$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa File: 5d97d731-35fd-3e28-8224-78588f31f0da.roa (raw, json) Hash identifier: nrtEOKSin+9VItRjbOmsc+F72R+XakXm1SZ1ocUHya0= Subject key identifier: 23:40:44:DC:62:2B:C3:60:D3:59:41:9A:E6:6C:D8:B1:A3:15:78:86 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD627BDE7FAC720A8AC97300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396587 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:7b:de:7f:ac:72:0a:8a:c9:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=431b42f4-7633-4576-98cd-c6deac4f8f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:f5:d6:1e:09:ab:c7:8b:24:f5:ba:51:fc: 98:a7:8e:97:e4:ca:f0:0a:5f:c3:0e:43:23:83:47: af:86:52:9a:64:dc:6e:f6:0c:f6:80:4c:dd:e3:2e: ba:0b:b8:a8:75:e5:64:bd:bf:bd:ab:1a:25:c4:7c: 89:81:42:db:17:82:22:d3:f6:d2:f5:84:4b:70:1a: 13:74:c1:ec:fa:82:b2:c6:d5:3a:f3:eb:64:0f:a0: 29:8c:cb:7b:0b:7d:3a:79:f0:82:1c:1a:5c:6d:ce: af:cb:b9:11:e2:54:1f:19:2f:1d:2a:86:31:1d:31: a1:f8:1f:52:ce:ce:c7:9e:d9:5d:f2:99:da:68:37: a0:82:66:81:ab:70:74:2f:09:a3:54:8f:dc:93:76: 69:72:fc:4b:62:10:ed:f3:0d:f9:e6:8e:e3:83:4b: b8:07:1c:c6:ce:f2:9f:5e:25:11:5f:43:7b:1a:21: d4:80:66:c4:8f:5e:d1:8e:ef:02:14:53:36:c1:c2: dc:6d:5d:c0:99:e4:68:f4:23:ed:8f:ff:74:78:9a: fc:54:9a:f2:26:51:7f:1c:c2:43:c4:7f:b5:86:90: d7:66:fe:fb:91:70:5d:e2:bb:27:66:0e:1a:03:8b: 98:59:11:69:5e:85:44:84:4c:10:22:02:c7:c1:d5: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:44:DC:62:2B:C3:60:D3:59:41:9A:E6:6C:D8:B1:A3:15:78:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d97d731-35fd-3e28-8224-78588f31f0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:88:fe:4d:fc:0a:09:dd:35:07:76:f3:9b:ea:3e:2e:5c:47: ef:3f:49:eb:cb:97:aa:90:28:d6:de:95:63:1c:ec:81:8d:a6: 36:10:c0:cb:31:d6:8d:bd:17:25:a9:65:fa:15:16:aa:66:fa: 62:76:7a:1c:5c:d8:3d:ca:7c:f8:a2:34:b3:83:43:12:65:75: 39:83:29:a9:66:01:f7:9e:68:ae:fc:54:5c:c2:df:11:66:c6: 87:54:3d:99:34:fb:8d:1c:47:09:8e:89:3b:7f:ee:dd:41:72: 11:94:89:12:bc:9c:a4:49:21:72:ec:27:c8:bf:19:43:50:f0: de:d0:0e:17:3f:74:0f:57:ee:e8:d0:14:b7:d2:13:f4:f3:ef: 9e:ee:64:9f:a0:a2:a5:68:27:23:00:da:98:cc:eb:47:a4:55: 13:58:d5:20:6d:c3:29:11:bb:4a:62:05:dc:0e:b5:cb:a9:af: fc:91:1a:e2:54:13:39:32:b0:e6:84:9b:9f:75:db:80:d1:35: 43:9d:12:52:f5:16:64:30:90:60:b3:23:8f:e3:46:8e:57:48: fd:39:f9:df:10:a8:f3:bc:e9:d5:be:fc:39:27:2e:54:5e:98: 62:c4:65:34:ce:84:0c:04:a9:05:27:08:86:b4:08:38:6a:37: 94:00:0f:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYnvef6xyCorJcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NDMxYjQyZjQtNzYzMy00NTc2LTk4Y2QtYzZkZWFjNGY4ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pT11h4Jq8eLJPW6UfyYp46X5MrwCl/DDkMj g0evhlKaZNxu9gz2gEzd4y66C7iodeVkvb+9qxolxHyJgULbF4Ii0/bS9YRLcBoT dMHs+oKyxtU68+tkD6ApjMt7C306efCCHBpcbc6vy7kR4lQfGS8dKoYxHTGh+B9S zs7Hntld8pnaaDeggmaBq3B0LwmjVI/ck3ZpcvxLYhDt8w355o7jg0u4BxzGzvKf XiURX0N7GiHUgGbEj17Rju8CFFM2wcLcbV3AmeRo9CPtj/90eJr8VJryJlF/HMJD xH+1hpDXZv77kXBd4rsnZg4aA4uYWRFpXoVEhEwQIgLHwdXCBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNARNxiK8Ng01lBmuZs2LGjFXiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWQ5N2Q3MzEtMzVmZC0z ZTI4LTgyMjQtNzg1ODhmMzFmMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqI/k38CgndNQd285vqPi5cR+8/SevLl6qQKNbelWMc7IGNpjYQ wMsx1o29FyWpZfoVFqpm+mJ2ehxc2D3KfPiiNLODQxJldTmDKalmAfeeaK78VFzC 3xFmxodUPZk0+40cRwmOiTt/7t1BchGUiRK8nKRJIXLsJ8i/GUNQ8N7QDhc/dA9X 7ujQFLfSE/Tz757uZJ+goqVoJyMA2pjM60ekVRNY1SBtwykRu0piBdwOtcupr/yR GuJUEzkysOaEm59124DRNUOdElL1FmQwkGCzI4/jRo5XSP05+d8QqPO86dW+/Dkn LlRemGLEZTTOhAwEqQUnCIa0CDhqN5QAD8o= -----END CERTIFICATE-----Generated at Wed Oct 29 07:07:50 2025 by rpki-client