$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa File: 1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa (raw, json) Hash identifier: dQ5+OiWkH9VKhW+iuPo5zTgWloKjBC2jlOW95jaaH8U= Subject key identifier: 9F:7D:22:B6:9D:0E:7A:9C:1D:B9:6A:2C:43:37:AF:7A:5D:DA:8B:BC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA66D1C4BCF66D21D3ED580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 397205 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:6d:1c:4b:cf:66:d2:1d:3e:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=00d66b71-90b0-4c52-aa62-dc58f21891c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:dd:d0:d6:7b:9f:b2:e6:dd:9a:4f:39:4a: 2b:9f:02:09:7d:e3:72:97:eb:88:c8:f5:c5:c5:28: 23:87:31:d6:b9:12:07:c7:86:74:2b:a8:e8:55:44: 69:c3:ab:ff:19:e9:b3:cd:9c:e6:4b:42:50:14:c0: 6c:7f:cc:ad:8e:10:00:cf:4c:cb:b1:1b:5a:d7:2a: 46:af:2e:df:3c:f0:61:f1:87:1a:88:64:95:47:9b: b0:cf:41:e9:61:f6:35:77:81:14:e7:e3:0a:f2:53: 47:74:13:49:7c:d3:a6:9b:b1:e0:44:ae:bb:7c:ff: 24:c1:57:cd:41:4a:d5:e2:5a:62:5d:84:2c:aa:b0: b7:9e:7c:52:c8:07:e2:99:da:8d:91:05:d2:c5:8a: d3:19:65:15:e9:62:6d:8a:22:bc:73:e4:63:fb:c7: 31:26:08:71:63:72:8b:e3:38:ea:7b:90:29:a9:a1: c5:7f:7d:a3:b8:4b:ae:d4:38:15:8c:a1:b6:64:0e: cd:6a:41:fe:f9:83:96:86:62:7c:d4:01:bd:0b:ee: 0d:a8:3a:ed:1e:0f:df:a3:90:dc:b6:bc:e8:66:2b: 67:b8:6a:82:13:ed:ec:eb:51:83:1f:2a:5d:db:45: 8c:dd:a9:6a:2f:bc:aa:35:8c:0b:cb:0b:a1:a1:6c: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7D:22:B6:9D:0E:7A:9C:1D:B9:6A:2C:43:37:AF:7A:5D:DA:8B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:9d:26:7e:18:b1:4b:df:80:03:47:4e:5d:5b:8c:c8:07:9e: 03:cf:81:0d:56:8b:a4:3c:34:fc:25:42:dd:8c:84:7b:88:a0: 4c:aa:fa:a3:75:fb:24:03:8e:c6:21:51:74:dd:95:b8:50:fe: 0c:32:ba:9f:9a:61:44:3a:52:d9:f5:ba:17:ea:c0:bd:3b:38: 31:aa:d1:dd:b9:34:44:3e:de:e5:01:5f:8e:44:ec:99:3e:b8: 88:65:56:3c:0f:a9:d8:03:94:4b:f1:c4:6c:78:92:f5:f0:3e: 56:41:46:62:e5:25:36:35:c7:80:d3:98:01:5a:d6:f7:99:c2: d0:15:d9:73:35:1a:35:5d:96:ab:58:3c:52:af:21:49:d0:9c: 96:f6:e6:6d:65:36:23:a6:3c:9d:51:8b:dc:02:47:49:72:83: 0d:41:ed:bb:cd:75:12:c2:06:06:4a:73:21:2d:48:29:0f:d0: 91:04:96:71:a2:71:72:d1:54:bc:6d:ff:9c:63:62:37:7d:1f: e2:aa:51:61:5d:e3:3f:cb:82:c1:ee:08:a7:d7:a3:54:a1:18: d4:d7:16:f7:0f:75:ac:03:03:fa:0e:2b:90:14:9a:ac:6a:48: 01:96:33:ec:9c:28:f3:66:76:dc:ee:12:69:8e:f4:db:97:b0: 66:4a:ac:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpm0cS89m0h0+1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MDBkNjZiNzEtOTBiMC00YzUyLWFhNjItZGM1OGYyMTg5MWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Dd0NZ7n7Lm3ZpPOUornwIJfeNyl+uIyPXF xSgjhzHWuRIHx4Z0K6joVURpw6v/GemzzZzmS0JQFMBsf8ytjhAAz0zLsRta1ypG ry7fPPBh8YcaiGSVR5uwz0HpYfY1d4EU5+MK8lNHdBNJfNOmm7HgRK67fP8kwVfN QUrV4lpiXYQsqrC3nnxSyAfimdqNkQXSxYrTGWUV6WJtiiK8c+Rj+8cxJghxY3KL 4zjqe5ApqaHFf32juEuu1DgVjKG2ZA7NakH++YOWhmJ81AG9C+4NqDrtHg/fo5Dc trzoZitnuGqCE+3s61GDHypd20WM3alqL7yqNYwLywuhoWwXvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ99IradDnqcHblqLEM3r3pd2ou8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE5Yzk4YTYtNWNhMi0z NDVhLTk1Y2UtOWQyNTRjYjhiZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKSdJn4YsUvfgANHTl1bjMgHngPPgQ1Wi6Q8NPwlQt2MhHuIoEyq +qN1+yQDjsYhUXTdlbhQ/gwyup+aYUQ6Utn1uhfqwL07ODGq0d25NEQ+3uUBX45E 7Jk+uIhlVjwPqdgDlEvxxGx4kvXwPlZBRmLlJTY1x4DTmAFa1veZwtAV2XM1GjVd lqtYPFKvIUnQnJb25m1lNiOmPJ1Ri9wCR0lygw1B7bvNdRLCBgZKcyEtSCkP0JEE lnGicXLRVLxt/5xjYjd9H+KqUWFd4z/LgsHuCKfXo1ShGNTXFvcPdawDA/oOK5AU mqxqSAGWM+ycKPNmdtzuEmmO9NuXsGZKrCg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:24:33 2025 by rpki-client