$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa File: 5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa (raw, json) Hash identifier: q00ABeq0WF2DgRi8G8xDMcvvJ1dO05Tp53hXKJoTD2Q= Subject key identifier: 33:F1:5E:9E:FC:3B:03:A2:A6:0C:D2:FA:6C:2D:1A:C0:53:93:7A:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA675FD5179B3829E936640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396599 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:75:fd:51:79:b3:82:9e:93:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=176b267a-2e86-4104-86aa-7afd381ea7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:5f:c8:6a:b7:40:a5:2e:f1:4f:57:50:7d: 67:3f:62:46:52:c7:7e:55:0a:94:7b:4e:c2:cb:35: 8a:85:a3:e9:5f:52:36:88:d5:63:f0:49:51:1d:82: 05:93:6e:f1:12:4e:59:7a:da:4e:34:a0:f0:c0:d4: bc:1a:98:c5:ca:9d:81:db:63:d2:9e:5d:86:11:07: 33:22:5e:73:09:7b:56:71:2a:65:e2:c6:f4:d4:58: 89:4b:7c:e9:ec:67:0e:f9:ac:e5:2c:7f:8e:6a:fd: c7:b9:d1:37:15:2a:35:8f:92:20:51:0f:77:89:04: 92:20:78:16:c1:a2:75:d8:96:41:e2:2f:32:52:a5: 15:dc:6f:1a:78:58:99:3d:9c:d8:b4:49:0c:d3:38: 64:3f:38:9b:aa:c4:e3:71:39:01:1d:5c:21:fe:93: a5:67:e9:38:12:e8:e2:7b:b7:6b:2a:3e:19:00:57: 05:a8:ba:e8:bb:20:09:35:63:28:09:55:86:4c:f0: 4e:15:74:a0:89:7d:04:ab:11:78:92:1a:c0:12:c8: 41:e2:b9:46:ea:87:77:0a:03:95:bd:e8:cb:f5:77: 6d:e9:20:b3:6d:16:64:63:d3:0b:c2:79:58:2c:6c: 6e:30:65:ae:d7:19:71:63:5d:d2:a9:40:a5:17:45: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F1:5E:9E:FC:3B:03:A2:A6:0C:D2:FA:6C:2D:1A:C0:53:93:7A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e3230de-d4a4-341c-b5f3-bbabf1d1657c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5a:14:dd:bf:95:b7:48:f0:91:25:88:34:b1:8d:43:f8:28: 61:b9:66:ab:29:5d:6c:b0:73:7e:61:c8:7c:53:b1:f7:9d:7d: 03:ac:10:e3:ea:85:e7:ee:64:6c:d8:90:7f:9f:a6:26:f0:48: cf:34:16:f5:b3:2e:07:af:ca:e1:86:e7:0d:8f:0b:0c:a0:76: 3e:ba:09:fe:55:3a:ca:08:9e:fe:7d:22:41:67:3a:d2:80:b3: 6e:a5:5e:4b:8d:62:55:20:fe:aa:c8:67:77:4b:76:c7:8e:09: ea:21:a9:b7:89:9c:bf:23:16:17:69:33:fc:c0:12:ce:b8:8f: 38:69:72:e5:d9:2f:3b:96:41:59:08:b7:1d:c4:46:61:f7:9f: cf:0a:4f:1c:7f:68:52:0e:0f:00:65:a5:78:b1:b9:7d:ef:b9: a5:37:61:23:42:21:93:84:3d:5e:6c:35:f7:6a:a5:d2:2c:13: 2e:19:84:90:f0:06:2a:f3:fd:ec:4c:5c:ac:49:5d:c0:ff:eb: f6:25:80:a7:00:01:03:9b:19:62:c5:cd:41:bd:5e:47:83:9d: ef:54:ae:5a:7c:c1:71:f5:2f:94:82:03:68:9f:66:34:6b:ca: 12:71:26:87:75:84:14:66:b9:4e:57:7d:07:5c:11:71:bb:3d: 9e:7c:a9:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpnX9UXmzgp6TZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTc2YjI2N2EtMmU4Ni00MTA0LTg2YWEtN2FmZDM4MWVhN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaJfyGq3QKUu8U9XUH1nP2JGUsd+VQqUe07C yzWKhaPpX1I2iNVj8ElRHYIFk27xEk5ZetpONKDwwNS8GpjFyp2B22PSnl2GEQcz Il5zCXtWcSpl4sb01FiJS3zp7GcO+azlLH+Oav3HudE3FSo1j5IgUQ93iQSSIHgW waJ12JZB4i8yUqUV3G8aeFiZPZzYtEkM0zhkPzibqsTjcTkBHVwh/pOlZ+k4Euji e7drKj4ZAFcFqLrouyAJNWMoCVWGTPBOFXSgiX0EqxF4khrAEshB4rlG6od3CgOV vejL9Xdt6SCzbRZkY9MLwnlYLGxuMGWu1xlxY13SqUClF0XXOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPxXp78OwOipgzS+mwtGsBTk3oZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWUzMjMwZGUtZDRhNC0z NDFjLWI1ZjMtYmJhYmYxZDE2NTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBaFN2/lbdI8JEliDSxjUP4KGG5ZqspXWywc35hyHxTsfedfQOs EOPqhefuZGzYkH+fpibwSM80FvWzLgevyuGG5w2PCwygdj66Cf5VOsoInv59IkFn OtKAs26lXkuNYlUg/qrIZ3dLdseOCeohqbeJnL8jFhdpM/zAEs64jzhpcuXZLzuW QVkItx3ERmH3n88KTxx/aFIODwBlpXixuX3vuaU3YSNCIZOEPV5sNfdqpdIsEy4Z hJDwBirz/exMXKxJXcD/6/YlgKcAAQObGWLFzUG9XkeDne9Urlp8wXH1L5SCA2if ZjRryhJxJod1hBRmuU5XfQdcEXG7PZ58qVQ= -----END CERTIFICATE-----Generated at Sat Aug 23 19:49:16 2025 by rpki-client