$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa File: a27aef5f-244a-32c0-8a62-33b6fd002957.roa (raw, json) Hash identifier: YDWtyB0285B1hWvbRoFyYDQQ2qpdtm+IqXnhG1m9FD8= Subject key identifier: 6E:29:F2:C2:70:7E:1B:33:9F:4A:26:04:D7:9E:8B:08:0B:BD:C7:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6869E733282F472061A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 36618 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:86:9e:73:32:82:f4:72:06:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=4952b3bd-3cf2-458a-8e3a-1ee8900a96d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:20:7c:17:1f:79:a5:71:65:b1:f5:ca:a2:0d: 70:fc:bb:cc:8c:71:84:c8:4b:b1:dc:1b:49:00:e1: 3a:45:8c:ee:f0:be:d4:2a:ec:e2:a0:85:3c:17:e3: 42:12:32:2e:18:19:f1:54:be:2f:7a:bd:a7:fa:73: c6:80:fd:10:89:ac:8a:73:2a:32:17:42:5e:75:8e: bc:ec:48:6a:7c:11:43:33:f4:93:a1:a0:4b:7b:34: ad:42:77:a1:b0:3f:1e:a6:24:83:69:76:7e:3e:c1: bb:71:d3:6f:a6:3a:b9:d3:01:0a:92:bb:35:43:c9: 76:be:c3:ce:f2:74:09:39:67:47:24:be:45:41:5a: 55:7f:19:f7:38:c5:58:ae:99:50:25:16:63:9b:6e: 4f:55:0d:b4:b6:3f:46:a0:bd:eb:97:c1:79:44:88: ad:1a:d6:b2:bc:d0:26:88:40:3b:66:6f:95:c4:ef: ce:f2:90:65:a4:32:2b:5c:63:ed:bd:ab:71:1c:e1: ba:84:a5:1c:2a:41:02:c4:d1:5c:e0:76:f7:ee:43: 19:cb:a8:bb:c1:d2:81:17:d9:1a:1e:ec:f9:1b:aa: f1:3a:ac:f4:de:94:ab:dc:16:48:2d:d1:53:12:f7: b2:71:81:fd:56:b2:66:05:af:9f:eb:ac:d5:63:59: 41:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:F2:C2:70:7E:1B:33:9F:4A:26:04:D7:9E:8B:08:0B:BD:C7:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:3b:21:b4:65:33:e4:43:ef:a9:7a:34:38:7b:f8:5c:3e:f3: 0f:aa:64:88:3a:f8:2c:20:59:c4:59:a4:d8:a9:57:6d:73:cc: ab:c8:9b:8d:2a:07:fc:23:ac:2f:d9:9b:0b:59:c1:3f:11:01: 87:47:03:e7:2f:c6:8c:dd:84:eb:a2:bf:5b:84:b3:2c:4e:90: a0:ff:e3:6a:f1:a8:ae:80:f5:35:40:04:5d:ab:c3:44:24:ec: 62:eb:c4:dc:aa:02:d0:31:30:6e:5a:2d:f3:f1:a3:6c:ab:c3: 31:ae:27:e8:68:32:5a:6a:38:1e:3a:9d:c4:ad:94:2d:2c:5e: 1c:5f:c8:32:d9:bc:3c:78:4f:31:50:99:b6:61:eb:0d:af:c9: 90:34:aa:d6:b6:57:9c:6d:d7:d6:a0:00:b0:b9:bb:99:a1:cd: 99:90:2d:47:8c:27:79:de:c1:80:b4:54:0a:b5:4b:13:b7:7b: 34:be:a7:71:3b:8e:8d:cf:d1:39:76:33:0e:7d:32:f5:eb:31: 43:5a:c4:f5:30:dd:ae:f1:92:5d:93:51:ff:6b:c6:ae:9d:42: c4:0c:b0:fc:db:12:5c:d7:34:f3:8e:a1:5c:07:4c:fd:f3:86: 25:30:4b:39:27:2c:8f:5d:9e:f6:e7:c3:d4:68:2a:46:68:90: 44:06:42:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpoaeczKC9HIGGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NDk1MmIzYmQtM2NmMi00NThhLThlM2EtMWVlODkwMGE5NmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSB8Fx95pXFlsfXKog1w/LvMjHGEyEux3BtJ AOE6RYzu8L7UKuzioIU8F+NCEjIuGBnxVL4ver2n+nPGgP0QiayKcyoyF0JedY68 7EhqfBFDM/SToaBLezStQnehsD8epiSDaXZ+PsG7cdNvpjq50wEKkrs1Q8l2vsPO 8nQJOWdHJL5FQVpVfxn3OMVYrplQJRZjm25PVQ20tj9GoL3rl8F5RIitGtayvNAm iEA7Zm+VxO/O8pBlpDIrXGPtvatxHOG6hKUcKkECxNFc4Hb37kMZy6i7wdKBF9ka Huz5G6rxOqz03pSr3BZILdFTEveycYH9VrJmBa+f66zVY1lBMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4p8sJwfhszn0omBNeeiwgLvcccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI3YWVmNWYtMjQ0YS0z MmMwLThhNjItMzNiNmZkMDAyOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKc7IbRlM+RD76l6NDh7+Fw+8w+qZIg6+CwgWcRZpNipV21zzKvI m40qB/wjrC/ZmwtZwT8RAYdHA+cvxozdhOuiv1uEsyxOkKD/42rxqK6A9TVABF2r w0Qk7GLrxNyqAtAxMG5aLfPxo2yrwzGuJ+hoMlpqOB46ncStlC0sXhxfyDLZvDx4 TzFQmbZh6w2vyZA0qta2V5xt19agALC5u5mhzZmQLUeMJ3newYC0VAq1SxO3ezS+ p3E7jo3P0Tl2Mw59MvXrMUNaxPUw3a7xkl2TUf9rxq6dQsQMsPzbElzXNPOOoVwH TP3zhiUwSzknLI9dnvbnw9RoKkZokEQGQlM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:47 2025 by rpki-client