$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/50fb0826-ae25-3255-a9a4-adad53e55c17.roa File: 50fb0826-ae25-3255-a9a4-adad53e55c17.roa (raw, json) Hash identifier: mdV7Ae+hpz6BsZ5KNAjJkcEmNhL7VhMIeAiJlBZo+y4= Subject key identifier: 6F:FB:5A:B9:D3:71:A1:38:AB:F2:CF:F3:BA:50:30:29:7C:E3:B4:CD Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584B740DFA4A38F8C8A310D68380 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/50fb0826-ae25-3255-a9a4-adad53e55c17.roa Signing time: Wed 08 Oct 2025 12:09:38 +0000 ROA not before: Wed 08 Oct 2025 12:09:38 +0000 ROA not after: Tue 06 Jan 2026 13:09:38 +0000 asID: 16509 IP address blocks: 2620:1f7:c025::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:0d:fa:4a:38:f8:c8:a3:10:d6:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Oct 8 12:09:38 2025 GMT Not After : Jan 6 13:09:38 2026 GMT Subject: CN=947c2b7d-7039-4062-ab1b-5221b2e31fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:27:16:22:22:89:49:b1:3b:67:d4:20:e2:c5: 3a:38:9d:d7:bd:16:f8:61:54:03:2f:64:7f:78:5a: c8:60:8b:fe:69:f0:12:19:8a:62:61:9d:b2:a8:ee: 02:5c:f7:10:18:20:5f:bd:a8:65:2e:c4:52:a2:2f: 01:40:dc:ff:32:be:6e:0c:77:be:5d:4a:47:e8:bd: a4:41:8e:bf:33:b8:5f:1d:84:1c:cf:3d:ca:6d:cc: 4f:ab:19:d8:c4:0e:3c:75:26:ce:c3:fb:ab:b0:9f: 1e:4c:bb:b1:7d:ef:0f:ac:93:6b:fa:8b:51:2e:e1: fb:27:84:49:bf:e3:56:7e:ec:4a:1d:01:5d:cd:7f: 01:70:e6:a4:72:08:19:a8:52:ab:e1:41:19:0d:3a: 22:ed:44:2e:0b:ea:14:38:49:13:bd:a4:0e:79:73: b4:84:3c:d2:aa:5f:bb:df:62:5f:d7:2c:10:72:ab: ee:ef:01:33:41:6f:68:22:d0:76:4e:f5:33:b3:2b: e3:ad:dc:51:89:90:6d:b3:b4:3f:12:1d:5f:62:11: 62:e2:cb:84:97:81:5c:b3:18:94:04:dd:5a:5f:f4: b5:b2:72:07:b5:2f:2e:04:4c:d3:48:c1:14:2e:9d: 31:ea:39:05:1b:ba:2b:2a:31:be:71:8e:c6:fa:a5: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FB:5A:B9:D3:71:A1:38:AB:F2:CF:F3:BA:50:30:29:7C:E3:B4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/50fb0826-ae25-3255-a9a4-adad53e55c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c025::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:39:39:39:1e:18:32:8a:8e:11:de:c3:f1:d0:ff:5f:25:3a: e3:2e:f1:8a:e9:20:57:80:e6:59:3a:94:ba:73:3e:77:e3:61: d7:8a:5f:40:4e:53:10:2b:31:7f:b4:3b:5a:53:cc:ee:d8:0f: 5a:b5:99:a1:c5:e3:92:ed:d0:9e:1f:e9:79:7b:72:4c:86:7a: bf:7d:6e:41:1d:61:9a:21:b9:fc:a7:25:fb:77:df:16:e1:f7: a9:69:fb:77:0d:4d:c7:25:a0:38:97:c1:6c:78:94:5e:ff:df: 87:51:b0:df:57:a5:b3:26:29:89:50:e4:f9:85:52:b8:8a:de: 14:78:de:bf:61:32:16:66:2f:38:40:a2:20:3e:36:34:22:9b: 0a:c8:47:e1:af:b0:37:af:e7:6a:89:0d:76:c9:32:57:c3:23: 12:66:02:0b:81:47:8d:07:f4:09:53:3e:b1:0f:b0:f5:20:7c: 40:3d:a3:e9:40:18:18:c9:4e:f4:a9:22:3c:cb:a1:00:75:9b: 42:93:c1:8f:55:d0:47:2b:60:6a:10:29:75:67:7b:a0:eb:f3: 6a:74:c0:91:59:70:cf:83:51:c0:68:00:de:36:b0:47:51:fb: 2c:d9:b9:7e:76:be:ae:07:44:57:46:b4:57:81:26:fb:18:38: da:be:ad:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt0DfpKOPjIoxDWg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MTAwODEyMDkzOFoXDTI2MDEwNjEzMDkzOFowLzEtMCsGA1UEAxMk OTQ3YzJiN2QtNzAzOS00MDYyLWFiMWItNTIyMWIyZTMxZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCcWIiKJSbE7Z9Qg4sU6OJ3XvRb4YVQDL2R/ eFrIYIv+afASGYpiYZ2yqO4CXPcQGCBfvahlLsRSoi8BQNz/Mr5uDHe+XUpH6L2k QY6/M7hfHYQczz3KbcxPqxnYxA48dSbOw/ursJ8eTLuxfe8PrJNr+otRLuH7J4RJ v+NWfuxKHQFdzX8BcOakcggZqFKr4UEZDToi7UQuC+oUOEkTvaQOeXO0hDzSql+7 32Jf1ywQcqvu7wEzQW9oItB2TvUzsyvjrdxRiZBts7Q/Eh1fYhFi4suEl4FcsxiU BN1aX/S1snIHtS8uBEzTSMEULp0x6jkFG7orKjG+cY7G+qWKrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG/7WrnTcaE4q/LP87pQMCl847TNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvNTBmYjA4MjYtYWUyNS0z MjU1LWE5YTQtYWRhZDUzZTU1YzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98Al MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADM5OTkeGDKKjhHew/HQ/18lOuMu8YrpIFeA5lk6lLpzPnfjYdeK X0BOUxArMX+0O1pTzO7YD1q1maHF45Lt0J4f6Xl7ckyGer99bkEdYZohufynJft3 3xbh96lp+3cNTccloDiXwWx4lF7/34dRsN9XpbMmKYlQ5PmFUriK3hR43r9hMhZm LzhAoiA+NjQimwrIR+GvsDev52qJDXbJMlfDIxJmAguBR40H9AlTPrEPsPUgfEA9 o+lAGBjJTvSpIjzLoQB1m0KTwY9V0EcrYGoQKXVne6Dr82p0wJFZcM+DUcBoAN42 sEdR+yzZuX52vq4HRFdGtFeBJvsYONq+raI= -----END CERTIFICATE-----Generated at Fri Oct 10 20:22:17 2025 by rpki-client