$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0da78fad-d003-3f4b-b3d2-ef23d8bc213d.roa File: 0da78fad-d003-3f4b-b3d2-ef23d8bc213d.roa (raw, json) Hash identifier: IRrs0eW+3LvlBS6ZvGenLdZavQ2HAzg46WfyG6Qbn7M= Subject key identifier: CA:06:AF:40:CC:54:7A:4D:A7:3B:22:18:0C:42:A4:CA:39:C5:A6:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD62786FC722A7395AA23240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0da78fad-d003-3f4b-b3d2-ef23d8bc213d.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396565 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:78:6f:c7:22:a7:39:5a:a2:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=a5f0d746-ae18-49ae-a3bd-c74779c9d91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:56:ca:56:a1:67:6c:37:9f:f4:5b:b4:a0: 1c:f3:eb:b4:4b:bc:d9:ed:8b:e3:c5:a2:55:e1:7d: 93:c3:92:cd:2b:39:85:64:e9:54:59:51:dd:3c:39: 5d:a2:a8:e4:61:d2:d2:47:d5:dd:b3:fe:bb:e8:a1: 15:55:ba:6b:85:49:24:44:a8:6f:d4:2a:49:e6:49: a3:ca:b3:b7:c9:ef:8e:d4:b2:d9:4e:bb:cd:69:ed: 64:a2:cc:b1:93:6c:2f:d7:7e:1e:2c:e4:9c:f1:0f: 17:f8:fb:52:38:22:f4:8b:2a:d9:89:52:42:c2:cc: 2f:5d:91:05:bc:3b:3e:52:54:84:7c:56:fe:78:fb: 9f:e9:ce:f1:2e:84:62:7f:69:cd:7d:e5:ca:21:66: 58:d5:1e:61:c6:2c:8d:14:d9:8f:ae:97:ea:33:bc: 3b:04:f0:60:14:df:d0:d4:2a:5b:9f:42:5d:76:34: 09:8e:4f:60:45:b5:32:23:08:f2:20:98:d4:2a:4c: 43:a9:7b:cc:91:1a:23:88:de:24:4a:a7:8f:d9:90: a6:1d:78:c7:a9:c0:45:4b:01:01:b8:a6:29:04:28: 8e:95:7d:4a:c3:46:0e:7b:24:4d:9e:25:73:95:9c: 45:6d:0f:54:06:5c:c4:70:45:3d:00:e0:1e:98:9c: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:06:AF:40:CC:54:7A:4D:A7:3B:22:18:0C:42:A4:CA:39:C5:A6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0da78fad-d003-3f4b-b3d2-ef23d8bc213d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:33:e0:74:bc:e4:99:ec:31:11:56:14:f4:2d:46:77:73:54: a2:7b:9b:ef:27:98:5f:c7:38:66:e2:c8:ec:16:22:ca:6c:2d: 81:b4:55:f5:59:20:45:64:2d:9e:06:7a:5e:f1:f2:08:b6:c0: 68:90:fe:26:eb:9f:60:12:ba:94:fa:4f:2a:65:18:73:8f:57: 95:26:75:00:4e:ed:31:39:6e:6e:99:2b:51:2d:f3:ec:ab:ff: 73:f7:f1:a4:e6:1b:66:d0:f2:49:4c:a5:9b:31:7d:62:94:4c: ca:d0:32:cc:71:2b:1c:aa:ef:7c:b6:f7:5f:05:04:af:61:da: 39:c9:6e:56:ea:4a:fa:7d:23:e9:c6:7b:9e:af:99:7f:da:13: 7f:08:32:74:50:e8:65:9a:7c:3d:dc:46:7d:fa:2c:9e:90:23: d3:f8:0f:a0:57:41:14:37:7c:8e:53:e2:ff:20:c8:ba:5f:ec: c3:18:20:e7:d1:3e:b9:ad:0e:ec:7d:3d:0e:46:81:27:fa:28: 51:04:ed:5f:ea:84:8a:0a:18:c2:09:f2:7b:db:a4:96:50:32: 41:ec:e7:25:26:eb:82:c8:4f:6a:80:81:1d:35:d9:fc:aa:0d: f0:4f:67:dc:ce:ed:c0:d8:0d:39:62:02:ca:c5:5d:c3:1b:e7: 56:c2:f6:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYnhvxyKnOVqiMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YTVmMGQ3NDYtYWUxOC00OWFlLWEzYmQtYzc0Nzc5YzlkOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgZWylahZ2w3n/RbtKAc8+u0S7zZ7YvjxaJV 4X2Tw5LNKzmFZOlUWVHdPDldoqjkYdLSR9Xds/676KEVVbprhUkkRKhv1CpJ5kmj yrO3ye+O1LLZTrvNae1kosyxk2wv134eLOSc8Q8X+PtSOCL0iyrZiVJCwswvXZEF vDs+UlSEfFb+ePuf6c7xLoRif2nNfeXKIWZY1R5hxiyNFNmPrpfqM7w7BPBgFN/Q 1Cpbn0JddjQJjk9gRbUyIwjyIJjUKkxDqXvMkRojiN4kSqeP2ZCmHXjHqcBFSwEB uKYpBCiOlX1Kw0YOeyRNniVzlZxFbQ9UBlzEcEU9AOAemJxGfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMoGr0DMVHpNpzsiGAxCpMo5xaazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGRhNzhmYWQtZDAwMy0z ZjRiLWIzZDItZWYyM2Q4YmMyMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEQz4HS85JnsMRFWFPQtRndzVKJ7m+8nmF/HOGbiyOwWIspsLYG0 VfVZIEVkLZ4Gel7x8gi2wGiQ/ibrn2ASupT6TyplGHOPV5UmdQBO7TE5bm6ZK1Et 8+yr/3P38aTmG2bQ8klMpZsxfWKUTMrQMsxxKxyq73y2918FBK9h2jnJblbqSvp9 I+nGe56vmX/aE38IMnRQ6GWafD3cRn36LJ6QI9P4D6BXQRQ3fI5T4v8gyLpf7MMY IOfRPrmtDux9PQ5GgSf6KFEE7V/qhIoKGMIJ8nvbpJZQMkHs5yUm64LIT2qAgR01 2fyqDfBPZ9zO7cDYDTliAsrFXcMb51bC9kE= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:29 2025 by rpki-client