$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d53caa1-1ed8-38df-a5c0-08c5decfb3ad.roa File: 3d53caa1-1ed8-38df-a5c0-08c5decfb3ad.roa (raw, json) Hash identifier: stRtkGt79NSM++S3gI6urBwHX+lUGB1HV7Pc/JeSXmM= Subject key identifier: B1:59:61:83:A0:9B:A6:2C:57:CF:E9:AA:74:A0:AC:4B:19:BD:10:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD627E4A24ECB71CA755EEC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d53caa1-1ed8-38df-a5c0-08c5decfb3ad.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396562 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:7e:4a:24:ec:b7:1c:a7:55:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=aeb547e2-f59b-43e0-88b6-eca41cddd427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:18:01:5d:f8:f9:65:75:b2:91:03:32:b1: 6f:92:be:e8:3b:59:a6:94:19:b4:3c:ed:69:a5:d1: 2b:78:28:ba:96:ab:6f:1c:7e:27:86:4e:c4:1a:3c: c2:f0:68:fa:ff:e1:29:ce:00:67:50:4d:85:c9:24: f4:5d:06:52:a3:7f:24:ed:87:a9:df:da:e2:52:ae: 0f:0f:67:5e:6d:48:4d:c2:e3:3c:e1:b0:59:14:cc: f6:0c:4a:7e:e6:40:88:e8:a8:c9:3f:84:e0:36:08: 27:10:bd:b5:3a:55:75:d5:95:53:5b:8d:80:0f:46: 13:f0:13:16:c2:ea:17:e0:50:e4:37:0e:ff:7e:14: a3:e8:6b:e2:fd:d8:88:84:24:50:4d:94:1c:ca:f1: 6a:3c:d1:4b:95:49:a9:c8:0c:72:f6:b3:fe:8e:7b: 47:51:84:4e:d8:22:cf:33:44:b9:6d:e0:e0:e4:19: b6:f8:76:10:72:d3:17:7d:de:cd:a9:22:c1:ca:26: 88:2d:73:a3:bc:cc:67:46:60:43:5a:1e:46:08:cc: f8:e6:5f:df:51:0b:17:2f:62:74:93:c2:b7:2a:bc: 3c:75:17:66:75:4a:79:ce:bb:a5:f7:98:28:46:da: 22:51:7a:5b:97:08:21:33:a7:ef:48:32:ab:27:0b: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:59:61:83:A0:9B:A6:2C:57:CF:E9:AA:74:A0:AC:4B:19:BD:10:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d53caa1-1ed8-38df-a5c0-08c5decfb3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a5:60:be:c4:ca:96:4d:da:f0:08:ca:da:71:25:28:c2:68: da:81:46:5b:7a:00:44:50:32:d2:b0:54:a0:a7:e5:78:0d:ed: 65:9b:b2:01:1e:81:d6:22:4e:a8:70:80:d3:4a:6f:ed:b2:95: a1:c7:90:cb:0a:63:14:3c:86:64:c4:0c:96:cd:79:b5:ac:70: 59:36:71:40:5a:87:1a:58:c5:f7:a9:34:67:69:c0:c5:bb:3c: 00:fc:2c:6f:5d:cc:59:34:1b:33:3d:0f:4f:67:9a:bc:91:07: e2:7b:8e:69:0d:9d:f6:81:2c:49:5b:fa:dd:c1:a6:a4:ad:1b: 11:67:d6:95:1f:4f:6f:cf:d0:1b:50:1e:31:18:31:28:38:c4: d1:b7:b5:d6:44:84:61:e3:68:cf:d3:39:dd:26:fa:7c:c0:b2: c6:b8:d0:55:78:5a:05:42:00:b0:a1:52:be:12:57:f3:ba:af: a3:85:5b:c8:14:27:42:52:87:0d:a3:1d:56:6f:6d:49:f8:bc: 95:b9:26:58:a2:fa:dd:72:9e:f7:84:3e:75:e0:34:20:dd:f5: 93:89:a6:00:ff:5e:bd:0b:1a:89:ec:5d:03:5d:5c:30:90:db: be:5f:ad:fa:3f:1c:9f:a8:b4:73:28:51:c8:0f:39:fa:f3:0d: 33:f9:4b:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYn5KJOy3HKdV7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YWViNTQ3ZTItZjU5Yi00M2UwLTg4YjYtZWNhNDFjZGRkNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCQYAV34+WV1spEDMrFvkr7oO1mmlBm0PO1p pdEreCi6lqtvHH4nhk7EGjzC8Gj6/+EpzgBnUE2FyST0XQZSo38k7Yep39riUq4P D2debUhNwuM84bBZFMz2DEp+5kCI6KjJP4TgNggnEL21OlV11ZVTW42AD0YT8BMW wuoX4FDkNw7/fhSj6Gvi/diIhCRQTZQcyvFqPNFLlUmpyAxy9rP+jntHUYRO2CLP M0S5beDg5Bm2+HYQctMXfd7NqSLByiaILXOjvMxnRmBDWh5GCMz45l/fUQsXL2J0 k8K3Krw8dRdmdUp5zrul95goRtoiUXpblwghM6fvSDKrJwtP3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLFZYYOgm6YsV8/pqnSgrEsZvRDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Q1M2NhYTEtMWVkOC0z OGRmLWE1YzAtMDhjNWRlY2ZiM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKlYL7EypZN2vAIytpxJSjCaNqBRlt6AERQMtKwVKCn5XgN7WWb sgEegdYiTqhwgNNKb+2ylaHHkMsKYxQ8hmTEDJbNebWscFk2cUBahxpYxfepNGdp wMW7PAD8LG9dzFk0GzM9D09nmryRB+J7jmkNnfaBLElb+t3BpqStGxFn1pUfT2/P 0BtQHjEYMSg4xNG3tdZEhGHjaM/TOd0m+nzAssa40FV4WgVCALChUr4SV/O6r6OF W8gUJ0JShw2jHVZvbUn4vJW5Jlii+t1ynveEPnXgNCDd9ZOJpgD/Xr0LGonsXQNd XDCQ275frfo/HJ+otHMoUcgPOfrzDTP5S6c= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:43 2025 by rpki-client