$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa File: 86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa (raw, json) Hash identifier: 2F/4MG1CqpEiWMt50V+GqzDJFCOtVDSJIz+hAvJACqw= Subject key identifier: E5:B6:58:49:F4:1A:02:35:69:9C:AD:51:71:EE:C0:79:C0:B7:6D:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD626DD9450F98F1DDB43980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 397200 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:6d:d9:45:0f:98:f1:dd:b4:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=39cfca83-455f-4f17-be4c-fb6e5fbd6076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:90:e7:cd:7c:1a:2a:a9:ed:55:78:86:4b:ea: 50:7b:f8:d9:29:a8:21:57:1f:9e:0f:24:84:d9:7c: 3b:ca:0a:c9:96:87:c7:0c:f4:ac:58:f9:1c:dd:13: ed:c3:65:80:3f:6c:14:ae:f6:31:33:0e:6b:9a:8d: 3f:c1:09:14:b9:f1:7a:56:92:16:39:e8:a1:3f:83: 00:93:7c:bb:e9:1c:5c:93:40:bb:c9:23:99:fc:83: 86:a1:46:67:07:4e:63:d9:d0:70:64:e1:d2:fc:ac: 59:35:a7:0f:04:11:fc:37:98:34:18:14:84:4a:98: d9:b5:da:e5:8c:83:a4:b7:7a:1a:3f:b0:3e:11:da: e4:2e:b6:44:f6:4a:7b:44:46:0a:d4:30:cf:b2:fe: 2e:f5:57:6a:eb:19:a7:43:88:5f:ed:af:cf:dd:d5: 45:8a:5d:4c:00:38:81:f5:be:67:27:58:a5:07:96: c1:2a:85:48:ba:13:d5:ee:7c:ff:f8:91:1b:da:43: 6b:a7:89:55:f9:65:b6:f8:10:2e:d6:89:af:ed:cb: 38:58:15:9c:18:73:7f:cf:2b:bf:5f:68:68:01:c5: 11:85:01:53:50:9d:a6:94:ea:6e:cf:67:5e:26:b3: 58:77:8d:b7:45:5d:bb:b4:88:60:ec:c8:bf:bc:d9: 26:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B6:58:49:F4:1A:02:35:69:9C:AD:51:71:EE:C0:79:C0:B7:6D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1e:72:11:9e:31:48:51:f2:30:c1:64:2f:6c:9f:4d:68:bd: 12:22:80:1f:c9:47:df:1e:6c:62:80:a1:0d:f7:5a:a3:b2:0b: 65:79:62:ae:81:82:16:56:b6:15:2e:55:9d:f8:4c:33:7b:34: 71:a7:07:ad:65:7b:ec:8a:51:53:23:2d:39:8c:10:cb:db:e2: b1:b8:93:18:77:5e:c8:fa:bf:cc:9c:66:19:09:4c:98:42:af: cb:38:b4:77:e7:8c:ab:f9:5b:38:a6:68:68:32:ac:ff:b3:da: e6:22:d3:25:fb:70:6d:8a:dc:da:93:bb:a5:f3:55:05:e8:38: f7:2a:1d:bc:a2:b5:52:aa:9a:45:7d:4a:e1:e2:33:d0:70:0b: 25:5b:f7:02:66:da:51:46:74:72:40:88:74:6c:1f:48:e9:97: a3:d3:3c:a0:55:38:73:37:99:71:67:16:93:39:3e:fc:3f:ef: 27:8c:0c:b7:ff:fa:44:4f:c7:70:9c:d9:f7:9d:87:49:b0:58: 7d:7e:04:c2:6d:b7:b6:26:d4:f7:23:71:70:a4:70:86:8f:54: ab:cf:42:fe:92:cd:67:09:c1:2d:22:45:53:2b:2d:db:52:cf: 25:12:0c:a6:ca:17:e0:73:c8:15:f2:15:71:1f:91:52:22:84: f9:ab:64:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYm3ZRQ+Y8d20OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MzljZmNhODMtNDU1Zi00ZjE3LWJlNGMtZmI2ZTVmYmQ2MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpDnzXwaKqntVXiGS+pQe/jZKaghVx+eDySE 2Xw7ygrJlofHDPSsWPkc3RPtw2WAP2wUrvYxMw5rmo0/wQkUufF6VpIWOeihP4MA k3y76Rxck0C7ySOZ/IOGoUZnB05j2dBwZOHS/KxZNacPBBH8N5g0GBSESpjZtdrl jIOkt3oaP7A+EdrkLrZE9kp7REYK1DDPsv4u9Vdq6xmnQ4hf7a/P3dVFil1MADiB 9b5nJ1ilB5bBKoVIuhPV7nz/+JEb2kNrp4lV+WW2+BAu1omv7cs4WBWcGHN/zyu/ X2hoAcURhQFTUJ2mlOpuz2deJrNYd423RV27tIhg7Mi/vNkmEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOW2WEn0GgI1aZytUXHuwHnAt23nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZiNjJkOTUtMWRkOS0z MmRlLWEzZmEtNGE5MmI0YTIyMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYechGeMUhR8jDBZC9sn01ovRIigB/JR98ebGKAoQ33WqOyC2V5 Yq6BghZWthUuVZ34TDN7NHGnB61le+yKUVMjLTmMEMvb4rG4kxh3Xsj6v8ycZhkJ TJhCr8s4tHfnjKv5WzimaGgyrP+z2uYi0yX7cG2K3NqTu6XzVQXoOPcqHbyitVKq mkV9SuHiM9BwCyVb9wJm2lFGdHJAiHRsH0jpl6PTPKBVOHM3mXFnFpM5Pvw/7yeM DLf/+kRPx3Cc2fedh0mwWH1+BMJtt7Ym1PcjcXCkcIaPVKvPQv6SzWcJwS0iRVMr LdtSzyUSDKbKF+BzyBXyFXEfkVIihPmrZBU= -----END CERTIFICATE-----Generated at Wed Oct 29 09:02:42 2025 by rpki-client