$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f14f11-ad68-3121-8fdf-0d0de1338ef2.roa File: f2f14f11-ad68-3121-8fdf-0d0de1338ef2.roa (raw, json) Hash identifier: itBNXky3MUJXETvXjYxtvOI4r04EdOC3AFfG1Fl/5cg= Subject key identifier: 33:D8:80:9C:E2:D5:B7:07:7E:F7:92:44:59:FA:24:E2:E9:4A:EE:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B66321149D682036F58C5EB60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f14f11-ad68-3121-8fdf-0d0de1338ef2.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 396540 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:11:49:d6:82:03:6f:58:c5:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=891f12a4-e749-4933-a5d1-9525f7eee366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:86:fd:14:e8:56:f9:03:e0:c8:22:1e:7a: 8f:31:14:a0:d9:78:de:e0:57:24:ee:17:c2:38:d3: 57:ca:7e:eb:ce:97:da:f1:01:f4:b8:4c:eb:36:3e: 58:93:ce:16:1c:6d:86:7d:42:be:1f:b9:cb:0b:a2: 6f:60:d2:19:24:14:e7:67:bb:f3:ff:05:ea:4c:0e: 5e:a8:23:9d:cf:16:fd:8d:e2:35:02:88:cd:86:bf: 87:79:52:d9:65:4d:b8:61:88:e2:e1:73:3e:c5:28: 7d:9a:f4:87:72:3d:c8:3f:7e:8f:5e:02:7e:47:44: 77:3d:45:14:9f:65:81:4f:26:98:ea:5d:3a:f8:8e: d7:65:40:b4:53:e2:59:51:a6:be:2d:71:72:07:79: f2:4e:9a:ee:6c:31:32:6b:cf:35:6a:a8:cf:37:17: 14:3b:2d:28:11:16:47:8f:ac:9c:07:83:ed:c4:13: cf:b9:6e:95:09:8b:96:5b:ca:83:e4:37:c1:f2:62: 34:71:f1:6d:8d:c5:dc:79:66:94:01:6e:95:05:53: c2:f2:65:9e:f1:e4:ce:e2:ae:b5:d5:e3:6a:c4:f9: d7:f0:e6:6c:87:ce:80:ed:70:24:df:9e:24:66:39: 77:77:17:6b:10:3f:0a:42:c4:6e:e1:b0:a4:22:40: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D8:80:9C:E2:D5:B7:07:7E:F7:92:44:59:FA:24:E2:E9:4A:EE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f14f11-ad68-3121-8fdf-0d0de1338ef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fa:3d:c7:7d:ed:94:72:d2:f6:35:98:a1:cb:78:89:0d:68: 17:5e:28:47:b5:84:46:12:eb:fa:df:db:3d:6b:c4:17:61:37: 8c:65:b7:db:eb:bf:28:13:c7:15:54:9e:75:26:92:af:ba:8f: ed:46:6a:61:dd:55:79:68:78:cc:91:91:83:ed:38:08:ae:0f: ce:32:90:05:7e:f5:f3:4b:bd:7d:a4:36:76:5e:cb:51:c3:0c: fb:d7:68:0d:d4:3f:68:df:95:06:e1:c3:fc:83:6b:d9:89:74: 43:71:ce:ec:c2:f4:94:16:07:38:e4:ac:b9:79:91:bf:1e:96: 66:2b:b1:8b:ab:4b:17:fe:d1:b1:68:6e:97:62:35:3d:38:17: 0f:be:a2:8c:5b:57:94:09:ca:a0:9b:fc:22:60:7f:b3:7d:24: a1:e6:85:bc:70:28:0b:8d:e4:f9:84:79:48:95:5b:a3:96:bb: 19:ef:b2:9f:1d:74:62:47:d5:62:c0:49:d5:b7:e1:c1:8f:4d: a4:ba:57:a2:62:3c:0a:38:10:69:72:8b:bc:62:ca:2c:7a:89: cb:da:9d:a0:89:f0:50:e7:dd:86:0e:05:6e:fb:71:d8:b6:07: f7:d4:a4:31:e1:28:16:e1:3f:e5:a9:5d:f3:d1:13:72:ed:2c: 53:3c:af:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhFJ1oIDb1jF62AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ODkxZjEyYTQtZTc0OS00OTMzLWE1ZDEtOTUyNWY3ZWVlMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRKG/RToVvkD4MgiHnqPMRSg2Xje4Fck7hfC ONNXyn7rzpfa8QH0uEzrNj5Yk84WHG2GfUK+H7nLC6JvYNIZJBTnZ7vz/wXqTA5e qCOdzxb9jeI1AojNhr+HeVLZZU24YYji4XM+xSh9mvSHcj3IP36PXgJ+R0R3PUUU n2WBTyaY6l06+I7XZUC0U+JZUaa+LXFyB3nyTprubDEya881aqjPNxcUOy0oERZH j6ycB4PtxBPPuW6VCYuWW8qD5DfB8mI0cfFtjcXceWaUAW6VBVPC8mWe8eTO4q61 1eNqxPnX8OZsh86A7XAk354kZjl3dxdrED8KQsRu4bCkIkBYYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPYgJzi1bcHfveSRFn6JOLpSu7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjJmMTRmMTEtYWQ2OC0z MTIxLThmZGYtMGQwZGUxMzM4ZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEf6Pcd97ZRy0vY1mKHLeIkNaBdeKEe1hEYS6/rf2z1rxBdhN4xl t9vrvygTxxVUnnUmkq+6j+1GamHdVXloeMyRkYPtOAiuD84ykAV+9fNLvX2kNnZe y1HDDPvXaA3UP2jflQbhw/yDa9mJdENxzuzC9JQWBzjkrLl5kb8elmYrsYurSxf+ 0bFobpdiNT04Fw++ooxbV5QJyqCb/CJgf7N9JKHmhbxwKAuN5PmEeUiVW6OWuxnv sp8ddGJH1WLASdW34cGPTaS6V6JiPAo4EGlyi7xiyix6icvanaCJ8FDn3YYOBW77 cdi2B/fUpDHhKBbhP+WpXfPRE3LtLFM8r4E= -----END CERTIFICATE-----Generated at Wed Oct 29 07:00:38 2025 by rpki-client