$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f025a888-a128-3153-af29-751db6b34d77.roa File: f025a888-a128-3153-af29-751db6b34d77.roa (raw, json) Hash identifier: 7DFHmAuDG/URyH+30yrgYYU18/QBadsEfd1jROZNjGg= Subject key identifier: 49:24:F3:1F:89:A0:F4:3D:22:C7:CD:6A:D7:C8:DA:B0:0E:C4:EE:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD627F0A966FBAA68C6FDAC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f025a888-a128-3153-af29-751db6b34d77.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 396591 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:7f:0a:96:6f:ba:a6:8c:6f:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=19a24827-4b32-4726-8e12-a6a02ff3d86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:b4:ee:59:22:94:41:e0:05:03:70:5c:bf: a9:a4:8b:f0:70:c0:f3:50:22:b3:93:e6:fa:1f:5d: 82:33:7f:91:6d:1c:09:ec:02:20:de:0f:6d:2b:9b: 05:73:a2:56:6a:0a:46:65:70:54:e7:4d:5f:ff:3f: e2:e2:50:d2:31:03:a1:f1:d9:7f:54:05:7f:46:7e: 6e:ec:28:67:46:98:9e:3d:1c:4f:5a:ba:a4:4d:be: 82:1d:50:07:00:c8:04:c2:ae:00:52:fc:cb:c0:7e: 8b:be:bb:53:31:df:6b:62:3c:a7:9d:f3:5d:15:f8: 56:6e:be:31:63:bb:19:18:d5:f0:fc:9f:5e:d5:81: e0:58:d8:54:32:2f:26:d0:eb:d3:2b:87:5f:f4:03: 96:62:60:12:e5:d0:f6:72:be:e7:ac:df:00:f0:b6: bc:fd:6a:d8:93:07:77:ae:18:9a:ea:98:e2:31:73: 7a:b1:7a:4d:6b:ee:d0:72:33:8a:4a:c2:6b:c5:95: 66:ea:8a:5b:ba:b2:fe:7f:50:d7:69:ee:08:f9:2d: 65:cb:39:2d:6b:5b:83:19:4e:26:93:3f:54:d9:3b: 55:3a:02:f1:3f:91:3a:c4:94:5b:31:43:d3:9e:03: ac:34:2a:fa:c5:37:16:3b:e7:9c:48:55:e0:ed:34: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:24:F3:1F:89:A0:F4:3D:22:C7:CD:6A:D7:C8:DA:B0:0E:C4:EE:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f025a888-a128-3153-af29-751db6b34d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:71:7f:c7:70:b3:7f:1e:10:ae:94:f8:09:08:d4:f6:e3:67: fd:b4:c8:0a:5f:a6:c4:8b:28:12:4f:44:6b:1a:9d:29:fe:e7: f2:7d:48:53:4e:e6:64:a2:f4:67:fb:8d:24:fe:f1:03:58:4d: ad:68:18:1e:6d:68:34:a8:27:9e:39:d0:0f:7e:24:b6:47:78: 71:05:4a:48:57:7d:c0:d1:64:ad:e0:2c:b2:c1:c5:30:9a:a8: 33:89:c2:ea:30:2a:ca:82:6e:f3:de:9c:b4:ac:61:2a:14:38: c4:07:f2:0c:f4:f6:dd:af:c6:63:5c:4f:5b:5d:f2:6f:66:23: ac:9f:22:d7:0b:ba:92:c7:9c:db:c3:52:d3:65:37:cd:d2:2c: db:40:8a:bc:c4:87:50:84:ef:d1:6c:77:37:26:f0:d2:17:12: c1:10:0b:fe:0b:9c:10:b0:39:3a:c7:4c:16:16:0c:51:88:30: 99:d9:98:4e:19:7b:62:cf:56:f5:71:25:3d:31:52:96:ce:0b: 67:ba:a0:21:38:42:2a:74:e1:58:94:9b:03:7c:56:12:d2:1d: d2:51:d4:47:a5:f3:58:43:eb:31:c5:d2:bf:91:47:0c:7f:69: b5:b0:04:88:0c:c9:25:6c:eb:f3:82:bf:7c:9c:2a:c2:83:a9: 93:1e:43:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYn8Klm+6poxv2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MTlhMjQ4MjctNGIzMi00NzI2LThlMTItYTZhMDJmZjNkODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcO07lkilEHgBQNwXL+ppIvwcMDzUCKzk+b6 H12CM3+RbRwJ7AIg3g9tK5sFc6JWagpGZXBU501f/z/i4lDSMQOh8dl/VAV/Rn5u 7ChnRpiePRxPWrqkTb6CHVAHAMgEwq4AUvzLwH6LvrtTMd9rYjynnfNdFfhWbr4x Y7sZGNXw/J9e1YHgWNhUMi8m0OvTK4df9AOWYmAS5dD2cr7nrN8A8La8/WrYkwd3 rhia6pjiMXN6sXpNa+7QcjOKSsJrxZVm6opburL+f1DXae4I+S1lyzkta1uDGU4m kz9U2TtVOgLxP5E6xJRbMUPTngOsNCr6xTcWO+ecSFXg7TRQXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEkk8x+JoPQ9IsfNatfI2rAOxO4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjAyNWE4ODgtYTEyOC0z MTUzLWFmMjktNzUxZGI2YjM0ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA9xf8dws38eEK6U+AkI1PbjZ/20yApfpsSLKBJPRGsanSn+5/J9 SFNO5mSi9Gf7jST+8QNYTa1oGB5taDSoJ5450A9+JLZHeHEFSkhXfcDRZK3gLLLB xTCaqDOJwuowKsqCbvPenLSsYSoUOMQH8gz09t2vxmNcT1td8m9mI6yfItcLupLH nNvDUtNlN83SLNtAirzEh1CE79Fsdzcm8NIXEsEQC/4LnBCwOTrHTBYWDFGIMJnZ mE4Ze2LPVvVxJT0xUpbOC2e6oCE4Qip04ViUmwN8VhLSHdJR1Eel81hD6zHF0r+R Rwx/abWwBIgMySVs6/OCv3ycKsKDqZMeQ6g= -----END CERTIFICATE-----Generated at Wed Oct 29 09:21:45 2025 by rpki-client