$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1492d5b2-a707-3392-9e41-24f8f4ed5c33.roa File: 1492d5b2-a707-3392-9e41-24f8f4ed5c33.roa (raw, json) Hash identifier: EYkqYl5cHRgkLsBu8IzuC42G9SlI6eDP9HMiCGueO94= Subject key identifier: F2:DA:6E:47:83:71:8C:C7:20:8F:28:5A:2B:EF:70:01:E9:73:5A:6A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6702EE20505F7E81E72C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1492d5b2-a707-3392-9e41-24f8f4ed5c33.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 397212 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:70:2e:e2:05:05:f7:e8:1e:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=9a1050cf-3caa-41a8-83e8-d5a8200f6cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:2c:31:aa:3e:a2:29:23:7f:cf:b8:a6:7b: d3:90:1c:0a:9b:46:07:52:00:26:02:e1:53:00:51: b9:80:91:75:c8:32:c5:d9:22:92:67:9b:ec:df:53: 3e:ad:7e:0a:94:fc:f2:8b:cd:9d:5a:1b:c5:07:b7: 81:1c:05:c9:d5:5f:0f:21:0c:f9:91:b2:44:5f:f9: 7b:7b:9e:2c:c6:cb:5b:8e:43:4b:fe:9e:14:ec:78: c5:a3:37:dc:34:35:e6:d7:82:62:41:41:60:27:76: ce:c2:f9:6b:11:fe:cf:0a:8c:1b:20:af:53:4e:77: b6:39:82:6c:bd:c1:10:74:92:b4:40:ce:82:2f:05: d0:61:e7:58:bf:22:9f:1c:1b:b7:02:86:49:9c:8b: a4:5c:f1:0c:da:4d:ae:b8:c8:93:18:ff:2f:a4:b4: 84:a2:ca:ad:8c:ed:9a:54:1d:b0:dd:ec:47:7b:52: d2:16:1c:bf:7c:75:78:ba:05:6b:25:56:9a:f8:2e: cf:17:ef:3b:9f:80:23:1c:a4:cf:27:79:32:35:22: 7d:18:ca:e0:b5:f1:58:71:05:c2:60:5c:4e:b0:01: eb:c1:56:5b:2f:3c:d7:48:a1:c6:12:f2:aa:0f:20: 44:06:0f:bf:65:79:0b:0c:b8:47:cf:ad:25:c3:26: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DA:6E:47:83:71:8C:C7:20:8F:28:5A:2B:EF:70:01:E9:73:5A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1492d5b2-a707-3392-9e41-24f8f4ed5c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:84:88:7f:1e:e6:97:9b:c0:71:6d:51:21:1b:70:55:18:d6: a8:2d:a6:d6:2b:d6:f2:4f:f9:f3:cb:75:0e:21:e6:4c:3b:36: 80:5a:82:b3:82:99:c5:c2:23:e7:a3:84:c6:cc:cd:cc:89:f8: 59:27:d2:40:6b:6c:0c:7e:e0:ed:b0:b7:b8:d4:e2:52:0a:74: 0e:0a:61:6a:2e:2a:ae:75:39:68:0f:c3:96:06:59:95:68:4f: e4:0e:6c:8b:10:bc:9c:c8:7b:0f:2c:7d:a0:5f:2b:7b:cf:f7: 59:06:2e:bc:90:85:f7:66:a1:f2:63:b0:ab:06:12:52:ef:c2: 1e:6f:57:41:52:27:54:fd:e4:84:5c:f9:d9:96:73:1f:fa:16: 39:fc:cd:9e:8d:63:5b:9f:2e:19:51:3e:22:66:61:48:19:77: a4:4c:8c:b0:e2:c9:e3:11:67:ce:28:6b:aa:ba:57:9a:57:df: 0e:c1:98:5f:3b:62:c7:7d:29:98:22:96:59:39:68:fb:89:ed: 50:04:04:88:32:bd:44:95:6e:fb:2f:9a:2b:c0:5b:85:f7:0c: 84:10:1c:5d:44:c9:56:8d:25:b3:03:b6:10:7b:d5:f6:d5:36: 08:35:a4:4a:3d:43:b3:b6:19:6d:d2:90:17:d9:e1:a6:5e:bb: 46:52:98:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpnAu4gUF9+gecsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk OWExMDUwY2YtM2NhYS00MWE4LTgzZTgtZDVhODIwMGY2Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjAsMao+oikjf8+4pnvTkBwKm0YHUgAmAuFT AFG5gJF1yDLF2SKSZ5vs31M+rX4KlPzyi82dWhvFB7eBHAXJ1V8PIQz5kbJEX/l7 e54sxstbjkNL/p4U7HjFozfcNDXm14JiQUFgJ3bOwvlrEf7PCowbIK9TTne2OYJs vcEQdJK0QM6CLwXQYedYvyKfHBu3AoZJnIukXPEM2k2uuMiTGP8vpLSEosqtjO2a VB2w3exHe1LSFhy/fHV4ugVrJVaa+C7PF+87n4AjHKTPJ3kyNSJ9GMrgtfFYcQXC YFxOsAHrwVZbLzzXSKHGEvKqDyBEBg+/ZXkLDLhHz60lwybEuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPLabkeDcYzHII8oWivvcAHpc1pqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQ5MmQ1YjItYTcwNy0z MzkyLTllNDEtMjRmOGY0ZWQ1YzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOEiH8e5pebwHFtUSEbcFUY1qgtptYr1vJP+fPLdQ4h5kw7NoBa grOCmcXCI+ejhMbMzcyJ+Fkn0kBrbAx+4O2wt7jU4lIKdA4KYWouKq51OWgPw5YG WZVoT+QObIsQvJzIew8sfaBfK3vP91kGLryQhfdmofJjsKsGElLvwh5vV0FSJ1T9 5IRc+dmWcx/6Fjn8zZ6NY1ufLhlRPiJmYUgZd6RMjLDiyeMRZ84oa6q6V5pX3w7B mF87Ysd9KZgillk5aPuJ7VAEBIgyvUSVbvsvmivAW4X3DIQQHF1EyVaNJbMDthB7 1fbVNgg1pEo9Q7O2GW3SkBfZ4aZeu0ZSmK0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:42 2025 by rpki-client