$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7f32556-edd9-36cd-a6dc-d4c7c1c39266.roa File: a7f32556-edd9-36cd-a6dc-d4c7c1c39266.roa (raw, json) Hash identifier: 01KLg8mq/j4zuSpVM/t5cvyOOikE8TuEh3SF+C7PCyQ= Subject key identifier: C1:53:9E:8A:96:9F:2F:FA:B2:27:60:85:DB:1C:A4:25:FA:27:D7:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA6852E629B42EF1C5D2100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7f32556-edd9-36cd-a6dc-d4c7c1c39266.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396611 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:85:2e:62:9b:42:ef:1c:5d:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=67994c05-68d4-4ea0-b838-b2b11f3a9c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:e3:9f:71:16:0e:73:0d:6a:f7:cb:14:38: 29:03:ca:90:1c:95:5c:3e:4d:4a:d4:b8:8c:9d:b2: a3:67:f5:49:16:66:90:d6:08:47:72:e2:3c:98:d3: 51:ec:d4:01:0a:ea:51:63:c5:ef:13:af:a6:f9:43: 50:07:a9:a3:94:8f:fd:dc:00:3d:eb:d9:5e:91:b7: 01:c2:e7:4b:d2:16:3e:6a:68:76:8a:01:e7:88:5f: 80:50:90:de:6f:a8:68:b8:30:7f:4d:b8:2e:41:c5: 63:f6:a2:0a:04:91:ff:12:74:c9:41:21:5f:2a:84: 1d:51:dc:df:5e:1d:26:48:21:7a:96:74:8a:ef:ed: ee:68:a5:cd:e9:e9:d0:56:e9:bc:a3:a9:c9:f7:d5: 35:40:2e:70:6e:09:6e:d9:2a:4d:7c:ae:fe:13:bc: 79:50:9f:f9:50:c4:5a:ca:4e:9c:2f:ab:8d:9b:53: 2f:ca:e7:b0:da:16:c6:78:3a:db:a9:74:1c:fa:bd: 57:69:ce:9b:dd:ee:97:e3:25:d6:df:dd:b3:a9:6c: 9f:6d:d9:71:9c:b5:36:eb:d3:2b:86:fd:28:a5:94: 5b:23:69:9c:f0:a4:f4:66:f1:af:6c:8b:56:e8:76: 97:8d:91:f4:cb:4b:60:48:a7:3f:6e:29:e7:87:eb: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:53:9E:8A:96:9F:2F:FA:B2:27:60:85:DB:1C:A4:25:FA:27:D7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7f32556-edd9-36cd-a6dc-d4c7c1c39266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6a:4f:e1:fb:68:e5:2f:bb:cc:89:6c:73:bb:b9:2a:3a:72: 82:44:58:fe:83:de:a4:a4:8e:83:46:7f:ea:c4:ee:63:dc:94: 30:f5:4e:80:1f:31:3b:a0:45:42:b2:fa:50:9b:f3:2d:15:62: 21:22:53:ee:e8:32:82:d6:d1:73:84:4a:2b:01:51:37:71:d9: 60:76:4b:b0:a0:fa:ee:93:25:0d:38:4a:63:9f:6e:d6:fb:6a: 3b:10:9d:9e:77:7f:c3:e9:bc:20:f9:a6:a6:4a:61:17:9a:9a: 17:94:53:6c:91:e5:eb:9f:6b:ab:92:72:c7:95:d6:cc:b0:0d: 06:3f:14:b6:45:f3:73:9b:29:07:b3:94:92:81:c8:08:a8:eb: 78:a4:49:cb:17:b3:ed:23:e9:74:0a:a5:ed:fb:45:de:b8:ac: 0c:d9:e4:e5:c6:a8:77:72:e9:a9:cf:55:f9:73:5d:87:f2:7d: 76:fc:80:69:75:52:db:8e:88:bd:38:41:ea:34:79:dc:61:c3: a5:6e:e0:f8:1e:f9:70:cd:c1:84:6b:fd:ed:b9:d4:2c:3e:2e: aa:f0:96:16:7d:9b:09:4a:eb:f9:32:8e:84:ae:a3:b7:e8:0a: fa:4b:38:3a:a9:d5:e1:94:78:49:f9:d3:cd:c0:0d:1a:47:80: 9c:0f:56:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpoUuYptC7xxdIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk Njc5OTRjMDUtNjhkNC00ZWEwLWI4MzgtYjJiMTFmM2E5YzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKXjn3EWDnMNavfLFDgpA8qQHJVcPk1K1LiM nbKjZ/VJFmaQ1ghHcuI8mNNR7NQBCupRY8XvE6+m+UNQB6mjlI/93AA969lekbcB wudL0hY+amh2igHniF+AUJDeb6houDB/TbguQcVj9qIKBJH/EnTJQSFfKoQdUdzf Xh0mSCF6lnSK7+3uaKXN6enQVum8o6nJ99U1QC5wbglu2SpNfK7+E7x5UJ/5UMRa yk6cL6uNm1Mvyuew2hbGeDrbqXQc+r1Xac6b3e6X4yXW392zqWyfbdlxnLU269Mr hv0opZRbI2mc8KT0ZvGvbItW6HaXjZH0y0tgSKc/binnh+trLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMFTnoqWny/6sidghdscpCX6J9ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTdmMzI1NTYtZWRkOS0z NmNkLWE2ZGMtZDRjN2MxYzM5MjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVqT+H7aOUvu8yJbHO7uSo6coJEWP6D3qSkjoNGf+rE7mPclDD1 ToAfMTugRUKy+lCb8y0VYiEiU+7oMoLW0XOESisBUTdx2WB2S7Cg+u6TJQ04SmOf btb7ajsQnZ53f8PpvCD5pqZKYReamheUU2yR5eufa6uScseV1sywDQY/FLZF83Ob KQezlJKByAio63ikScsXs+0j6XQKpe37Rd64rAzZ5OXGqHdy6anPVflzXYfyfXb8 gGl1UtuOiL04Qeo0edxhw6Vu4Pge+XDNwYRr/e251Cw+LqrwlhZ9mwlK6/kyjoSu o7foCvpLODqp1eGUeEn5083ADRpHgJwPVrw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:53 2025 by rpki-client