$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa File: a27aef5f-244a-32c0-8a62-33b6fd002957.roa (raw, json) Hash identifier: rP2PS9t51dtOtZnw7+17EyKMWhQNNSxEAbzpbsEbAiY= Subject key identifier: 7D:96:4F:B0:34:31:3D:F3:8B:68:83:4D:8D:60:A7:65:A6:07:78:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD62803776CE8DEE90BC1500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 36618 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:80:37:76:ce:8d:ee:90:bc:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=4682f4de-ab67-4965-97ad-240742ed837f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:07:21:9c:1b:38:48:c4:d4:00:81:a4:d2:29: b8:d1:d1:02:b0:6f:63:57:99:ab:23:b5:9c:7d:48: 57:66:b1:01:b6:a8:07:1c:08:a1:ea:5e:e0:5e:13: e0:f8:3c:d6:bc:e4:e2:cf:60:78:24:42:10:ea:95: e7:bc:64:3e:be:a1:67:67:c0:53:ba:e0:0a:ae:c8: 77:3a:cf:75:3b:d3:d4:53:f4:b6:68:47:1e:95:4a: 08:9a:a2:63:0d:1d:a4:07:b9:d1:fc:e7:85:22:aa: 75:5d:14:b4:86:f2:31:e7:a3:e6:37:4c:79:5b:e6: 12:e6:9a:29:64:68:31:9d:25:68:da:92:a3:49:4b: 59:5d:1d:a2:06:64:e5:25:08:a7:d3:bb:b5:b4:a0: eb:41:29:14:ee:3c:45:29:6f:ae:8c:9a:42:2d:d6: eb:65:dd:6d:89:8a:46:a0:67:2c:83:9a:40:8b:68: 3a:98:5f:da:08:7d:df:92:64:13:57:6f:0b:2d:e9: 51:63:f5:b2:b4:46:49:e1:0a:3f:53:bd:1f:d1:b8: 11:40:d4:f8:10:32:82:b0:4c:03:1a:14:a0:16:f8: 28:b5:79:2d:23:16:93:e2:ab:f0:a4:c4:50:50:1d: 39:10:87:4b:d4:f1:9b:bb:5c:3d:24:62:45:a2:24: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:96:4F:B0:34:31:3D:F3:8B:68:83:4D:8D:60:A7:65:A6:07:78:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27aef5f-244a-32c0-8a62-33b6fd002957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:dd:02:40:4a:ae:28:74:c3:96:73:55:67:ee:a2:5f:9a:c6: 42:c0:f6:0b:f1:97:21:b8:db:a2:46:c3:5f:72:b5:2b:ff:8f: 69:9d:e9:cc:20:25:cd:78:86:6c:9b:77:1d:35:20:ff:54:c0: 25:ba:91:12:8b:2a:76:05:14:56:5c:87:4a:7a:5c:b9:5c:63: 27:d0:76:d9:42:ff:ea:ff:36:46:36:e2:9b:6d:3c:03:c0:ae: 5d:41:4b:e9:92:83:ea:e1:d9:9e:35:e9:ac:11:b1:6b:ce:d6: de:3e:e5:6a:4d:82:ed:6f:e6:04:f1:e0:a6:c8:b3:aa:e2:58: ae:c2:1f:04:0c:0a:68:74:c7:9d:16:51:11:60:d1:db:72:07: c2:11:ed:63:ae:53:b3:1a:b9:ea:a0:e7:7c:63:21:a1:09:29: 7b:d2:6f:e9:98:c3:91:47:c0:b2:bc:9e:3d:3a:3b:19:5a:4e: ec:47:42:80:08:69:e4:ac:6d:76:9d:63:85:93:a1:12:0c:0c: ee:7c:ad:07:d3:de:8b:b8:d9:00:25:d2:6d:d5:38:8c:5e:a1: f9:e0:0d:a6:ca:47:4b:f4:1e:a9:c9:e1:31:49:28:e7:c1:3e: e6:28:02:9d:97:d1:32:47:d4:44:f3:47:bb:3f:2e:f8:bd:65: 11:9b:81:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYoA3ds6N7pC8FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NDY4MmY0ZGUtYWI2Ny00OTY1LTk3YWQtMjQwNzQyZWQ4MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgchnBs4SMTUAIGk0im40dECsG9jV5mrI7Wc fUhXZrEBtqgHHAih6l7gXhPg+DzWvOTiz2B4JEIQ6pXnvGQ+vqFnZ8BTuuAKrsh3 Os91O9PUU/S2aEcelUoImqJjDR2kB7nR/OeFIqp1XRS0hvIx56PmN0x5W+YS5pop ZGgxnSVo2pKjSUtZXR2iBmTlJQin07u1tKDrQSkU7jxFKW+ujJpCLdbrZd1tiYpG oGcsg5pAi2g6mF/aCH3fkmQTV28LLelRY/WytEZJ4Qo/U70f0bgRQNT4EDKCsEwD GhSgFvgotXktIxaT4qvwpMRQUB05EIdL1PGbu1w9JGJFoiSeNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH2WT7A0MT3zi2iDTY1gp2WmB3iAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI3YWVmNWYtMjQ0YS0z MmMwLThhNjItMzNiNmZkMDAyOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbdAkBKrih0w5ZzVWfuol+axkLA9gvxlyG426JGw19ytSv/j2md 6cwgJc14hmybdx01IP9UwCW6kRKLKnYFFFZch0p6XLlcYyfQdtlC/+r/NkY24ptt PAPArl1BS+mSg+rh2Z416awRsWvO1t4+5WpNgu1v5gTx4KbIs6riWK7CHwQMCmh0 x50WURFg0dtyB8IR7WOuU7Maueqg53xjIaEJKXvSb+mYw5FHwLK8nj06OxlaTuxH QoAIaeSsbXadY4WToRIMDO58rQfT3ou42QAl0m3VOIxeofngDabKR0v0HqnJ4TFJ KOfBPuYoAp2X0TJH1ETzR7s/Lvi9ZRGbgRk= -----END CERTIFICATE-----Generated at Wed Oct 29 07:09:34 2025 by rpki-client