$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4559bb40-9f55-3e2b-9c18-5a7f842c648c.roa File: 4559bb40-9f55-3e2b-9c18-5a7f842c648c.roa (raw, json) Hash identifier: 9+ognxxe8QRlvc+64609VZWe+x/SjnDD07eHX+S+p9I= Subject key identifier: CA:32:55:44:A4:DE:B5:66:8A:46:8D:E7:96:D9:75:83:7C:65:C6:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA667E148E2E88B023C64E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4559bb40-9f55-3e2b-9c18-5a7f842c648c.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396573 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:67:e1:48:e2:e8:8b:02:3c:64:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=a48d1f8f-d131-49ec-aac9-8e77fd255488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b3:b6:80:d4:85:ef:8b:6d:e8:03:88:10:67: 6a:36:11:67:36:e3:1c:76:af:c4:43:ae:d6:af:dc: 44:b3:f1:4b:da:3e:bf:f3:5c:55:2a:cd:66:fb:2d: 94:e3:a0:e3:6e:73:1a:4c:69:85:e7:29:ce:49:79: 46:db:85:81:4f:12:21:d6:72:e3:1f:e7:93:c0:fa: 9e:01:c6:1b:8e:21:f9:df:f8:96:73:40:68:b3:33: b4:b8:43:fc:c6:4c:d0:4e:6b:be:00:1e:00:af:2b: 90:f3:eb:19:61:f6:ee:ae:de:f5:e2:e7:ec:2b:a4: 32:eb:48:bf:4c:8f:f7:89:3b:21:39:9c:97:05:b1: 19:a4:17:b4:de:f3:01:04:ec:12:99:1c:fe:69:5c: d0:25:3b:6c:9c:bb:05:b6:ba:54:ec:d9:f1:6a:c6: 82:ab:37:7f:44:b3:41:01:3e:4a:77:36:e2:61:9a: ef:29:21:89:c0:9d:59:41:3b:a1:4e:47:00:af:2a: 35:95:8b:a7:fc:bb:ba:39:10:99:2e:22:84:47:81: b4:82:d3:4a:3f:79:3e:e2:14:e2:65:c0:d3:fc:0e: 83:2d:98:93:29:62:07:e9:a6:95:6b:18:a9:03:d0: 6b:d3:5e:12:04:07:62:a5:22:d3:6a:58:f5:54:c0: 69:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:32:55:44:A4:DE:B5:66:8A:46:8D:E7:96:D9:75:83:7C:65:C6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4559bb40-9f55-3e2b-9c18-5a7f842c648c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e6:a6:f4:b2:f7:ab:e0:01:e5:8f:12:9d:5e:3f:c1:22:7c: 9f:c8:53:30:42:3b:f8:9e:60:03:c7:e2:77:6d:26:bd:d5:07: 67:25:00:0d:d3:ee:1a:50:75:17:6e:74:ef:25:b8:7a:a0:5d: 8a:e4:ae:bb:fa:97:a6:9b:87:62:74:3d:b3:bc:e1:87:90:57: 9b:47:73:80:f7:85:b7:a2:b8:76:a2:e6:f5:5c:a8:b2:a9:3b: 3f:67:d4:19:3a:6b:42:57:7a:cc:8f:ba:16:01:19:b6:02:e7: 07:71:2b:d6:5b:27:59:37:9f:14:94:72:ab:69:48:e2:01:85: bd:7f:1c:64:69:0c:93:7b:2b:f6:6b:53:75:71:a4:b5:3c:5c: cf:84:3b:7e:d1:e6:a7:e8:ac:35:4a:cd:b7:32:4d:92:e4:e2: 55:34:dd:f1:c4:f8:93:76:9d:fd:62:a6:18:43:e7:7c:d3:9f: cd:35:40:e7:37:bb:0b:dc:a0:fb:14:a3:03:35:c2:31:40:30: 72:38:a9:69:6f:08:65:6d:7a:18:d2:9f:88:7e:ce:17:8a:00: 2d:4b:ed:2a:ea:9c:2a:85:4b:cf:8f:21:75:cc:d2:b7:eb:62: 35:d2:41:8a:aa:bb:86:b8:28:af:cd:a0:2c:6b:cb:f8:f6:7c: 18:39:e8:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpmfhSOLoiwI8ZOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YTQ4ZDFmOGYtZDEzMS00OWVjLWFhYzktOGU3N2ZkMjU1NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbO2gNSF74tt6AOIEGdqNhFnNuMcdq/EQ67W r9xEs/FL2j6/81xVKs1m+y2U46DjbnMaTGmF5ynOSXlG24WBTxIh1nLjH+eTwPqe AcYbjiH53/iWc0BoszO0uEP8xkzQTmu+AB4AryuQ8+sZYfburt714ufsK6Qy60i/ TI/3iTshOZyXBbEZpBe03vMBBOwSmRz+aVzQJTtsnLsFtrpU7NnxasaCqzd/RLNB AT5KdzbiYZrvKSGJwJ1ZQTuhTkcAryo1lYun/Lu6ORCZLiKER4G0gtNKP3k+4hTi ZcDT/A6DLZiTKWIH6aaVaxipA9Br014SBAdipSLTalj1VMBpGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMoyVUSk3rVmikaN55bZdYN8ZcbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDU1OWJiNDAtOWY1NS0z ZTJiLTljMTgtNWE3Zjg0MmM2NDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHmpvSy96vgAeWPEp1eP8EifJ/IUzBCO/ieYAPH4ndtJr3VB2cl AA3T7hpQdRdudO8luHqgXYrkrrv6l6abh2J0PbO84YeQV5tHc4D3hbeiuHai5vVc qLKpOz9n1Bk6a0JXesyPuhYBGbYC5wdxK9ZbJ1k3nxSUcqtpSOIBhb1/HGRpDJN7 K/ZrU3VxpLU8XM+EO37R5qforDVKzbcyTZLk4lU03fHE+JN2nf1iphhD53zTn801 QOc3uwvcoPsUowM1wjFAMHI4qWlvCGVtehjSn4h+zheKAC1L7SrqnCqFS8+PIXXM 0rfrYjXSQYqqu4a4KK/NoCxry/j2fBg56CQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:10 2025 by rpki-client