$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa File: d7a1ef72-c7a6-3596-ad41-57b127359de1.roa (raw, json) Hash identifier: 40rCdRtSbFGtU4QeWgM8265x8tgpsDTL2hfVUEKG0DA= Subject key identifier: 36:D5:37:90:A7:25:3F:69:8A:67:65:66:6C:CF:CC:AC:49:74:C1:BD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA66BF9BDDC5D23F3F43680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396555 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:6b:f9:bd:dc:5d:23:f3:f4:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=d8ffdaf6-1be7-483f-b0fc-239201d0a96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:34:f4:1b:e6:6b:cd:8c:0d:23:fb:ad:22: 53:7d:68:40:f0:4c:e7:b4:49:ee:61:fa:9d:4f:fa: f0:22:48:2f:6d:a6:93:64:d9:a0:bf:84:ee:b7:c4: c3:a8:44:1f:10:d3:17:2a:e2:1e:2b:34:75:a8:84: 35:42:11:fd:7b:82:9e:b1:39:27:7d:c1:73:d6:be: 15:49:ea:b1:90:c4:3c:fb:30:69:fa:67:6a:9b:5b: 43:03:80:21:14:07:b2:d8:e2:3d:9b:00:7c:ba:b8: 56:71:60:e6:71:17:af:68:14:da:5b:5c:be:3a:d4: a7:3b:ed:d5:2f:c9:42:38:43:9a:5b:dc:7a:15:43: 88:3e:8c:47:4e:50:31:2c:04:0e:08:d2:ac:8e:f6: 63:17:2d:50:93:06:ea:21:5d:2d:20:8a:50:1c:8a: c7:6d:77:a7:22:11:e0:2d:6a:16:a0:62:7f:3f:a1: 24:c4:01:1e:4c:b1:1d:d4:32:41:14:7a:fe:56:b7: 6c:fa:97:c2:c4:1a:1c:1d:dc:f1:07:c9:6d:a2:fe: 4c:0f:05:e6:78:fb:cd:19:42:8b:80:75:38:56:7e: 9a:c4:57:36:ab:11:4c:24:9b:b9:bf:ad:7b:14:f8: f1:31:72:3d:19:b2:af:c0:47:1c:23:8c:40:98:0f: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D5:37:90:A7:25:3F:69:8A:67:65:66:6C:CF:CC:AC:49:74:C1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:90:a3:81:53:29:6d:64:11:56:c3:02:a3:cd:d6:ba:30:dc: 09:be:df:3e:2d:af:5e:96:4c:79:9b:f4:5e:4f:f8:c9:90:52: 14:ef:2d:1c:cf:4b:08:65:25:b1:e8:5e:39:04:47:32:51:46: 00:68:d0:af:3d:77:d7:f8:2e:2d:d9:09:1e:65:d9:b8:34:1d: c1:f8:61:51:93:db:0e:a8:62:5f:10:97:bb:63:7f:33:82:69: 12:12:65:aa:c9:51:17:b0:08:39:59:e2:b2:1d:55:a0:77:e6: 8a:ee:9c:a1:05:c8:85:b4:46:d2:91:d0:43:5f:1f:1b:8b:74: c8:58:d3:9e:03:0b:de:d0:73:5e:40:72:ad:f1:71:02:68:fa: da:c7:1a:40:94:f6:24:e6:b2:8d:9d:8b:f4:42:08:78:c3:5c: 41:bf:d8:1c:8d:86:02:03:ee:bf:82:b4:e0:2c:98:7f:90:7f: e1:99:b5:d8:da:27:08:db:ec:e9:c3:25:51:c4:5f:76:af:47: b1:0d:a2:d1:a2:4e:31:9e:b0:84:f9:a8:c5:de:04:eb:9f:02: a8:ff:ba:71:f0:34:72:2c:27:62:7e:d2:d5:20:23:28:df:99: 21:08:f9:b2:8d:f7:ea:14:62:79:6f:1a:f7:c2:37:53:9f:18: 72:5f:07:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpmv5vdxdI/P0NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDhmZmRhZjYtMWJlNy00ODNmLWIwZmMtMjM5MjAxZDBhOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Q09Bvma82MDSP7rSJTfWhA8EzntEnuYfqd T/rwIkgvbaaTZNmgv4Tut8TDqEQfENMXKuIeKzR1qIQ1QhH9e4KesTknfcFz1r4V SeqxkMQ8+zBp+mdqm1tDA4AhFAey2OI9mwB8urhWcWDmcRevaBTaW1y+OtSnO+3V L8lCOEOaW9x6FUOIPoxHTlAxLAQOCNKsjvZjFy1QkwbqIV0tIIpQHIrHbXenIhHg LWoWoGJ/P6EkxAEeTLEd1DJBFHr+Vrds+pfCxBocHdzxB8ltov5MDwXmePvNGUKL gHU4Vn6axFc2qxFMJJu5v617FPjxMXI9GbKvwEccI4xAmA8rKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDbVN5CnJT9pimdlZmzPzKxJdMG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdhMWVmNzItYzdhNi0z NTk2LWFkNDEtNTdiMTI3MzU5ZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALeQo4FTKW1kEVbDAqPN1row3Am+3z4tr16WTHmb9F5P+MmQUhTv LRzPSwhlJbHoXjkERzJRRgBo0K89d9f4Li3ZCR5l2bg0HcH4YVGT2w6oYl8Ql7tj fzOCaRISZarJURewCDlZ4rIdVaB35orunKEFyIW0RtKR0ENfHxuLdMhY054DC97Q c15Acq3xcQJo+trHGkCU9iTmso2di/RCCHjDXEG/2ByNhgID7r+CtOAsmH+Qf+GZ tdjaJwjb7OnDJVHEX3avR7ENotGiTjGesIT5qMXeBOufAqj/unHwNHIsJ2J+0tUg IyjfmSEI+bKN9+oUYnlvGvfCN1OfGHJfB3c= -----END CERTIFICATE-----Generated at Sat Aug 23 18:53:57 2025 by rpki-client