$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc60a14-4c65-30f4-b7f9-772cf08bf5aa.roa File: dfc60a14-4c65-30f4-b7f9-772cf08bf5aa.roa (raw, json) Hash identifier: 6yjv9MdyjxtI3rzxYRTRLlsokN7mx5Ql7O5QIaZXf10= Subject key identifier: 7A:9E:AB:3C:C7:54:5A:C7:9B:50:F0:93:B5:F0:13:53:88:A8:5C:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD6272711CD2AEDFD89FD680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc60a14-4c65-30f4-b7f9-772cf08bf5aa.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396606 IP address blocks: 2620:0:5050::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:72:71:1c:d2:ae:df:d8:9f:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=2802e306-de19-46a9-9c1a-40c6161e30ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:6c:cf:fb:ae:1d:c8:86:82:5e:be:15:8f: 2d:e7:a0:06:c7:9d:75:28:cc:93:b9:c6:fa:79:12: 5e:0d:6a:31:55:17:12:45:36:f0:33:e3:09:25:7b: 35:da:fe:c2:a1:4e:4a:3f:89:21:16:29:51:66:b8: bb:2b:df:87:84:dc:16:98:f6:6b:ca:63:97:87:68: 5b:a9:9c:fb:95:24:d5:40:ae:13:3e:c1:f2:e3:6d: 50:87:ac:0e:33:00:06:1a:1a:8a:3c:ea:f0:a9:66: 5b:6f:b5:e9:13:52:32:03:27:2e:5b:70:d6:78:6a: 3d:5a:05:75:29:68:a4:46:73:3c:68:7e:72:c1:c3: e4:1a:5a:24:57:fc:60:39:38:9a:1d:eb:13:df:04: 07:a8:78:7a:75:08:b2:c4:a3:c6:b5:56:c8:7a:24: 0d:39:aa:57:87:67:57:02:c5:b1:80:f0:cd:ad:f8: 31:af:53:e2:c8:73:87:d4:70:54:81:c3:e7:a4:1f: 3b:a1:f2:3d:52:f1:eb:e5:cd:18:f0:47:b1:2f:37: 84:39:2f:d4:b9:df:58:4a:38:91:c1:d1:a8:89:7d: db:f7:35:ef:9f:7c:df:15:7c:ae:f7:dc:5f:74:c0: 9d:37:91:49:49:f8:90:2c:43:9d:66:3b:8e:27:c1: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9E:AB:3C:C7:54:5A:C7:9B:50:F0:93:B5:F0:13:53:88:A8:5C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfc60a14-4c65-30f4-b7f9-772cf08bf5aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:19:10:52:a8:7f:81:4e:1f:f1:7f:a0:a4:98:96:fa:4b:8b: 5d:06:c8:98:19:9c:3d:54:46:35:8c:3d:94:4f:0d:d6:93:4f: fe:11:4a:3b:cf:6e:b5:a2:10:03:74:47:30:de:df:89:fc:99: 7b:e5:05:68:38:8e:f4:c0:10:01:4e:1e:e2:16:a8:6d:86:61: cd:e4:91:95:d3:70:0f:b0:18:46:dd:b2:19:08:f7:59:65:d2: b4:2b:6e:fb:17:68:2a:fd:0a:86:b9:46:ad:c2:b6:b2:d8:38: cb:2c:ed:a9:c2:4d:c9:40:0f:c7:d0:ac:58:9b:e9:75:ad:5e: 87:e9:6b:77:b4:5a:4b:ea:a5:29:43:0b:73:58:38:bf:14:24: 45:5d:7c:d5:52:9e:22:b2:48:4c:09:74:12:e5:b4:a5:1b:bd: 77:fc:01:f2:b2:c1:44:07:0c:c5:f8:68:51:d3:81:d2:12:2f: 80:fd:73:94:fd:7f:a0:db:23:b9:88:4c:82:0f:75:a4:3f:98: 3c:13:88:e8:9f:2b:b7:85:d2:ce:1b:59:6c:8d:e0:cd:46:b4: 04:9f:33:be:31:3f:d6:2f:73:d1:a4:5b:71:81:27:e9:dc:ee: 10:00:1f:39:e8:9c:96:1e:e5:90:de:8c:ed:d3:d0:90:c4:27: 1f:4f:32:d8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEutYnJxHNKu39if1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MjgwMmUzMDYtZGUxOS00NmE5LTljMWEtNDBjNjE2MWUzMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7xsz/uuHciGgl6+FY8t56AGx511KMyTucb6 eRJeDWoxVRcSRTbwM+MJJXs12v7CoU5KP4khFilRZri7K9+HhNwWmPZrymOXh2hb qZz7lSTVQK4TPsHy421Qh6wOMwAGGhqKPOrwqWZbb7XpE1IyAycuW3DWeGo9WgV1 KWikRnM8aH5ywcPkGlokV/xgOTiaHesT3wQHqHh6dQiyxKPGtVbIeiQNOapXh2dX AsWxgPDNrfgxr1PiyHOH1HBUgcPnpB87ofI9UvHr5c0Y8EexLzeEOS/Uud9YSjiR wdGoiX3b9zXvn3zfFXyu99xfdMCdN5FJSfiQLEOdZjuOJ8EzfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHqeqzzHVFrHm1Dwk7XwE1OIqFxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZjNjBhMTQtNGM2NS0z MGY0LWI3ZjktNzcyY2YwOGJmNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBfGRBSqH+BTh/xf6CkmJb6S4tdBsiYGZw9VEY1 jD2UTw3Wk0/+EUo7z261ohADdEcw3t+J/Jl75QVoOI70wBABTh7iFqhthmHN5JGV 03APsBhG3bIZCPdZZdK0K277F2gq/QqGuUatwray2DjLLO2pwk3JQA/H0KxYm+l1 rV6H6Wt3tFpL6qUpQwtzWDi/FCRFXXzVUp4iskhMCXQS5bSlG713/AHyssFEBwzF +GhR04HSEi+A/XOU/X+g2yO5iEyCD3WkP5g8E4jonyu3hdLOG1lsjeDNRrQEnzO+ MT/WL3PRpFtxgSfp3O4QAB856JyWHuWQ3ozt09CQxCcfTzLY -----END CERTIFICATE-----Generated at Wed Oct 29 09:21:37 2025 by rpki-client