$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa File: ccdf304d-a1e6-3519-95bf-9427e16881bd.roa (raw, json) Hash identifier: Y4FXj1l4Xbbkb1jIdMDDZpsfrCZ6gQEGsnUbJemsEIk= Subject key identifier: 3C:A2:70:49:49:7C:9C:24:46:45:1E:B5:AC:B8:02:00:E1:72:AA:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA67805BE8FE5C381AB1800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 397208 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:78:05:be:8f:e5:c3:81:ab:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=d5c8e9bb-fb7e-4ffd-ae22-11f23efa4540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:c4:d8:47:54:ee:45:94:d5:05:75:cf:29: fc:09:ba:bb:a0:3a:d4:13:80:b1:d4:1a:0c:36:35: dd:7c:9c:06:8b:69:b1:18:11:ea:3b:fe:7d:76:e5: bc:21:41:2f:8a:5e:4a:f0:18:d8:19:c2:db:3c:ff: 76:8b:21:3f:29:df:f3:05:51:8c:da:2d:fe:93:01: 71:0c:93:43:4f:32:af:c7:9d:ec:d4:0d:09:50:95: 27:37:7b:f7:76:a3:08:d6:f4:5a:8e:c9:54:68:5a: 1e:0b:32:48:93:de:28:85:b6:34:15:8a:62:c2:f5: b7:4c:e7:b8:29:ed:31:6f:b2:95:b4:a7:a6:6d:fd: 76:95:f0:db:28:3e:ff:36:7e:ad:5f:80:c0:c8:1e: 05:20:ed:ab:67:4e:dd:20:bd:25:7e:50:17:40:d4: a4:02:88:85:e6:10:ce:02:50:12:51:a0:6e:d0:84: 52:c1:01:43:fe:e9:19:df:79:51:c6:1d:47:21:93: 7e:28:83:2b:64:5c:d5:d0:18:c7:2e:b8:7c:88:84: 8e:8d:b6:1f:e0:5d:58:a7:47:d4:0f:b2:25:58:c4: c5:86:d8:7f:14:1c:4d:12:75:00:47:78:ec:c9:5f: e9:05:b4:a7:5a:54:c2:f0:3e:e5:d9:4d:06:12:84: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:70:49:49:7C:9C:24:46:45:1E:B5:AC:B8:02:00:E1:72:AA:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a1:0d:64:08:a0:4c:c4:a1:20:89:c0:cb:84:2d:ff:11:24: c2:86:3a:9d:53:23:c9:03:fc:4d:b8:75:b5:80:36:57:90:c4: d0:f2:43:f5:f6:1b:57:ab:98:6e:d8:53:dd:cb:db:36:24:1e: c8:fb:a3:9f:fa:2d:b5:f3:9c:d3:e6:0f:d5:79:ec:38:c9:1f: c8:67:be:46:5d:5d:2e:b1:aa:37:1e:8f:65:86:ab:7c:9c:35: 73:b8:1f:cf:5d:2d:e9:0d:30:b6:a8:02:93:45:49:d1:2e:f1: 4a:98:be:ff:19:ee:f2:9d:8e:94:8e:b7:0a:43:16:3d:48:81: 83:00:ed:83:32:28:49:40:35:b2:11:da:3f:be:24:06:0c:46: 95:bf:4b:58:3c:86:d3:fe:fa:6f:63:29:03:59:27:95:3b:67: ba:8f:3f:47:95:cb:0c:6a:a1:ac:31:e7:0e:19:ae:a1:2b:ae: 6b:ca:22:88:ce:cb:e5:b2:57:eb:7e:b8:1c:d9:2c:61:fc:18: 79:ba:5f:a7:6c:89:86:1c:ed:ff:aa:8f:23:c4:94:25:d9:da: 45:c9:51:80:06:31:31:5a:1b:03:b0:45:9c:d0:77:1a:8d:cb: 81:34:d6:0f:99:19:42:cd:42:2a:46:8b:a6:c4:01:17:59:ef: d6:c4:61:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpngFvo/lw4GrGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDVjOGU5YmItZmI3ZS00ZmZkLWFlMjItMTFmMjNlZmE0NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml/E2EdU7kWU1QV1zyn8Cbq7oDrUE4Cx1BoM NjXdfJwGi2mxGBHqO/59duW8IUEvil5K8BjYGcLbPP92iyE/Kd/zBVGM2i3+kwFx DJNDTzKvx53s1A0JUJUnN3v3dqMI1vRajslUaFoeCzJIk94ohbY0FYpiwvW3TOe4 Ke0xb7KVtKembf12lfDbKD7/Nn6tX4DAyB4FIO2rZ07dIL0lflAXQNSkAoiF5hDO AlASUaBu0IRSwQFD/ukZ33lRxh1HIZN+KIMrZFzV0BjHLrh8iISOjbYf4F1Yp0fU D7IlWMTFhth/FBxNEnUAR3jsyV/pBbSnWlTC8D7l2U0GEoQiLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDyicElJfJwkRkUetay4AgDhcqoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2NkZjMwNGQtYTFlNi0z NTE5LTk1YmYtOTQyN2UxNjg4MWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH2hDWQIoEzEoSCJwMuELf8RJMKGOp1TI8kD/E24dbWANleQxNDy Q/X2G1ermG7YU93L2zYkHsj7o5/6LbXznNPmD9V57DjJH8hnvkZdXS6xqjcej2WG q3ycNXO4H89dLekNMLaoApNFSdEu8UqYvv8Z7vKdjpSOtwpDFj1IgYMA7YMyKElA NbIR2j++JAYMRpW/S1g8htP++m9jKQNZJ5U7Z7qPP0eVywxqoawx5w4ZrqErrmvK IojOy+WyV+t+uBzZLGH8GHm6X6dsiYYc7f+qjyPElCXZ2kXJUYAGMTFaGwOwRZzQ dxqNy4E01g+ZGULNQipGi6bEARdZ79bEYeE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:20 2025 by rpki-client