$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/167c5ed1-5d98-3295-aa66-625328074d3a.roa File: 167c5ed1-5d98-3295-aa66-625328074d3a.roa (raw, json) Hash identifier: Xvll6t0UI7uNqbG9X1GR9ht5K5yaVLRuyFkrAqARpTc= Subject key identifier: 96:1E:BB:61:4C:2A:F8:6E:16:91:D3:2B:4F:7A:0D:7A:61:B8:83:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD6280F0E0A3BD5FF5914900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/167c5ed1-5d98-3295-aa66-625328074d3a.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396545 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:80:f0:e0:a3:bd:5f:f5:91:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=9f645baa-b6fc-4909-a2ef-cb09cd00b781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:cc:f3:2e:4f:66:f6:a6:8d:72:4a:8f:fe: e7:31:9c:63:fb:db:c9:38:90:39:df:d5:a5:de:30: d1:f2:4b:68:60:ad:c8:66:25:37:d3:b6:6d:2a:30: d3:6e:14:b8:7f:11:84:77:69:32:fb:41:03:9a:6f: 10:98:0f:cc:cd:f6:06:52:74:88:f5:d1:0e:7c:ae: b7:ce:ef:43:26:0f:d0:36:3f:2f:61:9a:9b:17:ed: cf:f4:a9:0f:77:01:fe:10:2b:f5:4c:ce:dc:3d:f7: 4b:e3:cd:46:28:20:cc:c0:b9:46:f4:8e:fe:ba:73: 8b:51:bc:ce:7a:11:e1:c9:eb:07:f3:5c:7c:f6:6b: 63:b9:a7:c3:2e:75:76:1b:92:59:3e:c8:bc:41:4d: 82:31:eb:fe:87:7a:fe:5c:8c:14:b4:71:68:59:d3: 6a:e1:83:01:36:90:8b:b9:b8:28:90:1e:19:7a:d7: cc:cf:1c:2f:37:33:2d:25:ff:3b:d9:ad:71:a8:fe: cc:88:e0:d2:37:07:81:29:94:4b:71:10:f4:02:9a: 27:f0:0c:32:57:1e:d1:3b:3d:95:f4:7d:a6:60:a6: aa:ed:32:0c:98:be:42:19:74:82:34:67:3a:79:0a: 38:1a:d3:06:79:cf:44:eb:8a:f8:f6:0f:66:b3:fa: 29:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1E:BB:61:4C:2A:F8:6E:16:91:D3:2B:4F:7A:0D:7A:61:B8:83:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/167c5ed1-5d98-3295-aa66-625328074d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:50:00:f9:ff:a0:2c:d8:5d:f5:b6:f3:c1:c8:3c:fe:c6:4d: bc:21:e4:5a:e7:90:0e:04:29:7d:b4:02:f8:2b:8a:07:80:45: bf:1d:0e:66:4a:52:18:6b:9f:53:e3:99:8e:11:de:5c:8e:9f: cb:b8:76:8b:3d:57:74:54:4f:34:47:e2:28:df:4d:38:66:04: 1b:c2:92:6d:9e:81:2b:76:cb:8d:8d:d8:23:12:4c:4d:ca:d6: bf:c1:33:dc:4f:af:8b:23:63:24:cd:da:b7:50:ae:8f:3a:30: 0c:f1:09:8a:5a:8c:35:b2:f4:c2:a2:f2:b5:22:34:e5:7b:35: 25:10:ed:cc:4f:92:53:58:e6:13:c6:df:08:97:18:06:ca:6d: 94:8a:a4:0c:8e:10:fa:a9:5c:4b:67:a6:c7:9c:f3:3b:d0:00: f6:aa:f8:f1:99:67:62:17:e0:e0:63:23:9d:14:af:c1:3c:5a: 67:13:56:df:63:2a:7d:f4:52:74:c5:ac:03:59:98:f7:6b:f8: aa:ab:a7:73:3a:de:02:bc:1c:f4:bd:d4:81:e9:5c:a8:c2:62: f1:d7:18:6b:48:2e:d6:98:da:f3:e9:12:1b:94:7a:8e:32:27: d6:d2:ad:12:91:27:66:ae:bc:9b:4e:0b:b9:a7:71:5d:75:41: d3:b9:c5:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYoDw4KO9X/WRSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OWY2NDViYWEtYjZmYy00OTA5LWEyZWYtY2IwOWNkMDBiNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvnM8y5PZvamjXJKj/7nMZxj+9vJOJA539Wl 3jDR8ktoYK3IZiU307ZtKjDTbhS4fxGEd2ky+0EDmm8QmA/MzfYGUnSI9dEOfK63 zu9DJg/QNj8vYZqbF+3P9KkPdwH+ECv1TM7cPfdL481GKCDMwLlG9I7+unOLUbzO ehHhyesH81x89mtjuafDLnV2G5JZPsi8QU2CMev+h3r+XIwUtHFoWdNq4YMBNpCL ubgokB4ZetfMzxwvNzMtJf872a1xqP7MiODSNweBKZRLcRD0Apon8AwyVx7ROz2V 9H2mYKaq7TIMmL5CGXSCNGc6eQo4GtMGec9E64r49g9ms/opkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJYeu2FMKvhuFpHTK096DXphuIM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTY3YzVlZDEtNWQ5OC0z Mjk1LWFhNjYtNjI1MzI4MDc0ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZQAPn/oCzYXfW288HIPP7GTbwh5FrnkA4EKX20AvgrigeARb8d DmZKUhhrn1PjmY4R3lyOn8u4dos9V3RUTzRH4ijfTThmBBvCkm2egSt2y42N2CMS TE3K1r/BM9xPr4sjYyTN2rdQro86MAzxCYpajDWy9MKi8rUiNOV7NSUQ7cxPklNY 5hPG3wiXGAbKbZSKpAyOEPqpXEtnpsec8zvQAPaq+PGZZ2IX4OBjI50Ur8E8WmcT Vt9jKn30UnTFrANZmPdr+Kqrp3M63gK8HPS91IHpXKjCYvHXGGtILtaY2vPpEhuU eo4yJ9bSrRKRJ2auvJtOC7mncV11QdO5xd4= -----END CERTIFICATE-----Generated at Wed Oct 29 07:21:36 2025 by rpki-client