$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa File: 05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa (raw, json) Hash identifier: vdkrRY48awW+f2nYPhBsH40bxCKrnpgx6m8/l/tSjaA= Subject key identifier: 4C:1E:49:4C:8D:7C:88:C2:AF:8C:06:A6:70:8F:BE:55:38:E4:92:6D Certificate issuer: /CN=9531f556-030e-49b4-a31b-60b469425432 Certificate serial: 010D0C9F4328584AC2E0FD0475EACEED6AFED580 Authority key identifier: 4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 2620:bc:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fd:04:75:ea:ce:ed:6a:fe:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9531f556-030e-49b4-a31b-60b469425432 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=fe8c4a39-a527-465e-ab06-6e5927ffd1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:c4:5a:26:12:c5:dc:78:63:9e:1b:39:b2: 10:3f:81:67:62:44:9b:af:34:f7:80:92:a5:78:63: 74:53:1c:14:d9:5d:6e:5e:7a:67:cd:e4:b3:26:67: a5:fa:f1:9a:c0:ce:ac:64:8f:c5:2d:fd:29:2b:d2: e6:ac:9f:45:ed:d6:34:7a:2e:a2:24:bf:90:7f:e0: b9:92:7c:cd:a2:57:ff:5b:a4:cd:98:51:1f:ac:72: 7f:4f:34:2d:7c:66:4f:b2:c1:45:07:e6:e2:a3:60: ad:08:56:b9:b4:6c:02:31:af:48:b6:d5:a9:73:6b: 74:55:16:72:9c:c8:09:bc:a5:68:90:6b:2d:ac:22: d0:5e:eb:27:26:15:6e:36:85:f7:85:4c:33:8d:7f: 15:24:ba:8f:e8:4d:d8:c0:4f:65:b4:e4:32:6a:ca: 96:13:0b:9a:99:67:7a:f7:04:a0:ba:45:01:0f:d9: 91:cd:31:92:ee:46:5d:b7:77:4a:46:93:6b:cb:ff: b9:a9:a9:52:11:d1:6c:2f:d6:d4:6d:71:d1:63:54: 3f:33:d3:fc:82:35:bd:a2:1c:cd:99:30:5f:cc:23: ac:3b:a7:0e:40:bb:a8:3d:cc:0a:a5:2b:8a:b7:3d: 4c:f4:13:68:52:7b:52:1a:ce:88:59:0c:ad:83:39: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:49:4C:8D:7C:88:C2:AF:8C:06:A6:70:8F:BE:55:38:E4:92:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl X509v3 Authority Key Identifier: keyid:4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer sbgp-ipAddrBlock: critical IPv6: 2620:bc:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2d:e5:e0:e7:e5:d1:8f:76:45:71:e1:1c:b0:01:67:75:02: e6:47:70:50:e4:ef:22:5f:9f:1d:0a:c4:2b:2c:ed:24:cc:40: 77:87:08:42:31:c3:95:20:05:5f:7d:fc:1a:7d:a8:84:fe:e1: 4b:57:a6:90:00:88:ae:41:49:fa:99:25:e7:80:85:70:c3:03: 9b:b5:2a:2a:1e:0f:c9:cf:20:6e:20:2a:ed:31:9f:52:2d:96: 68:f3:20:35:6f:7d:29:a1:cb:03:d3:78:cf:9b:06:04:02:db: 6b:f6:d0:e9:0f:f9:00:3e:e1:e3:32:c2:c4:6b:29:b6:55:6c: bc:d2:be:74:d5:03:3b:03:a4:10:bb:c0:25:dd:5f:4c:0c:b7: 6d:82:67:2d:b1:54:83:42:7b:bc:5b:de:28:94:f8:2e:d1:0c: 36:4a:06:92:78:dc:5f:ce:10:35:36:8e:60:b4:65:e7:59:60: 7f:11:96:7e:98:a0:e4:02:95:01:9c:9f:58:80:19:20:d3:46: 61:45:a4:15:b1:56:cd:17:50:c5:4f:92:4e:ae:e6:ae:e9:97: 52:15:7c:cf:9d:bb:61:a9:60:02:6e:4d:4c:4f:8d:98:9e:f0: 95:2e:bb:fe:35:ad:f5:86:f6:f1:85:bb:d4:90:56:b9:9a:54: 7b:75:07:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4P0EderO7Wr+1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUzMWY1NTYtMDMwZS00OWI0LWEzMWItNjBiNDY5NDI1 NDMyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmU4YzRhMzktYTUyNy00NjVlLWFiMDYtNmU1OTI3ZmZkMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9zEWiYSxdx4Y54bObIQP4FnYkSbrzT3gJKl eGN0UxwU2V1uXnpnzeSzJmel+vGawM6sZI/FLf0pK9LmrJ9F7dY0ei6iJL+Qf+C5 knzNolf/W6TNmFEfrHJ/TzQtfGZPssFFB+bio2CtCFa5tGwCMa9IttWpc2t0VRZy nMgJvKVokGstrCLQXusnJhVuNoX3hUwzjX8VJLqP6E3YwE9ltOQyasqWEwuamWd6 9wSgukUBD9mRzTGS7kZdt3dKRpNry/+5qalSEdFsL9bUbXHRY1Q/M9P8gjW9ohzN mTBfzCOsO6cOQLuoPcwKpSuKtz1M9BNoUntSGs6IWQytgzlVNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEweSUyNfIjCr4wGpnCPvlU45JJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NTMx ZjU1Ni0wMzBlLTQ5YjQtYTMxYi02MGI0Njk0MjU0MzIvMDVjNmQyMGUtYTJiZS0z ZTg2LWFhYzctZDI0YzJhNTVlMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTUzMWY1NTYtMDMwZS00OWI0LWEz MWItNjBiNDY5NDI1NDMyLzk1MzFmNTU2LTAzMGUtNDliNC1hMzFiLTYwYjQ2OTQy NTQzMi5jcmwwHwYDVR0jBBgwFoAUTqJQJ94jCWWBsX033oBeBXwIvEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NTMxZjU1Ni0wMzBlLTQ5YjQtYTMxYi02MGI0 Njk0MjU0MzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIct5eDn5dGPdkVx4RywAWd1AuZHcFDk7yJfnx0KxCss7STMQHeH CEIxw5UgBV99/Bp9qIT+4UtXppAAiK5BSfqZJeeAhXDDA5u1KioeD8nPIG4gKu0x n1ItlmjzIDVvfSmhywPTeM+bBgQC22v20OkP+QA+4eMywsRrKbZVbLzSvnTVAzsD pBC7wCXdX0wMt22CZy2xVINCe7xb3iiU+C7RDDZKBpJ43F/OEDU2jmC0ZedZYH8R ln6YoOQClQGcn1iAGSDTRmFFpBWxVs0XUMVPkk6u5q7pl1IVfM+du2GpYAJuTUxP jZie8JUuu/41rfWG9vGFu9SQVrmaVHt1Byo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:26:07 2025 by rpki-client