$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa File: df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa (raw, json) Hash identifier: JF+B1aPWUceAjrNqqpfa24H+dj/5PlW8ffx/4+7vIgw= Subject key identifier: 70:2D:55:BD:96:5E:8E:82:68:DE:C1:EE:02:51:50:6E:0A:57:72:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA67CC1E16089F409F29840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396826 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:7c:c1:e1:60:89:f4:09:f2:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=1a273ce2-8c1e-4d8c-ad6e-ad4310cd7498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:8b:ff:16:d8:e8:9f:ac:81:6b:64:8d:bc: 85:d5:e5:95:d9:68:d9:2c:ef:c5:16:c8:93:f0:f1: 30:4a:ed:5f:4b:8d:71:60:c3:45:96:d3:0b:36:de: 77:7c:33:70:84:0e:c5:24:34:1b:bf:71:7c:64:67: e0:45:2f:9f:38:1d:92:9b:e5:72:39:a4:72:c4:42: 01:72:35:1b:de:08:0a:01:0f:27:37:ec:41:d8:31: ea:4b:94:07:de:10:46:ae:67:96:fd:d5:2f:b8:f4: c4:d5:c8:e6:32:d5:26:d5:74:a5:be:bc:2d:5c:91: ca:bc:77:3a:13:e1:1e:44:63:c8:3b:fe:20:ca:70: 31:56:20:51:ed:9f:c1:19:c7:23:45:22:f9:91:32: 80:84:23:cb:c8:6c:2d:77:c8:76:b9:fb:cd:b2:92: e3:d4:87:40:30:e2:47:15:f4:93:8c:35:a4:72:50: f9:57:8e:cc:79:ef:e3:51:76:48:0a:dd:26:50:e6: e6:d7:4a:49:62:1f:be:9a:71:7a:02:fb:b3:35:62: 0a:29:15:cd:da:77:ca:ea:f0:73:c6:59:e9:cd:af: 41:9c:3b:46:74:b9:2c:a5:1c:00:a7:a4:fe:01:00: d7:47:6c:c6:81:0f:98:0a:a5:05:92:a4:5f:7e:9d: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2D:55:BD:96:5E:8E:82:68:DE:C1:EE:02:51:50:6E:0A:57:72:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df07d75d-b1d5-302f-a154-5eeee3c8a79a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b3:d5:c0:c1:7e:bb:e1:85:e6:a5:e2:4a:b5:ba:e8:27:14: cb:f4:5e:6d:c7:01:53:39:af:31:cb:87:40:20:82:b9:b0:d9: 4e:0e:db:ad:26:ca:89:80:d0:61:eb:58:da:4c:ea:f8:eb:bf: 38:fa:07:33:9b:49:43:00:c5:05:41:a1:90:72:41:69:5d:bb: 1f:65:ee:ba:64:d7:b1:3f:2a:fa:33:43:2a:63:60:87:0e:50: c0:f8:40:48:06:8d:b7:99:40:2e:fe:f6:5a:cf:0a:62:1f:f8: 79:f1:71:e0:91:74:6c:88:3b:40:c8:d3:4a:75:4a:26:52:36: d0:a8:0c:0d:40:34:18:5f:b6:e4:42:97:f5:94:88:15:4d:eb: db:f3:1e:4a:89:b8:61:a8:95:36:b1:44:da:7d:0f:16:1b:aa: 91:d9:61:76:ee:1c:d1:2a:0f:f2:ec:4b:27:f7:19:90:f9:c2: d7:17:b7:9c:f5:c1:87:73:48:13:46:af:2d:c8:62:10:8b:bf: b6:f3:aa:f6:3c:86:dc:cd:fe:12:6d:ae:56:d7:ed:41:6c:c1: 26:d6:7d:be:54:73:b8:98:c3:33:f0:60:19:41:43:84:da:6f: 92:b4:7e:6f:0f:56:c0:f8:dc:81:4c:f2:fb:f3:bd:b2:36:85: e7:59:40:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpnzB4WCJ9AnymEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MWEyNzNjZTItOGMxZS00ZDhjLWFkNmUtYWQ0MzEwY2Q3NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1iL/xbY6J+sgWtkjbyF1eWV2WjZLO/FFsiT 8PEwSu1fS41xYMNFltMLNt53fDNwhA7FJDQbv3F8ZGfgRS+fOB2Sm+VyOaRyxEIB cjUb3ggKAQ8nN+xB2DHqS5QH3hBGrmeW/dUvuPTE1cjmMtUm1XSlvrwtXJHKvHc6 E+EeRGPIO/4gynAxViBR7Z/BGccjRSL5kTKAhCPLyGwtd8h2ufvNspLj1IdAMOJH FfSTjDWkclD5V47Mee/jUXZICt0mUObm10pJYh++mnF6AvuzNWIKKRXN2nfK6vBz xlnpza9BnDtGdLkspRwAp6T+AQDXR2zGgQ+YCqUFkqRffp01xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAtVb2WXo6CaN7B7gJRUG4KV3IQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGYwN2Q3NWQtYjFkNS0z MDJmLWExNTQtNWVlZWUzYzhhNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOz1cDBfrvhheal4kq1uugnFMv0Xm3HAVM5rzHLh0Aggrmw2U4O 260myomA0GHrWNpM6vjrvzj6BzObSUMAxQVBoZByQWldux9l7rpk17E/KvozQypj YIcOUMD4QEgGjbeZQC7+9lrPCmIf+HnxceCRdGyIO0DI00p1SiZSNtCoDA1ANBhf tuRCl/WUiBVN69vzHkqJuGGolTaxRNp9DxYbqpHZYXbuHNEqD/LsSyf3GZD5wtcX t5z1wYdzSBNGry3IYhCLv7bzqvY8htzN/hJtrlbX7UFswSbWfb5Uc7iYwzPwYBlB Q4Tab5K0fm8PVsD43IFM8vvzvbI2hedZQH8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:31:15 2025 by rpki-client