$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/caf6aa8e-d631-3fbb-870f-a75e6211190f.roa File: caf6aa8e-d631-3fbb-870f-a75e6211190f.roa (raw, json) Hash identifier: cX1SLlHIoZ/n1AZCjqMv2McP/NcyD/s8LaVf1EbM6ro= Subject key identifier: CD:F3:BF:37:57:9D:25:CA:9E:07:50:74:81:E8:FF:2E:DB:6B:D7:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD62783AA4CC28097B1CBB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/caf6aa8e-d631-3fbb-870f-a75e6211190f.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396588 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:78:3a:a4:cc:28:09:7b:1c:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=7a8785b7-ee6d-424d-beb3-a502e7adf626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:ed:e5:32:ce:33:55:0e:b2:7c:93:27:75: 60:ac:13:80:2d:8a:a8:da:1c:d7:ae:37:d5:58:76: 19:29:9c:f4:d2:7b:e3:1a:6c:c4:fa:e6:65:d3:39: 73:42:02:2e:78:99:35:bf:12:5c:c0:f0:fe:87:30: 48:f2:44:7b:6b:ab:89:8f:a5:55:69:a6:91:6d:b9: c0:a0:92:d7:52:ac:ba:84:f0:4c:36:0f:4e:99:7c: 70:76:0f:b8:67:d6:59:11:d2:f3:ac:ab:83:6a:87: 6f:7c:91:5a:c7:30:80:2c:45:a5:cd:72:fa:7b:0f: 3c:cb:ad:55:ad:bd:d4:5d:63:3a:28:c2:11:23:11: e2:5a:31:69:5a:39:94:ef:d8:c8:e0:d9:c3:a3:ab: d6:50:43:21:06:91:c4:0f:98:2d:d8:9b:03:26:db: ab:90:1e:9e:42:b5:32:cc:05:d5:31:38:83:81:0a: 8b:1d:8b:e7:0f:8f:e2:7a:3f:15:a1:b2:24:18:3d: 8b:d4:17:17:48:5d:1e:23:90:b8:4f:a6:b9:89:20: fc:d6:74:a2:a8:c2:41:b8:b8:84:a3:1c:b7:05:55: 97:56:95:cd:21:53:6d:6b:a2:7b:4d:90:fb:1d:bc: af:9e:01:be:c7:88:6b:d0:06:9a:55:9b:c8:51:d6: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F3:BF:37:57:9D:25:CA:9E:07:50:74:81:E8:FF:2E:DB:6B:D7:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/caf6aa8e-d631-3fbb-870f-a75e6211190f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fd:34:34:9a:f3:86:6b:ea:b6:bc:4f:af:a7:a8:a9:9e:18: 2b:a1:0a:f8:4b:9f:82:ec:25:98:5b:1a:75:4e:0f:d8:a9:c6: 06:58:1f:01:67:51:45:77:f8:16:77:40:fa:cb:44:6d:94:95: e4:f8:d0:71:06:a1:36:cf:c8:86:5a:5c:8e:1b:d6:d0:8c:2d: a5:0b:79:17:ae:9d:e0:7e:25:a2:1a:84:f3:bf:cd:65:bd:39: c3:ec:9f:be:5c:86:11:4f:9e:0c:93:19:8e:f2:95:9f:20:06: 7c:d4:2b:33:41:f5:97:e9:4f:68:c2:a8:d3:80:44:9d:37:f1: 20:c5:05:8d:1f:c4:9f:53:76:85:ac:02:1c:03:42:c8:a9:ed: e6:e6:25:b1:8e:37:67:60:31:a9:b5:4a:be:1b:40:80:14:01: 63:aa:d6:a1:ef:fc:df:07:2c:b1:25:ee:f8:68:12:d6:d2:62: aa:7b:86:a7:7c:5b:79:59:bf:36:26:b8:b1:20:9f:d7:ae:64: aa:df:0f:e9:d4:86:c6:92:d5:ef:45:50:af:fd:4f:99:87:40: 54:fc:f3:59:04:39:94:fb:1e:1c:1d:51:a3:6e:f2:40:c5:ad: a6:4f:47:24:eb:8e:d6:8c:a1:54:47:e4:e8:b5:a6:6c:6b:c2: 15:a4:45:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYng6pMwoCXscu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk N2E4Nzg1YjctZWU2ZC00MjRkLWJlYjMtYTUwMmU3YWRmNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB7t5TLOM1UOsnyTJ3VgrBOALYqo2hzXrjfV WHYZKZz00nvjGmzE+uZl0zlzQgIueJk1vxJcwPD+hzBI8kR7a6uJj6VVaaaRbbnA oJLXUqy6hPBMNg9OmXxwdg+4Z9ZZEdLzrKuDaodvfJFaxzCALEWlzXL6ew88y61V rb3UXWM6KMIRIxHiWjFpWjmU79jI4NnDo6vWUEMhBpHED5gt2JsDJturkB6eQrUy zAXVMTiDgQqLHYvnD4/iej8VobIkGD2L1BcXSF0eI5C4T6a5iSD81nSiqMJBuLiE oxy3BVWXVpXNIVNta6J7TZD7HbyvngG+x4hr0AaaVZvIUdYudwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM3zvzdXnSXKngdQdIHo/y7ba9eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FmNmFhOGUtZDYzMS0z ZmJiLTg3MGYtYTc1ZTYyMTExOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF39NDSa84Zr6ra8T6+nqKmeGCuhCvhLn4LsJZhbGnVOD9ipxgZY HwFnUUV3+BZ3QPrLRG2UleT40HEGoTbPyIZaXI4b1tCMLaULeReuneB+JaIahPO/ zWW9OcPsn75chhFPngyTGY7ylZ8gBnzUKzNB9ZfpT2jCqNOARJ038SDFBY0fxJ9T doWsAhwDQsip7ebmJbGON2dgMam1Sr4bQIAUAWOq1qHv/N8HLLEl7vhoEtbSYqp7 hqd8W3lZvzYmuLEgn9euZKrfD+nUhsaS1e9FUK/9T5mHQFT881kEOZT7HhwdUaNu 8kDFraZPRyTrjtaMoVRH5Oi1pmxrwhWkRRU= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:20 2025 by rpki-client