$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28454b5-877a-3ea3-b22f-3cacd58dc743.roa File: e28454b5-877a-3ea3-b22f-3cacd58dc743.roa (raw, json) Hash identifier: 0pR7QR8WL5cNPiBLqaaFgfj1Sm8mDnSN0S8w0oOgZtk= Subject key identifier: 11:32:13:9F:43:46:1A:1D:0F:F4:78:5B:36:43:B4:24:8C:F3:79:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66320FF33BF429C2AEC7E300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28454b5-877a-3ea3-b22f-3cacd58dc743.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396573 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0f:f3:3b:f4:29:c2:ae:c7:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=e364cc91-0ebc-49ce-98ad-5ecf5996db25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e0:a6:5a:8e:82:97:55:25:a3:44:f1:72:61: c4:f4:16:ff:14:3b:d3:bf:e1:75:37:ec:d0:d3:76: 4e:b1:33:7b:38:6c:c7:0d:57:60:70:bb:bd:d2:62: a1:a3:98:05:11:0d:69:23:cb:06:f6:d4:b9:33:3c: b0:73:87:49:53:b3:fb:80:c0:1b:01:69:af:d8:1c: b6:0e:04:f3:20:b1:ed:97:f1:f1:e8:ce:06:d8:c1: 03:31:e4:d5:bd:14:f8:0f:cd:07:e9:2d:48:da:5b: 7c:b7:35:3b:d7:db:52:bf:ba:44:ca:43:f9:5c:d9: 63:bf:14:fe:91:a4:f1:ed:8a:2c:48:23:cf:4f:a4: ea:8b:7e:f3:65:4c:6d:e5:90:63:dd:09:c6:54:36: c1:d1:0e:d2:9f:4e:01:8b:40:7e:b5:44:61:ca:2e: 52:f7:18:42:3f:44:29:d5:9a:2f:71:b2:31:b3:83: 7e:64:87:ae:c7:5e:10:ae:07:b5:d2:1b:4f:d6:e8: 13:a3:a2:61:95:6f:7f:e5:c0:cb:b2:74:e3:ea:47: 12:06:f8:7e:65:82:35:f1:72:1c:b5:2c:e5:cd:09: 04:02:31:e3:86:6c:6c:6f:91:e0:60:cc:2a:fa:2f: 7b:30:4d:26:ed:a1:26:e0:1a:61:24:21:a1:5d:11: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:32:13:9F:43:46:1A:1D:0F:F4:78:5B:36:43:B4:24:8C:F3:79:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e28454b5-877a-3ea3-b22f-3cacd58dc743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:15:de:93:f0:17:b2:10:ef:cd:a7:37:34:c2:6a:1d:58:d0: fc:d1:95:a1:48:5f:5e:2e:8f:95:42:e7:c1:36:ff:1c:25:ca: 59:a8:3a:27:09:23:37:ae:5d:a7:0f:5e:b1:29:11:a7:af:52: 32:cc:47:32:f6:69:7c:bf:0a:43:a0:23:2f:a2:5e:f3:8c:1e: a1:74:1c:b9:6c:a0:31:a7:bb:60:e5:e3:ab:89:b2:f3:d3:da: 29:ba:3d:1e:fc:9e:30:f8:65:ca:20:55:eb:c3:df:f2:8f:c6: 5c:93:5b:b8:6c:6b:ab:5e:e1:9e:92:e4:2e:ab:bb:f9:6f:81: a9:7c:aa:8f:d6:a4:67:ae:85:36:2b:e4:ef:6c:57:c8:68:9f: f1:ae:23:20:28:ae:44:35:ee:3e:52:fc:1d:48:6d:16:1d:56: fc:25:21:b6:d5:72:74:fd:a9:33:67:a8:14:92:08:5c:04:53: 79:da:a0:de:f9:d5:33:eb:fc:12:3c:5c:7c:bc:12:b4:e6:8e: c7:ea:c9:23:ce:9f:cf:fc:90:8c:5a:63:9d:86:76:15:0d:7b: 2e:80:7f:48:af:b1:df:dd:c3:1f:39:fc:1b:89:7e:fd:29:8d: 33:80:72:48:7f:49:0a:00:0b:8e:75:18:c1:af:0e:ef:80:71: 9a:68:b0:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg/zO/Qpwq7H4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTM2NGNjOTEtMGViYy00OWNlLTk4YWQtNWVjZjU5OTZkYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOCmWo6Cl1Ulo0TxcmHE9Bb/FDvTv+F1N+zQ 03ZOsTN7OGzHDVdgcLu90mKho5gFEQ1pI8sG9tS5Mzywc4dJU7P7gMAbAWmv2By2 DgTzILHtl/Hx6M4G2MEDMeTVvRT4D80H6S1I2lt8tzU719tSv7pEykP5XNljvxT+ kaTx7YosSCPPT6Tqi37zZUxt5ZBj3QnGVDbB0Q7Sn04Bi0B+tURhyi5S9xhCP0Qp 1ZovcbIxs4N+ZIeux14Qrge10htP1ugTo6JhlW9/5cDLsnTj6kcSBvh+ZYI18XIc tSzlzQkEAjHjhmxsb5HgYMwq+i97ME0m7aEm4BphJCGhXREwQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBEyE59DRhodD/R4WzZDtCSM83k2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTI4NDU0YjUtODc3YS0z ZWEzLWIyMmYtM2NhY2Q1OGRjNzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACwV3pPwF7IQ782nNzTCah1Y0PzRlaFIX14uj5VC58E2/xwlylmo OicJIzeuXacPXrEpEaevUjLMRzL2aXy/CkOgIy+iXvOMHqF0HLlsoDGnu2Dl46uJ svPT2im6PR78njD4ZcogVevD3/KPxlyTW7hsa6te4Z6S5C6ru/lvgal8qo/WpGeu hTYr5O9sV8hon/GuIyAorkQ17j5S/B1IbRYdVvwlIbbVcnT9qTNnqBSSCFwEU3na oN751TPr/BI8XHy8ErTmjsfqySPOn8/8kIxaY52GdhUNey6Af0ivsd/dwx85/BuJ fv0pjTOAckh/SQoAC451GMGvDu+AcZposK4= -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:51 2025 by rpki-client