$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa File: bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa (raw, json) Hash identifier: NkCtbGUIXqRNRWdRu5bI/Z7xs/BAumFXMfSkZ6PA/Wc= Subject key identifier: 37:78:71:79:DC:89:CB:20:C7:10:4C:86:D7:78:FE:DE:6C:6F:DC:E3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4BAC6C5E6C9DC828402F7060 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 396594 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:6c:5e:6c:9d:c8:28:40:2f:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=09a75878-7279-4f39-845d-70adec476ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0b:fc:be:ad:cd:9e:6d:ad:d5:ff:ee:57:67: 70:ff:d5:62:84:a9:e2:c6:a0:1f:a5:43:ca:4e:1c: 6c:b4:4e:15:64:c6:94:a5:fa:d3:72:cb:b0:02:30: 28:e1:6d:38:07:5a:f9:de:6b:43:17:91:4e:24:c4: 48:0f:8a:d0:64:41:be:d7:52:ba:b2:4b:8a:b9:f1: b3:b4:16:05:7f:de:8c:e5:09:fd:23:44:ea:a7:7a: 81:1e:1b:00:69:31:8d:85:1d:0f:e2:6d:fd:e9:3a: 2e:91:db:14:3a:71:35:7c:3a:81:49:ef:72:07:73: c3:de:24:93:9b:c8:88:1e:74:3a:21:23:cb:bc:6a: 54:25:70:3e:d7:29:99:cc:d7:62:db:02:86:c9:29: d1:60:30:6b:65:40:ee:e4:6e:67:f2:8e:1e:21:ff: 5d:5c:95:6e:c8:7f:29:02:8f:eb:3c:60:1c:22:8c: 87:d8:74:fc:43:d8:34:61:76:2a:71:0a:7c:97:b3: e5:0d:10:10:41:fb:0d:57:1d:58:75:d1:1a:4e:ab: 93:56:71:be:a3:f4:6a:31:80:5f:11:32:bb:c3:bd: 65:79:07:8f:cd:8b:7b:bd:d2:b0:e8:69:93:92:61: c4:8c:06:6d:d1:35:01:76:76:ad:fc:84:61:d8:06: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:78:71:79:DC:89:CB:20:C7:10:4C:86:D7:78:FE:DE:6C:6F:DC:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0b:28:b3:d1:6c:cf:e6:c3:f0:7a:ef:94:31:c3:c6:6d:0a: 32:fb:2f:7b:0e:56:60:fb:b2:07:4a:a7:3c:5e:36:03:af:21: eb:2e:bb:77:9b:25:ab:83:b3:c2:64:a3:72:01:90:59:c8:51: 74:a0:ff:d9:ab:2a:cd:c0:74:10:f6:2b:57:11:66:83:65:ae: be:19:7d:7d:60:03:b5:f6:e0:0b:db:85:28:4c:6a:d2:ee:21: 0d:48:fe:67:c8:7b:51:e5:81:fc:9e:4f:d8:b7:27:0f:3e:24: 0f:56:c9:46:a0:59:9a:fc:3d:dd:0d:58:62:8c:b8:ed:dd:ec: e3:6f:88:30:89:b4:e0:f8:36:42:d2:65:6c:0d:08:3a:5c:ac: 07:aa:fc:c7:12:c1:00:36:61:5a:fe:ed:d4:4c:04:9c:1a:14: 35:b2:24:e9:85:b4:92:f0:cf:ad:a5:9c:0c:c6:2c:fd:80:ba: c4:09:67:22:5c:bc:53:28:3b:78:db:8e:08:87:45:33:82:ad: dc:2e:e1:0d:e2:ab:a5:2c:8c:3c:f9:60:cf:2b:2a:58:a1:e8: c0:b4:5a:a5:87:38:ad:01:1c:e8:df:76:5e:2a:01:57:d2:7d: e9:9b:c9:46:36:88:7d:4f:71:16:b7:4d:b1:b8:29:7b:6f:70: 89:c1:f4:80 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGxebJ3IKEAvcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk MDlhNzU4NzgtNzI3OS00ZjM5LTg0NWQtNzBhZGVjNDc2Y2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAv8vq3Nnm2t1f/uV2dw/9VihKnixqAfpUPK ThxstE4VZMaUpfrTcsuwAjAo4W04B1r53mtDF5FOJMRID4rQZEG+11K6skuKufGz tBYFf96M5Qn9I0Tqp3qBHhsAaTGNhR0P4m396ToukdsUOnE1fDqBSe9yB3PD3iST m8iIHnQ6ISPLvGpUJXA+1ymZzNdi2wKGySnRYDBrZUDu5G5n8o4eIf9dXJVuyH8p Ao/rPGAcIoyH2HT8Q9g0YXYqcQp8l7PlDRAQQfsNVx1YddEaTquTVnG+o/RqMYBf ETK7w71leQePzYt7vdKw6GmTkmHEjAZt0TUBdnat/IRh2AZxqwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDd4cXncicsgxxBMhtd4/t5sb9zjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmI1ZjU0OWYtNWVlYS0z ODcwLWFjMjktNGQwZGMyZGZlYmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3Cyiz0WzP5sPweu+UMcPGbQoy+y97DlZg+7IH Sqc8XjYDryHrLrt3myWrg7PCZKNyAZBZyFF0oP/ZqyrNwHQQ9itXEWaDZa6+GX19 YAO19uAL24UoTGrS7iENSP5nyHtR5YH8nk/YtycPPiQPVslGoFma/D3dDVhijLjt 3ezjb4gwibTg+DZC0mVsDQg6XKwHqvzHEsEANmFa/u3UTAScGhQ1siTphbSS8M+t pZwMxiz9gLrECWciXLxTKDt4244Ih0Uzgq3cLuEN4qulLIw8+WDPKypYoejAtFql hzitARzo33ZeKgFX0n3pm8lGNoh9T3EWt02xuCl7b3CJwfSA -----END CERTIFICATE-----Generated at Wed Oct 29 07:09:28 2025 by rpki-client