$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa File: 86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa (raw, json) Hash identifier: Gqksp9rl7Si5mTthx+YBxePWSkoA26jGA0amV13BUvc= Subject key identifier: 5E:4C:F3:76:4C:0A:E0:8F:B0:93:22:F6:81:E6:52:10:B2:86:64:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849EBEA6EA955E72762609FF740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 397200 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:6e:a9:55:e7:27:62:60:9f:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=0a25ff32-b1ed-463f-b82b-3448d9e382e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:13:6f:06:77:a0:51:0b:db:f8:2f:64:6b:7c: 35:83:2a:bd:3a:f0:fd:82:62:73:a9:fd:95:90:72: 2b:5a:6f:70:b2:be:3c:ac:53:0f:51:02:3c:a0:4e: 8b:1e:76:3c:81:6c:54:32:ae:44:7e:dd:60:32:9e: 2c:9d:ba:23:eb:06:6a:71:38:75:7d:3f:a4:c5:d8: 18:ab:fb:35:8d:1d:b7:f0:ec:38:01:08:16:86:8b: 5f:16:f1:55:64:5c:0b:9f:25:c7:ea:3d:4d:90:74: f2:9e:f9:75:cd:a6:d2:81:93:29:1e:88:e1:ab:e4: ae:50:bb:5a:21:63:cc:4a:24:46:46:ed:cf:93:96: 5f:db:56:8c:e0:84:91:6b:36:6e:ef:f1:fa:e8:1d: b0:61:1b:00:c9:94:b6:91:58:cd:49:81:d1:69:dd: d1:36:8d:b9:50:6e:ab:ed:ba:cf:43:d4:65:b8:9e: a7:57:44:47:16:29:0f:eb:78:b0:5b:d7:f9:87:ba: 36:14:bb:77:d3:89:bd:5b:19:7d:1f:b4:21:4d:81: b1:6e:f0:f4:ad:b9:15:fe:e6:23:14:53:83:ae:46: 00:22:5b:83:f2:fd:aa:02:34:68:ca:dd:6c:df:33: 6f:6b:9f:30:c1:2c:9e:41:d7:66:85:4a:cd:85:0d: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4C:F3:76:4C:0A:E0:8F:B0:93:22:F6:81:E6:52:10:B2:86:64:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:99:19:91:51:90:81:23:ce:2c:9f:ee:1c:ee:43:89:56:c7: a6:06:55:bb:be:34:d2:85:6e:2d:e4:47:6e:f7:09:01:49:e2: 36:61:73:cb:d4:09:e6:82:32:07:71:87:73:6e:31:ce:66:12: 40:da:1b:88:15:c2:23:32:8e:82:5c:22:48:65:d8:06:36:2d: 5e:fa:f4:84:39:fb:ca:1c:ad:4a:cc:d7:e8:e7:05:5b:46:ed: 3a:81:64:2a:76:c3:86:81:e2:1f:b2:f4:1c:1d:4d:a4:ac:eb: 43:40:75:cd:d2:6d:12:b3:7f:c8:b4:92:dd:50:ef:be:82:30: b2:02:ba:88:29:e9:f5:67:f4:db:73:aa:5e:31:ca:b3:14:1a: c8:90:0b:e3:d0:b6:c3:48:66:a3:1c:f7:d2:b1:fa:ac:d5:4d: 25:6e:df:8e:21:bb:f3:fe:34:a3:99:3d:b2:57:c8:c8:3d:f3: b7:bc:e9:da:de:90:4d:d2:95:b4:b1:50:6d:90:0e:25:f8:9d: 94:79:31:9a:55:3f:64:26:95:0a:50:db:ca:80:ef:0f:1a:4b: 5b:06:d6:b0:89:c7:b0:cb:30:ff:d0:90:2d:4b:17:24:51:78: 98:7a:1a:5e:48:0e:78:2a:56:2f:da:72:1e:0b:55:fd:d1:44: 2e:5a:14:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6m6pVecnYmCf90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MGEyNWZmMzItYjFlZC00NjNmLWI4MmItMzQ0OGQ5ZTM4MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxNvBnegUQvb+C9ka3w1gyq9OvD9gmJzqf2V kHIrWm9wsr48rFMPUQI8oE6LHnY8gWxUMq5Eft1gMp4snboj6wZqcTh1fT+kxdgY q/s1jR238Ow4AQgWhotfFvFVZFwLnyXH6j1NkHTynvl1zabSgZMpHojhq+SuULta IWPMSiRGRu3Pk5Zf21aM4ISRazZu7/H66B2wYRsAyZS2kVjNSYHRad3RNo25UG6r 7brPQ9RluJ6nV0RHFikP63iwW9f5h7o2FLt304m9Wxl9H7QhTYGxbvD0rbkV/uYj FFODrkYAIluD8v2qAjRoyt1s3zNva58wwSyeQddmhUrNhQ2P9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5M83ZMCuCPsJMi9oHmUhCyhmRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZiNjJkOTUtMWRkOS0z MmRlLWEzZmEtNGE5MmI0YTIyMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ+ZGZFRkIEjziyf7hzuQ4lWx6YGVbu+NNKFbi3kR273CQFJ4jZh c8vUCeaCMgdxh3NuMc5mEkDaG4gVwiMyjoJcIkhl2AY2LV769IQ5+8ocrUrM1+jn BVtG7TqBZCp2w4aB4h+y9BwdTaSs60NAdc3SbRKzf8i0kt1Q776CMLICuogp6fVn 9Ntzql4xyrMUGsiQC+PQtsNIZqMc99Kx+qzVTSVu344hu/P+NKOZPbJXyMg987e8 6drekE3SlbSxUG2QDiX4nZR5MZpVP2QmlQpQ28qA7w8aS1sG1rCJx7DLMP/QkC1L FyRReJh6Gl5IDngqVi/ach4LVf3RRC5aFGE= -----END CERTIFICATE-----Generated at Fri Jun 6 19:24:16 2025 by rpki-client