$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68af590c-4741-37c7-949d-da22dfb40bf3.roa File: 68af590c-4741-37c7-949d-da22dfb40bf3.roa (raw, json) Hash identifier: cMfDYdk8PySILzMZQtJAmgV3f+EVoV6PvaTU4S3/dk4= Subject key identifier: 43:81:B8:14:49:84:2D:AB:6C:D5:B7:02:D1:94:CF:F7:C8:5C:0D:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD627EF827B6A36D58117A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68af590c-4741-37c7-949d-da22dfb40bf3.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 19836 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:7e:f8:27:b6:a3:6d:58:11:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=5cc7b661-1991-40cc-8193-2f36fb9171c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:22:67:b6:c0:34:15:18:ba:ee:7a:ad:c1:be: 67:ea:f1:49:4b:07:cd:e0:76:59:5f:a9:1e:24:71: 65:7c:a5:2f:9e:5b:38:f8:f6:1e:95:01:97:ab:c1: 01:1c:34:4d:52:51:79:f5:69:c1:aa:01:69:44:12: a3:17:2e:e6:78:70:51:af:85:d1:2d:00:f4:b7:e6: f2:f8:35:6d:c6:09:9b:16:e8:8d:6b:e1:4e:9d:b5: 36:4a:8e:e8:0c:06:23:7e:bd:0d:d6:27:ce:8b:d4: da:36:2f:e4:ab:8a:22:1b:1d:2d:63:a4:b0:76:80: b9:07:e7:f7:19:4d:07:cd:bc:02:a3:9e:97:6f:72: ce:e1:dd:b2:68:bb:96:57:9e:95:42:08:55:11:6f: 12:83:aa:6f:1c:7c:4b:aa:f3:47:0d:c8:cd:19:f7: bc:12:1a:82:78:db:bf:78:65:86:0b:bf:29:91:fe: ad:08:7d:ea:06:66:8b:63:44:8f:e3:44:38:8f:6e: 73:b3:74:0d:28:c2:93:2c:df:bc:bb:0a:17:ed:89: 47:b3:ee:78:2e:f2:c7:d8:73:f7:9c:09:75:48:39: a1:19:30:09:77:e6:36:cb:25:88:9e:fe:f2:6c:6a: e9:b5:b1:4b:9a:c0:67:fb:62:3d:ed:5e:95:06:43: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:81:B8:14:49:84:2D:AB:6C:D5:B7:02:D1:94:CF:F7:C8:5C:0D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68af590c-4741-37c7-949d-da22dfb40bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:50:5b:7d:ec:70:c8:74:be:c2:a3:9f:0d:1f:af:48:51:77: 34:e8:a8:d0:bf:71:25:39:17:6c:2b:78:79:6d:18:4c:a8:4e: d4:04:f4:ce:93:25:c0:9e:e5:37:d0:59:b5:c9:94:bd:ae:2e: 34:ae:42:c0:df:c1:b3:a3:1e:6a:a7:ec:43:ed:b2:d4:62:2d: bf:f6:82:98:42:48:59:43:05:09:15:d4:34:79:c0:aa:47:d7: 93:27:de:28:85:50:80:fc:28:e4:ff:ec:0c:3e:3c:bb:59:20: 33:e7:18:7b:61:e0:87:b6:3d:4a:8c:5d:1d:50:88:14:c0:33: 66:b7:7d:5e:d6:3c:ee:70:72:8a:ff:28:40:19:86:b2:20:a7: 24:17:11:69:cc:15:5a:3a:eb:5e:3f:0f:4a:cd:fc:72:05:66: 2b:be:fd:2e:a0:68:bc:2a:e6:e6:4f:37:65:03:e7:89:ac:1c: f6:53:f5:e7:37:91:1b:3c:0e:9c:8a:a8:eb:cb:6a:7e:af:9e: 85:42:da:0d:43:7b:78:ab:92:f0:15:9d:e7:04:5d:16:bf:7a: 3a:1a:4b:33:63:04:03:d5:72:c8:c4:ae:12:9d:9b:96:d2:83: 28:79:8f:50:0c:f7:e4:6e:1b:d6:07:9f:6c:0a:41:67:e8:4c: 9f:38:dc:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYn74J7ajbVgRegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NWNjN2I2NjEtMTk5MS00MGNjLTgxOTMtMmYzNmZiOTE3MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iJntsA0FRi67nqtwb5n6vFJSwfN4HZZX6ke JHFlfKUvnls4+PYelQGXq8EBHDRNUlF59WnBqgFpRBKjFy7meHBRr4XRLQD0t+by +DVtxgmbFuiNa+FOnbU2So7oDAYjfr0N1ifOi9TaNi/kq4oiGx0tY6SwdoC5B+f3 GU0HzbwCo56Xb3LO4d2yaLuWV56VQghVEW8Sg6pvHHxLqvNHDcjNGfe8EhqCeNu/ eGWGC78pkf6tCH3qBmaLY0SP40Q4j25zs3QNKMKTLN+8uwoX7YlHs+54LvLH2HP3 nAl1SDmhGTAJd+Y2yyWInv7ybGrptbFLmsBn+2I97V6VBkMqkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOBuBRJhC2rbNW3AtGUz/fIXA2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjhhZjU5MGMtNDc0MS0z N2M3LTk0OWQtZGEyMmRmYjQwYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKJQW33scMh0vsKjnw0fr0hRdzToqNC/cSU5F2wreHltGEyoTtQE 9M6TJcCe5TfQWbXJlL2uLjSuQsDfwbOjHmqn7EPtstRiLb/2gphCSFlDBQkV1DR5 wKpH15Mn3iiFUID8KOT/7Aw+PLtZIDPnGHth4Ie2PUqMXR1QiBTAM2a3fV7WPO5w cor/KEAZhrIgpyQXEWnMFVo6614/D0rN/HIFZiu+/S6gaLwq5uZPN2UD54msHPZT 9ec3kRs8DpyKqOvLan6vnoVC2g1De3irkvAVnecEXRa/ejoaSzNjBAPVcsjErhKd m5bSgyh5j1AM9+RuG9YHn2wKQWfoTJ843Ig= -----END CERTIFICATE-----Generated at Wed Oct 29 07:07:54 2025 by rpki-client