$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395702b1-2a93-30d6-9dfd-40173a9df9aa.roa File: 395702b1-2a93-30d6-9dfd-40173a9df9aa.roa (raw, json) Hash identifier: EAqOpVwa4PYcDVGoZMnJQd/x/yqC8yGi+U4QZBwy5Ug= Subject key identifier: C0:8B:65:C7:FD:2B:F3:6C:3D:C1:23:0A:9A:51:48:2C:EB:4C:1A:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA687F59945C1B422C61380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395702b1-2a93-30d6-9dfd-40173a9df9aa.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 36622 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:87:f5:99:45:c1:b4:22:c6:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=2cfd3de2-24b0-4fe5-a0bc-ff7cdb98e4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d2:cb:8d:0f:0b:aa:bd:0f:da:4f:64:69:4e: b1:31:67:d4:21:b3:2a:86:75:ba:43:1d:a7:81:fa: 28:bc:d7:bf:21:7f:31:f1:3a:64:53:15:96:d9:ee: 21:d5:e2:d4:66:7b:6a:1d:87:9b:ab:80:72:4f:20: aa:27:9d:03:58:df:8c:79:1d:b7:01:64:56:e4:54: 24:52:7d:89:3c:b2:0b:96:80:25:78:14:30:85:42: 4d:15:cb:c3:bd:02:a0:9c:68:40:4c:fd:f3:d9:63: 31:c9:a2:ad:b5:a7:f6:1f:5f:36:45:b9:be:5d:cd: 9a:14:f5:cd:08:e2:f3:c4:25:b1:61:f4:a4:e3:28: e9:60:60:29:e8:57:45:ff:a3:21:5f:b9:0a:f6:d9: d4:43:2b:f9:ad:f3:e2:13:3c:bc:7e:60:bb:86:ea: 18:ae:10:cb:52:51:5a:ad:e4:d7:b2:72:d5:22:21: 23:39:69:e9:ac:0d:0a:72:62:8b:9f:da:63:15:16: 3f:fb:a3:72:2e:a7:23:f0:b8:a3:19:a6:20:68:ea: 2e:56:ec:da:b3:91:c9:21:4e:44:4d:50:38:ad:95: 9e:de:21:7f:8c:cd:c7:3f:dd:ed:78:34:34:93:86: 19:22:f9:c8:fd:08:9e:66:ab:cb:1f:b2:37:30:ca: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8B:65:C7:FD:2B:F3:6C:3D:C1:23:0A:9A:51:48:2C:EB:4C:1A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395702b1-2a93-30d6-9dfd-40173a9df9aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ca:55:28:cb:12:ff:2c:98:c5:11:bb:3a:75:0b:65:87:b4: cb:69:f6:c7:4b:8e:dc:c6:0f:0f:b2:0c:66:13:cf:39:9b:9d: d2:99:b1:9a:81:b1:6f:66:a2:c3:f1:92:c2:98:e8:85:f9:d2: d5:3f:c2:39:10:ad:c7:a1:e3:4c:ff:e2:18:67:60:59:04:83: a7:e1:2a:72:e2:fe:52:27:89:29:4a:d7:a2:d6:ff:b7:7a:b1: 15:bc:61:55:b2:ff:d8:be:77:81:1c:d0:8c:24:29:87:5e:a4: e8:ec:db:40:50:be:5e:7b:99:83:0a:38:1c:54:41:79:1a:df: 8b:f8:24:47:22:7f:ed:0a:fc:69:ab:42:7a:99:c1:4e:5c:07: 6b:4d:70:2b:35:5d:da:a8:db:6a:c7:f8:ea:e2:1d:18:ce:04: 71:c4:14:ff:bd:0b:10:44:9f:6b:b5:c0:64:d4:e7:77:0c:87: 92:d7:be:da:f6:01:36:f6:9c:f8:4e:9e:68:c9:76:33:33:a4: 14:cc:57:b9:08:0a:e2:5c:3b:6a:f3:d3:20:15:a1:99:21:80: 71:b9:92:6d:91:58:bd:ee:a0:56:6e:89:2b:5d:9f:5b:cb:b8: ac:07:a2:b4:71:32:e2:de:a2:26:ea:9c:6b:3f:ed:3f:96:7e: 6a:94:7a:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpof1mUXBtCLGE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmNmZDNkZTItMjRiMC00ZmU1LWEwYmMtZmY3Y2RiOThlNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9LLjQ8Lqr0P2k9kaU6xMWfUIbMqhnW6Qx2n gfoovNe/IX8x8TpkUxWW2e4h1eLUZntqHYebq4ByTyCqJ50DWN+MeR23AWRW5FQk Un2JPLILloAleBQwhUJNFcvDvQKgnGhATP3z2WMxyaKttaf2H182Rbm+Xc2aFPXN COLzxCWxYfSk4yjpYGAp6FdF/6MhX7kK9tnUQyv5rfPiEzy8fmC7huoYrhDLUlFa reTXsnLVIiEjOWnprA0KcmKLn9pjFRY/+6NyLqcj8LijGaYgaOouVuzas5HJIU5E TVA4rZWe3iF/jM3HP93teDQ0k4YZIvnI/QieZqvLH7I3MMrsFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMCLZcf9K/NsPcEjCppRSCzrTBrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzk1NzAyYjEtMmE5My0z MGQ2LTlkZmQtNDAxNzNhOWRmOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLKVSjLEv8smMURuzp1C2WHtMtp9sdLjtzGDw+yDGYTzzmbndKZ sZqBsW9mosPxksKY6IX50tU/wjkQrceh40z/4hhnYFkEg6fhKnLi/lIniSlK16LW /7d6sRW8YVWy/9i+d4Ec0IwkKYdepOjs20BQvl57mYMKOBxUQXka34v4JEcif+0K /GmrQnqZwU5cB2tNcCs1Xdqo22rH+OriHRjOBHHEFP+9CxBEn2u1wGTU53cMh5LX vtr2ATb2nPhOnmjJdjMzpBTMV7kICuJcO2rz0yAVoZkhgHG5km2RWL3uoFZuiStd n1vLuKwHorRxMuLeoibqnGs/7T+WfmqUejs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:59 2025 by rpki-client