$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c8f66d6-178e-396b-a65e-30df54026c3c.roa File: 7c8f66d6-178e-396b-a65e-30df54026c3c.roa (raw, json) Hash identifier: qOmDG4RU/tQI92Pjt9m0U3WZT5+CDinRbRvdVQJ2aLA= Subject key identifier: DE:5D:8E:2E:C3:BB:B7:AB:F5:F4:B9:E5:44:6E:BC:C4:AC:50:40:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA67F8899D634F0C510B500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c8f66d6-178e-396b-a65e-30df54026c3c.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 36620 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:7f:88:99:d6:34:f0:c5:10:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=c76db50e-8f42-4218-82e6-042fb4a675ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:02:99:e4:c1:49:59:74:49:43:66:2c:38: 60:ca:da:2c:69:9c:d2:0b:be:ec:90:5f:b5:c9:79: 77:53:90:db:ac:26:48:57:a8:ef:c3:03:32:13:88: c6:cc:08:f1:2a:72:3b:1b:1b:32:6a:87:18:5f:45: 6f:30:2b:35:de:1f:bd:27:19:7f:c0:0d:fb:81:01: 9c:18:1f:d1:3f:82:c1:29:be:14:00:57:a5:fa:64: 44:af:ec:02:67:00:c6:2a:12:a8:60:a7:17:0a:bb: aa:8e:77:a2:7d:14:4b:f7:35:17:c9:dd:f6:4b:0a: de:e8:dd:28:94:ba:ff:03:1b:29:15:23:0b:ff:7b: f8:28:3f:eb:45:97:ef:a0:0e:50:42:e3:0a:f8:23: 3e:42:02:5b:29:22:b7:20:37:c8:c9:95:5e:7c:9f: de:c9:d1:c7:5d:0a:5f:cd:df:ba:d6:85:8a:ab:19: 5b:27:98:c7:31:a4:f4:1a:8b:ed:1c:4c:8e:fd:37: fa:67:9e:4e:f3:63:bd:48:a1:b6:12:f5:c2:46:dd: a1:f0:2b:56:b4:ee:61:bc:ef:0c:6e:92:d6:c7:e0: 83:64:10:a9:e5:4c:e8:df:d6:72:1b:0d:c8:9b:77: d0:46:c4:f3:5e:56:07:9a:41:61:98:95:b8:fc:2e: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5D:8E:2E:C3:BB:B7:AB:F5:F4:B9:E5:44:6E:BC:C4:AC:50:40:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c8f66d6-178e-396b-a65e-30df54026c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:13:d7:ee:03:91:68:07:5f:5b:a7:e5:ec:27:2c:a7:af:e7: d9:49:6f:a0:db:58:b6:9f:4a:62:d7:ea:63:8f:ff:48:45:87: f3:7a:95:57:e8:21:56:71:1b:ec:14:1d:8c:e7:7d:e0:d1:68: e2:e5:e5:c2:c1:72:02:c2:cd:72:4b:8e:06:22:94:68:15:53: 74:00:b3:26:8c:cb:f2:8f:18:f3:60:2e:b6:a5:05:79:71:18: 5b:fc:5c:50:78:3d:b7:9a:77:5b:1c:31:fb:a7:c7:23:38:f6: 7c:13:89:73:3c:35:cb:20:e5:2d:b6:f9:67:86:9d:85:f2:d7: 32:33:74:d1:c3:35:47:59:f5:82:e5:ef:e6:7d:f9:f2:03:29: e3:cd:b4:3b:de:40:19:4a:19:a5:e7:85:83:a3:62:15:65:b7: 5b:0e:7c:3a:bc:d5:c1:c4:41:6a:7c:9b:d5:49:e8:23:d4:10: ee:a6:25:68:80:b8:f8:2d:de:8e:55:66:06:91:86:15:df:f6: b0:a3:fb:64:77:f8:01:88:e3:41:a9:12:e0:3d:b1:f7:f6:33: 13:67:6f:26:bd:72:1e:ff:c2:11:01:6b:c8:2c:bb:99:55:c2: 9b:a2:ac:23:86:a4:b8:c7:e8:88:0a:49:87:89:f2:0e:51:cf: fd:8d:4b:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpn+ImdY08MUQtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk Yzc2ZGI1MGUtOGY0Mi00MjE4LTgyZTYtMDQyZmI0YTY3NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N0CmeTBSVl0SUNmLDhgytosaZzSC77skF+1 yXl3U5DbrCZIV6jvwwMyE4jGzAjxKnI7GxsyaocYX0VvMCs13h+9Jxl/wA37gQGc GB/RP4LBKb4UAFel+mREr+wCZwDGKhKoYKcXCruqjneifRRL9zUXyd32Swre6N0o lLr/AxspFSML/3v4KD/rRZfvoA5QQuMK+CM+QgJbKSK3IDfIyZVefJ/eydHHXQpf zd+61oWKqxlbJ5jHMaT0GovtHEyO/Tf6Z55O82O9SKG2EvXCRt2h8CtWtO5hvO8M bpLWx+CDZBCp5Uzo39ZyGw3Im3fQRsTzXlYHmkFhmJW4/C7ehwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN5dji7Du7er9fS55URuvMSsUEDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2M4ZjY2ZDYtMTc4ZS0z OTZiLWE2NWUtMzBkZjU0MDI2YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4T1+4DkWgHX1un5ewnLKev59lJb6DbWLafSmLX6mOP/0hFh/N6 lVfoIVZxG+wUHYznfeDRaOLl5cLBcgLCzXJLjgYilGgVU3QAsyaMy/KPGPNgLral BXlxGFv8XFB4Pbead1scMfunxyM49nwTiXM8Ncsg5S22+WeGnYXy1zIzdNHDNUdZ 9YLl7+Z9+fIDKePNtDveQBlKGaXnhYOjYhVlt1sOfDq81cHEQWp8m9VJ6CPUEO6m JWiAuPgt3o5VZgaRhhXf9rCj+2R3+AGI40GpEuA9sff2MxNnbya9ch7/whEBa8gs u5lVwpuirCOGpLjH6IgKSYeJ8g5Rz/2NSyQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:38 2025 by rpki-client