$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a5b022-c5b6-36d5-b423-644f9048d819.roa File: d6a5b022-c5b6-36d5-b423-644f9048d819.roa (raw, json) Hash identifier: w6bKfiTWAmT2Py5Bckt4zR2HaXaEjR1d+sVuZw/gLJs= Subject key identifier: A0:77:A0:2D:EB:9C:24:AC:63:67:B5:B6:28:1E:86:48:6C:3A:82:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA671542BB537B8F1E48980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a5b022-c5b6-36d5-b423-644f9048d819.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396552 IP address blocks: 2620:0:5050::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:71:54:2b:b5:37:b8:f1:e4:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=212789d2-37b6-461f-a785-e911be5cf3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:16:6f:3b:ae:e6:3f:12:aa:01:02:10:4b: 0e:b9:71:03:25:27:3d:51:4a:f5:ba:0f:72:99:d2: 84:5f:fd:82:66:34:d9:35:89:c1:de:4e:b1:52:e4: 8a:5b:cb:c0:d9:19:4e:c2:d5:17:b2:73:dd:8a:46: 44:11:de:04:e7:03:5b:dc:ca:9f:19:76:45:1a:ba: d6:f8:fc:ce:9c:95:8f:e0:cf:b6:6f:40:d0:ed:30: ce:bf:5b:5f:1c:47:8a:8f:d5:27:6b:ac:08:fd:3d: 33:95:d7:21:c6:ee:31:f3:05:fd:3f:0c:8b:ae:c9: f8:d1:39:68:6b:15:0b:e8:92:66:3c:70:9b:7d:fe: 23:18:aa:e9:9b:75:01:00:87:75:e6:de:35:e7:47: 24:8c:91:9f:24:bf:b7:29:28:a6:5f:40:41:2f:2e: de:fc:15:c7:09:71:7c:2d:3d:21:ac:7f:87:64:66: 38:d9:1c:ad:0f:9f:c5:67:51:b8:c4:96:6f:04:34: 2c:3e:c4:c7:39:23:be:6c:b4:89:5a:e1:27:78:83: fc:5d:fb:5e:77:42:03:67:43:46:0e:7d:ed:3a:46: 65:53:03:63:93:10:b1:3f:0f:74:00:a0:14:79:b4: 58:77:dc:9b:d5:63:d4:41:00:dd:6b:af:f1:f0:b9: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:77:A0:2D:EB:9C:24:AC:63:67:B5:B6:28:1E:86:48:6C:3A:82:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a5b022-c5b6-36d5-b423-644f9048d819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:01:3f:bd:75:24:02:b0:af:e3:a0:dc:09:84:89:05:e6:23: b9:8b:3a:de:a9:c9:fd:25:ac:e2:54:f3:71:57:bf:f7:2e:1f: f3:b3:f6:26:1e:c2:f8:38:20:3a:2b:24:73:80:5a:57:e5:00: 9c:33:ea:aa:f5:c7:9a:9a:e4:39:99:40:89:ff:d3:0e:b8:88: 35:a1:b3:e4:b7:83:53:61:e3:6a:1b:fc:14:e2:c8:c2:ee:4f: 79:7d:8b:1e:d7:6e:39:31:b9:3a:4a:cc:f1:e5:db:22:27:e4: f4:fa:4e:6b:57:58:ef:76:82:0a:54:e3:88:a6:38:fe:b7:46: 76:79:a4:f6:47:a4:b9:2f:9e:61:8d:9d:ea:29:e1:df:d4:18: 91:dc:3a:bd:27:6f:a5:c3:16:9a:c6:c4:0c:5d:d3:a3:a0:79: 0a:5e:a7:81:04:c4:fa:1f:e6:c9:a3:61:a3:74:6e:ed:be:f0: 75:80:cd:a5:4f:bb:79:7f:04:d6:a3:5b:cc:5c:ee:ae:08:fb: 35:fe:d3:93:bb:89:7c:8a:4f:56:f0:89:90:7c:06:39:17:e9: ee:39:02:79:a2:9e:2f:fe:eb:85:0e:5c:72:58:6f:8a:26:d2: 2b:07:fc:b8:8a:ea:51:2e:02:77:d6:00:36:7c:3d:0a:88:0c: 9c:4c:e7:5f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErMpnFUK7U3uPHkiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjEyNzg5ZDItMzdiNi00NjFmLWE3ODUtZTkxMWJlNWNmM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDYWbzuu5j8SqgECEEsOuXEDJSc9UUr1ug9y mdKEX/2CZjTZNYnB3k6xUuSKW8vA2RlOwtUXsnPdikZEEd4E5wNb3MqfGXZFGrrW +PzOnJWP4M+2b0DQ7TDOv1tfHEeKj9Una6wI/T0zldchxu4x8wX9PwyLrsn40Tlo axUL6JJmPHCbff4jGKrpm3UBAId15t4150ckjJGfJL+3KSimX0BBLy7e/BXHCXF8 LT0hrH+HZGY42RytD5/FZ1G4xJZvBDQsPsTHOSO+bLSJWuEneIP8Xfted0IDZ0NG Dn3tOkZlUwNjkxCxPw90AKAUebRYd9yb1WPUQQDda6/x8LlR3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKB3oC3rnCSsY2e1tigehkhsOoIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDZhNWIwMjItYzViNi0z NmQ1LWI0MjMtNjQ0ZjkwNDhkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7AT+9dSQCsK/joNwJhIkF5iO5izreqcn9Jazi VPNxV7/3Lh/zs/YmHsL4OCA6KyRzgFpX5QCcM+qq9ceamuQ5mUCJ/9MOuIg1obPk t4NTYeNqG/wU4sjC7k95fYse1245Mbk6Sszx5dsiJ+T0+k5rV1jvdoIKVOOIpjj+ t0Z2eaT2R6S5L55hjZ3qKeHf1BiR3Dq9J2+lwxaaxsQMXdOjoHkKXqeBBMT6H+bJ o2GjdG7tvvB1gM2lT7t5fwTWo1vMXO6uCPs1/tOTu4l8ik9W8ImQfAY5F+nuOQJ5 op4v/uuFDlxyWG+KJtIrB/y4iupRLgJ31gA2fD0KiAycTOdf -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:57 2025 by rpki-client