$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f37947-67aa-30f2-960b-3072be8ccaf3.roa File: 43f37947-67aa-30f2-960b-3072be8ccaf3.roa (raw, json) Hash identifier: ZWi5yZ0SUgDpf83wbqZfcGWhEaMHWiL3RLrNZKN7N+E= Subject key identifier: 28:28:9A:77:86:44:DA:A3:77:6F:5D:B2:93:E6:0C:92:CF:74:D5:ED Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6868C8C9256DE0EC99B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f37947-67aa-30f2-960b-3072be8ccaf3.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 36621 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:86:8c:8c:92:56:de:0e:c9:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=215a672b-a889-4721-af2c-d7462e414fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:ea:03:af:4b:82:c0:14:0d:3d:c7:2d:40: e7:58:a1:05:dc:93:5c:09:e5:ef:87:ba:61:f7:82: fd:46:c2:42:a8:06:2b:89:b0:c3:b5:1d:32:31:b0: ae:94:df:ee:9c:2e:a1:8a:a7:1d:4b:1e:43:6b:0e: f5:f0:a3:3d:6e:c9:b7:ed:2e:f0:61:e7:72:12:34: 50:97:73:d8:69:ed:ed:99:58:60:47:b9:da:0f:b3: 16:cc:30:70:39:1f:51:3d:9d:2a:7b:78:14:70:5b: 3a:50:8f:fa:4a:8f:e0:10:fe:dc:ef:50:e6:7d:ce: 23:1b:f3:85:95:58:4a:79:0f:4d:0e:25:f6:82:e9: 05:c6:92:6a:2f:a9:f6:fa:f2:b1:6b:8d:40:92:15: e5:6d:7e:97:c7:bc:c7:8a:fe:e5:0e:c1:fc:95:77: 37:0c:31:6c:88:77:13:6b:a1:67:88:6e:77:5f:6a: d9:7e:d9:2f:c4:32:a1:c7:64:22:76:78:98:c7:24: 40:89:cb:81:6a:47:30:52:91:1c:5b:64:9a:1a:2c: b5:5a:7c:bf:a0:eb:49:b4:70:48:c8:d6:a7:8a:7a: b7:8c:26:af:fc:39:21:ae:e9:45:1c:16:ab:10:d2: 73:7b:d5:85:d2:3b:c9:47:8a:86:ee:c5:eb:04:b7: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:28:9A:77:86:44:DA:A3:77:6F:5D:B2:93:E6:0C:92:CF:74:D5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f37947-67aa-30f2-960b-3072be8ccaf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:55:1d:22:55:73:3a:80:3b:82:44:a7:1f:ab:16:cf:3a:f0: 61:86:af:0b:d8:82:6a:d1:de:95:92:7e:58:d1:f7:4d:68:9a: 27:14:64:a0:45:2b:5a:11:71:ee:86:ea:33:58:07:63:51:d4: 55:96:7b:a6:d9:df:81:08:ff:d5:d9:13:d4:ba:7f:cf:9f:a2: 70:df:17:0a:05:64:50:9b:bc:38:af:aa:34:4f:dc:16:00:b2: 9c:5b:76:93:b2:f0:ca:4b:8e:90:a6:21:39:5b:0d:09:48:ba: 5f:c8:30:4d:d8:63:ae:75:79:cc:ca:cd:9a:d3:f0:9e:18:be: 71:3f:74:76:55:86:b0:59:30:11:81:aa:80:0d:64:98:8c:c6: f1:bf:f4:65:4a:9c:9b:d9:38:fd:5f:21:92:c2:ac:d8:42:69: c0:6f:7a:93:be:20:42:28:78:30:82:0f:78:2a:8b:8b:af:6c: 9b:aa:a0:90:ee:ac:b9:7b:26:33:9f:d1:ad:4a:8d:61:07:64: 11:a8:76:30:dd:c1:51:1a:44:ba:da:30:d5:19:60:2f:3a:95: 94:f0:04:fe:15:88:71:05:8c:30:cb:c2:79:c3:b2:d1:f9:ce: 7d:a8:46:e0:93:c6:81:50:72:06:b7:1b:c1:48:62:0b:a8:a8: 3c:bf:f9:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpoaMjJJW3g7Jm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjE1YTY3MmItYTg4OS00NzIxLWFmMmMtZDc0NjJlNDE0ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXHqA69LgsAUDT3HLUDnWKEF3JNcCeXvh7ph 94L9RsJCqAYribDDtR0yMbCulN/unC6hiqcdSx5Daw718KM9bsm37S7wYedyEjRQ l3PYae3tmVhgR7naD7MWzDBwOR9RPZ0qe3gUcFs6UI/6So/gEP7c71Dmfc4jG/OF lVhKeQ9NDiX2gukFxpJqL6n2+vKxa41AkhXlbX6Xx7zHiv7lDsH8lXc3DDFsiHcT a6FniG53X2rZftkvxDKhx2QidniYxyRAicuBakcwUpEcW2SaGiy1Wny/oOtJtHBI yNaninq3jCav/DkhrulFHBarENJze9WF0jvJR4qG7sXrBLcrZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgomneGRNqjd29dspPmDJLPdNXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNmMzc5NDctNjdhYS0z MGYyLTk2MGItMzA3MmJlOGNjYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIlVHSJVczqAO4JEpx+rFs868GGGrwvYgmrR3pWSfljR901omicU ZKBFK1oRce6G6jNYB2NR1FWWe6bZ34EI/9XZE9S6f8+fonDfFwoFZFCbvDivqjRP 3BYAspxbdpOy8MpLjpCmITlbDQlIul/IME3YY651eczKzZrT8J4YvnE/dHZVhrBZ MBGBqoANZJiMxvG/9GVKnJvZOP1fIZLCrNhCacBvepO+IEIoeDCCD3gqi4uvbJuq oJDurLl7JjOf0a1KjWEHZBGodjDdwVEaRLraMNUZYC86lZTwBP4ViHEFjDDLwnnD stH5zn2oRuCTxoFQcga3G8FIYguoqDy/+a8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:46 2025 by rpki-client