$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df4bf30c-b497-3cda-b0f7-8f97218ab739.roa File: df4bf30c-b497-3cda-b0f7-8f97218ab739.roa (raw, json) Hash identifier: iPmzUxIR6lH2sctHSmkoDO1TdBxQIPSjoJQbuvftzzQ= Subject key identifier: 3F:00:C8:AA:FC:31:5F:6C:4D:7D:0B:36:33:EC:42:32:8A:CF:9E:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACCA66F04310A61C096269200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df4bf30c-b497-3cda-b0f7-8f97218ab739.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 396566 IP address blocks: 2620:0:5050::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:6f:04:31:0a:61:c0:96:26:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=bf0082bf-321e-413d-a22e-7301fa1cc93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:2b:7b:29:ed:9d:57:6b:85:7d:f0:43:26: 35:45:b6:99:73:c2:81:99:f1:3b:4b:d3:66:7c:53: bb:4c:20:80:b6:97:49:ad:9f:e6:ce:4a:6e:c4:b8: ec:7f:f1:03:8c:8d:d0:ae:95:0a:1c:af:c2:74:df: af:ca:ac:b6:52:6a:d8:5e:29:40:4b:14:67:f5:5f: 38:9c:a4:01:1b:11:85:89:cf:8c:69:44:d4:61:45: 08:52:82:e1:c6:c3:49:63:ed:e0:a1:1f:79:08:d6: f0:27:e0:f2:c1:e4:b1:73:17:4e:c9:7a:30:bd:63: d1:bd:ca:40:46:7c:86:97:34:b7:01:dc:cf:dc:80: 85:0a:78:fa:15:e8:52:70:41:05:3f:22:e7:04:52: 07:f1:66:92:95:be:a4:6f:10:50:1c:f3:72:2d:95: f4:bd:b1:da:0c:4a:13:1e:ac:ba:0f:1d:bc:23:4b: c1:4d:c9:d0:4d:09:84:27:72:c8:f8:d2:ac:80:ce: 12:b1:92:f8:12:dd:28:c6:3a:e8:1c:7e:55:4c:27: 45:63:c8:96:3d:78:f0:56:b8:12:9c:af:c8:38:a1: f8:f5:2d:89:6f:9a:c1:b9:4a:c1:38:07:82:52:36: 79:fd:54:8d:ec:1c:7c:69:2f:d1:8c:d6:ea:40:59: a6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:C8:AA:FC:31:5F:6C:4D:7D:0B:36:33:EC:42:32:8A:CF:9E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df4bf30c-b497-3cda-b0f7-8f97218ab739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6c:85:4a:30:fd:33:2e:b7:06:ce:8a:1f:86:d8:99:a1:61: 69:be:a1:ca:f2:07:1e:7a:30:1c:d2:2b:75:92:97:a3:47:73: 96:1b:1e:72:9d:3e:59:4b:6f:60:c9:a0:b8:c4:40:3a:cf:dd: 60:7d:2f:d0:1a:ec:6a:0d:34:29:f2:a4:ad:71:21:73:5e:85: 58:1c:79:77:e5:77:c1:30:88:a5:f4:34:e9:e9:85:ae:6a:c2: 3e:86:dc:2f:2d:78:3a:31:44:26:9c:a5:49:e8:43:a4:37:74: 2f:23:5a:f6:91:32:e1:3e:a6:c9:9b:b0:fd:1d:ad:5a:7c:cc: 1c:51:03:88:1d:89:4f:c0:42:b9:6c:9f:49:3c:f0:9b:20:fa: 67:85:c1:24:b0:ce:90:af:3c:72:67:e6:78:06:12:a9:db:75: 79:5a:e9:69:02:b0:c1:fb:30:50:bf:b7:b4:18:0e:10:e8:15: e7:1b:f6:b1:8f:6f:48:fa:41:a6:63:9a:a3:a8:61:a0:b5:9a: ce:b0:18:9e:80:3d:7b:c9:a4:e0:41:63:f2:ad:ee:df:dc:bc: 41:da:dc:44:13:d2:83:de:47:b7:bf:e1:df:8b:c2:ca:5e:2d: 06:73:d7:d1:97:ab:0c:e1:d0:3d:40:93:28:dc:fc:3e:51:bf: 0b:9f:77:83 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErMpm8EMQphwJYmkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmYwMDgyYmYtMzIxZS00MTNkLWEyMmUtNzMwMWZhMWNjOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVkreyntnVdrhX3wQyY1RbaZc8KBmfE7S9Nm fFO7TCCAtpdJrZ/mzkpuxLjsf/EDjI3QrpUKHK/CdN+vyqy2UmrYXilASxRn9V84 nKQBGxGFic+MaUTUYUUIUoLhxsNJY+3goR95CNbwJ+DyweSxcxdOyXowvWPRvcpA RnyGlzS3AdzP3ICFCnj6FehScEEFPyLnBFIH8WaSlb6kbxBQHPNyLZX0vbHaDEoT Hqy6Dx28I0vBTcnQTQmEJ3LI+NKsgM4SsZL4Et0oxjroHH5VTCdFY8iWPXjwVrgS nK/IOKH49S2Jb5rBuUrBOAeCUjZ5/VSN7Bx8aS/RjNbqQFmm3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD8AyKr8MV9sTX0LNjPsQjKKz559MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGY0YmYzMGMtYjQ5Ny0z Y2RhLWIwZjctOGY5NzIxOGFiNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8bIVKMP0zLrcGzoofhtiZoWFpvqHK8gceejAc 0it1kpejR3OWGx5ynT5ZS29gyaC4xEA6z91gfS/QGuxqDTQp8qStcSFzXoVYHHl3 5XfBMIil9DTp6YWuasI+htwvLXg6MUQmnKVJ6EOkN3QvI1r2kTLhPqbJm7D9Ha1a fMwcUQOIHYlPwEK5bJ9JPPCbIPpnhcEksM6QrzxyZ+Z4BhKp23V5WulpArDB+zBQ v7e0GA4Q6BXnG/axj29I+kGmY5qjqGGgtZrOsBiegD17yaTgQWPyre7f3LxB2txE E9KD3ke3v+Hfi8LKXi0Gc9fRl6sM4dA9QJMo3Pw+Ub8Ln3eD -----END CERTIFICATE-----Generated at Sat Aug 23 15:02:05 2025 by rpki-client