$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8af1e3bf-54ba-35a9-9021-f4b1c490577e.roa File: 8af1e3bf-54ba-35a9-9021-f4b1c490577e.roa (raw, json) Hash identifier: IOV1JhWpM3hJYmbLcY/r0S6HGACcPvKmUmDXc6lHMXI= Subject key identifier: 50:50:05:99:D4:39:16:C7:BC:1F:ED:25:1B:6F:69:5D:4D:E5:01:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA680F5F3FEA319144F9640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8af1e3bf-54ba-35a9-9021-f4b1c490577e.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 40647 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:80:f5:f3:fe:a3:19:14:4f:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=7f4fc988-5dca-46c0-a7c0-944c1808dd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:f0:a5:b2:96:52:dd:27:ec:9a:2e:a6:05: 6c:6c:1a:b4:3f:24:e6:24:db:70:c8:85:78:00:f2: 92:65:91:ec:01:1b:8f:45:bf:5f:d2:b3:ca:f9:ea: df:d6:2b:d1:70:70:81:31:ec:5b:35:dc:78:ed:e9: 1a:a3:a3:6f:13:da:09:9a:a7:95:56:18:c6:a2:e4: 70:0e:ab:95:89:ee:72:14:1d:4f:a1:fa:b7:1e:32: 27:57:c6:b4:9c:cb:c9:62:9d:85:bf:59:26:e2:38: 5b:6b:7b:04:da:0b:33:1b:34:e6:6e:51:9a:6a:5b: cc:f4:ec:a6:22:c5:a5:5b:19:29:dd:05:ad:d1:93: 1d:b6:ed:b0:f1:35:f5:25:70:a2:95:58:8b:35:38: 0f:c4:ad:ec:31:64:94:a8:b5:99:98:ab:02:e6:67: d0:f0:75:5e:d1:21:97:ef:9f:a3:57:3e:34:d0:46: 0e:55:43:f5:dd:2f:47:2c:1b:04:32:02:20:2d:d7: 77:5a:9c:91:f8:d8:3e:b0:45:05:95:a6:0d:86:81: 0f:3a:30:e1:f8:bb:3f:e0:98:18:ab:20:70:81:6d: f4:50:01:2e:e5:83:a7:0f:43:6f:d2:a4:3c:a3:2a: 13:b1:06:84:1b:73:f0:be:e9:d6:59:c5:e7:1d:de: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:50:05:99:D4:39:16:C7:BC:1F:ED:25:1B:6F:69:5D:4D:E5:01:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8af1e3bf-54ba-35a9-9021-f4b1c490577e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:eb:6e:ba:b1:eb:0a:7b:f4:fb:15:be:ec:8d:e6:36:28:16: 97:e6:7a:40:15:4e:4f:12:15:72:f1:68:0c:a5:c5:65:19:3c: 5a:8c:0b:0c:1a:ca:20:f5:0e:bf:7b:80:db:e1:78:45:d3:9c: 4c:3c:0d:fa:22:a8:93:c1:64:ca:6a:ff:66:e8:2d:82:73:f2: cf:ed:e7:3b:37:84:2d:dc:ae:9f:85:7d:12:7f:55:9d:60:77: aa:2f:b4:a6:db:64:62:5a:00:56:40:79:f2:9e:19:c8:f1:be: 58:b3:3e:a0:5f:59:e2:b8:8f:8b:ea:88:4f:b3:67:00:49:08: 83:f7:71:58:51:d6:f1:2e:c8:85:eb:7e:17:09:a3:d6:dc:cd: 3a:5c:93:23:33:75:e4:aa:77:88:e7:1f:44:f1:64:5c:93:75: e1:11:a2:3d:d5:02:89:8d:0b:7f:50:24:ec:d2:f2:13:f2:24: 03:fa:98:2d:de:b5:a8:60:b5:49:94:66:42:df:4f:a2:a0:95: 2d:60:38:75:f2:1e:da:36:fd:64:5b:b7:c9:8b:fd:49:ab:13: ec:0f:e3:79:1b:1f:87:f0:bd:3e:7b:23:59:91:92:9f:04:c9: 9c:70:da:a0:d7:5a:07:49:0f:9b:2e:4d:8b:67:eb:b7:61:cd: 75:be:07:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpoD18/6jGRRPlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk N2Y0ZmM5ODgtNWRjYS00NmMwLWE3YzAtOTQ0YzE4MDhkZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmXwpbKWUt0n7JoupgVsbBq0PyTmJNtwyIV4 APKSZZHsARuPRb9f0rPK+erf1ivRcHCBMexbNdx47ekao6NvE9oJmqeVVhjGouRw DquVie5yFB1Pofq3HjInV8a0nMvJYp2Fv1km4jhba3sE2gszGzTmblGaalvM9Oym IsWlWxkp3QWt0ZMdtu2w8TX1JXCilViLNTgPxK3sMWSUqLWZmKsC5mfQ8HVe0SGX 75+jVz400EYOVUP13S9HLBsEMgIgLdd3WpyR+Ng+sEUFlaYNhoEPOjDh+Ls/4JgY qyBwgW30UAEu5YOnD0Nv0qQ8oyoTsQaEG3PwvunWWcXnHd54qwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFBQBZnUORbHvB/tJRtvaV1N5QHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGFmMWUzYmYtNTRiYS0z NWE5LTkwMjEtZjRiMWM0OTA1NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPrbrqx6wp79PsVvuyN5jYoFpfmekAVTk8SFXLxaAylxWUZPFqM CwwayiD1Dr97gNvheEXTnEw8DfoiqJPBZMpq/2boLYJz8s/t5zs3hC3crp+FfRJ/ VZ1gd6ovtKbbZGJaAFZAefKeGcjxvlizPqBfWeK4j4vqiE+zZwBJCIP3cVhR1vEu yIXrfhcJo9bczTpckyMzdeSqd4jnH0TxZFyTdeERoj3VAomNC39QJOzS8hPyJAP6 mC3etahgtUmUZkLfT6KglS1gOHXyHto2/WRbt8mL/UmrE+wP43kbH4fwvT57I1mR kp8EyZxw2qDXWgdJD5suTYtn67dhzXW+B0s= -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:44 2025 by rpki-client