7HxMDnvZXEuNf6wKeqr0SWsU6Dy2dwSbNYytE9Y2ObEu c6t0EDJz9PBsHay/mJ+rX5Yfs5rCKcHD5GZEIYr2S1lcfEXypP5xkIuWT+gklrQk n7t2cwlPGD6yjsFTm+vkULnBD1dZ//DsDbYDX53Z2bCi/N45gynqADHg52rPsOcM oqFhCekRUA78W+wWn0Dl4DhPE2zte7DNMtK/CX6g4U86emVM -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:43 2025 by rpki-client