$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d2516f1-ec78-322d-bb8c-1f598eda7676.roa File: 8d2516f1-ec78-322d-bb8c-1f598eda7676.roa (raw, json) Hash identifier: AoYj93soWVa3GOUZ0W6qruon5tjQX5prFrLzfJDZ5ro= Subject key identifier: 0A:98:BF:0D:9E:C4:EC:82:65:77:66:91:5F:D3:81:3C:40:B4:A4:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B663210DB476C6DD01D992700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d2516f1-ec78-322d-bb8c-1f598eda7676.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396613 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:10:db:47:6c:6d:d0:1d:99:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=aaf22e53-7e61-456a-9269-bc9630cb5fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:47:81:2d:5b:42:15:71:2a:f0:75:af:c3: 5a:d0:74:72:c3:09:18:70:69:24:b9:fd:1d:cd:a5: d1:c8:e1:dc:56:f8:9e:f4:2b:fa:54:c5:a2:dc:fd: 7e:51:68:01:f7:b7:79:4b:bd:97:ca:a4:48:fb:03: 51:ae:45:a4:73:ba:ad:1b:46:24:28:8b:28:5a:90: 9a:d2:ae:d4:ef:8c:22:01:5a:a3:82:d3:1e:da:e7: 23:1c:76:c3:93:eb:62:ba:9a:42:31:be:2c:7d:17: 46:18:05:bb:a0:af:cd:e2:61:f1:2a:82:c9:74:25: 5a:cf:b0:d4:bf:99:0c:8e:c5:c0:60:e6:35:55:af: 79:71:ad:ff:b6:4b:fa:bf:c4:44:75:12:03:1b:8d: 12:65:a2:65:07:c2:5a:94:e3:62:15:8d:bb:7f:49: ea:48:ea:5b:b2:66:da:a2:65:bb:83:2b:7c:73:0d: 7e:13:b5:dc:ab:7c:05:63:0e:2d:61:d9:a0:50:1b: 75:90:a8:48:75:d9:8d:df:ce:13:5a:e7:bd:02:3f: cb:79:67:6f:6d:4e:f4:00:c7:6f:ad:39:89:fa:77: 1d:ae:1b:14:ac:a4:38:f0:5c:3d:63:45:5b:74:c3: d8:8c:22:b5:f1:f8:39:fe:7e:84:32:f9:02:6f:3d: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:98:BF:0D:9E:C4:EC:82:65:77:66:91:5F:D3:81:3C:40:B4:A4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d2516f1-ec78-322d-bb8c-1f598eda7676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:18:c0:7b:2c:eb:29:cc:4b:39:20:2b:71:71:ef:5b:05:ba: 36:f4:87:3a:c4:38:61:79:e1:bd:cd:84:f4:5b:ad:26:fa:58: 89:0d:5b:78:a5:37:46:54:10:71:28:76:cc:5b:82:03:f4:3a: b2:23:c0:b6:57:96:0c:74:43:1c:3e:ab:47:38:1c:d2:62:1a: c2:74:a8:fe:f9:fe:c1:cc:57:fe:0f:b6:7a:58:74:55:b7:97: 95:1f:ab:e8:30:79:07:09:35:aa:15:1b:62:35:7c:c6:ab:d7: b9:06:fc:a4:58:de:5a:0b:86:32:c0:aa:bb:79:3c:6e:c0:3a: cf:e9:61:4e:4a:8b:9d:5e:20:1d:ea:34:19:ce:19:32:ba:03: 94:3a:cc:28:31:0e:39:3c:db:c2:26:58:19:78:ec:02:96:d3: a1:ed:e8:ec:9b:5d:11:62:d1:2e:8f:60:06:2f:7a:89:1e:b8: 10:1e:7b:b7:d2:a8:41:7f:29:ab:55:47:e7:17:27:67:a6:fa: ba:94:dc:f5:9c:dd:b1:dd:65:1c:a0:41:b8:4b:e1:d3:ad:ed: 6a:57:5d:56:df:95:6d:24:5b:db:32:68:53:55:d6:23:c0:e2: ea:7c:04:01:57:62:b8:43:5f:70:7c:28:1f:0e:7b:02:30:4a: 55:c8:b9:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhDbR2xt0B2ZJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YWFmMjJlNTMtN2U2MS00NTZhLTkyNjktYmM5NjMwY2I1ZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstxHgS1bQhVxKvB1r8Na0HRywwkYcGkkuf0d zaXRyOHcVvie9Cv6VMWi3P1+UWgB97d5S72XyqRI+wNRrkWkc7qtG0YkKIsoWpCa 0q7U74wiAVqjgtMe2ucjHHbDk+tiuppCMb4sfRdGGAW7oK/N4mHxKoLJdCVaz7DU v5kMjsXAYOY1Va95ca3/tkv6v8REdRIDG40SZaJlB8JalONiFY27f0nqSOpbsmba omW7gyt8cw1+E7Xcq3wFYw4tYdmgUBt1kKhIddmN384TWue9Aj/LeWdvbU70AMdv rTmJ+ncdrhsUrKQ48Fw9Y0VbdMPYjCK18fg5/n6EMvkCbz25fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqYvw2exOyCZXdmkV/TgTxAtKQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGQyNTE2ZjEtZWM3OC0z MjJkLWJiOGMtMWY1OThlZGE3Njc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkYwHss6ynMSzkgK3Fx71sFujb0hzrEOGF54b3NhPRbrSb6WIkN W3ilN0ZUEHEodsxbggP0OrIjwLZXlgx0Qxw+q0c4HNJiGsJ0qP75/sHMV/4PtnpY dFW3l5Ufq+gweQcJNaoVG2I1fMar17kG/KRY3loLhjLAqrt5PG7AOs/pYU5Ki51e IB3qNBnOGTK6A5Q6zCgxDjk828ImWBl47AKW06Ht6OybXRFi0S6PYAYveokeuBAe e7fSqEF/KatVR+cXJ2em+rqU3PWc3bHdZRygQbhL4dOt7WpXXVbflW0kW9syaFNV 1iPA4up8BAFXYrhDX3B8KB8OewIwSlXIuSw= -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:34 2025 by rpki-client