$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa File: b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa (raw, json) Hash identifier: P6SM/R5xnzFq0Kw0ipntj/1JFg0esOuAZIMaWtNsLWU= Subject key identifier: DB:1D:28:B1:01:7A:9F:02:34:21:D5:B3:CE:02:44:99:F5:E2:08:60 Certificate issuer: /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Certificate serial: 010D0C9F4328584AECC12DB6CAD6F647BA266940 Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 395214 IP address blocks: 2602:ff3d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2d:b6:ca:d6:f6:47:ba:26:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=32507104-d2a5-445e-925b-0943d1c821e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:35:41:53:c0:28:08:89:6f:ab:52:f7:4b: 99:43:5b:f2:3e:ee:0d:a5:14:7b:be:f0:1e:e2:97: fd:d0:a0:08:5f:f7:5f:ea:9f:50:4d:2e:60:3a:f9: ba:c7:e8:e7:12:27:66:3f:47:08:27:1e:a5:90:48: 03:13:2d:15:1e:0d:fc:5f:28:b7:91:fe:92:e8:54: f0:be:79:50:c5:3a:cc:98:3a:df:1e:3a:b5:1c:fe: 53:37:60:40:69:d5:83:b1:45:b3:7d:64:04:80:a1: 7c:9f:84:dd:bb:aa:0b:1f:90:b7:a2:3a:20:00:bb: f0:22:6d:b9:0e:23:c9:99:a1:24:50:87:ef:78:05: b0:61:b5:84:1a:88:f7:0b:61:15:0d:ef:e4:c1:5b: d8:97:e0:8f:85:ee:2a:0d:b8:90:df:17:13:a9:29: 5d:4a:55:b2:3c:be:89:e8:66:ea:ff:39:30:10:68: db:c5:32:9e:e7:7e:df:f2:b3:64:b1:33:ca:a5:d9: 53:93:a6:44:5f:76:90:14:bb:a4:b4:be:92:5a:e0: 09:a0:13:02:63:e5:30:db:a5:73:ad:3d:6b:8d:b0: df:a0:93:90:d8:b0:c1:8f:0b:74:00:bf:c7:43:2f: 62:dc:4b:00:cf:5f:ef:1d:ee:03:a1:88:49:1d:65: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1D:28:B1:01:7A:9F:02:34:21:D5:B3:CE:02:44:99:F5:E2:08:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl X509v3 Authority Key Identifier: keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff3d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:19:22:1b:dc:fa:6d:ee:9b:ef:dc:6c:cb:e0:25:df:8f:dc: 6a:0b:c1:ce:77:54:00:f6:d7:1a:1f:6e:15:fe:3e:eb:03:91: 62:15:88:ca:60:4b:f9:b3:84:09:45:a6:75:bd:9a:45:c4:87: 80:6a:f4:af:4f:7b:43:48:f2:ac:ee:2a:5f:e8:33:99:a6:86: 93:68:16:84:80:0e:ec:15:2a:86:9b:80:f2:44:ce:08:a5:94: 16:c8:44:1c:a3:8f:26:41:97:43:ad:34:26:a9:a5:44:84:3a: 4d:c6:ec:f1:03:be:25:92:6d:27:7b:43:7a:9a:44:f5:38:ed: 12:36:3c:1d:54:5f:ac:56:c4:87:1c:58:64:ec:69:01:ec:53: 8a:df:6d:f5:cf:d7:64:31:53:95:81:7d:89:ee:9b:98:a0:e0: a2:d0:05:ec:f7:eb:39:29:e8:fe:c9:25:de:05:d5:5c:81:fc: ea:be:0b:16:06:18:e3:44:5d:90:71:30:e1:ca:6f:7a:c3:54: 2d:7c:6c:07:a6:1f:3b:5e:d3:8e:19:c4:c2:5e:90:e1:cd:ae: 6e:be:06:f0:09:a6:8a:20:a7:6b:e3:d8:29:13:4e:7d:b4:20: fc:e3:b4:2d:1e:bd:12:8a:51:a7:6a:d6:74:20:46:39:e1:15: be:2d:40:7f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswS22ytb2R7omaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIzNjMtYjQyMTEwZjg4 NTU3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzI1MDcxMDQtZDJhNS00NDVlLTkyNWItMDk0M2QxYzgyMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcU1QVPAKAiJb6tS90uZQ1vyPu4NpRR7vvAe 4pf90KAIX/df6p9QTS5gOvm6x+jnEidmP0cIJx6lkEgDEy0VHg38Xyi3kf6S6FTw vnlQxTrMmDrfHjq1HP5TN2BAadWDsUWzfWQEgKF8n4Tdu6oLH5C3ojogALvwIm25 DiPJmaEkUIfveAWwYbWEGoj3C2EVDe/kwVvYl+CPhe4qDbiQ3xcTqSldSlWyPL6J 6Gbq/zkwEGjbxTKe537f8rNksTPKpdlTk6ZEX3aQFLuktL6SWuAJoBMCY+Uw26Vz rT1rjbDfoJOQ2LDBjwt0AL/HQy9i3EsAz1/vHe4DoYhJHWXQXwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNsdKLEBep8CNCHVs84CRJn14ghgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlk MzNlNC1lZDRkLTRiNDctYjM2My1iNDIxMTBmODg1NTcvYjFkN2EzOGUtMWM5MC0z ZjgzLTkxYzgtYWU3NzdhNzk1ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIz NjMtYjQyMTEwZjg4NTU3LzBhOWQzM2U0LWVkNGQtNGI0Ny1iMzYzLWI0MjExMGY4 ODU1Ny5jcmwwHwYDVR0jBBgwFoAUi2UPpY7DqQ2CdI3aLpUh4tf92n4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlkMzNlNC1lZDRkLTRiNDctYjM2My1iNDIx MTBmODg1NTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/PQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAtRkiG9z6be6b79xsy+Al34/cagvBzndUAPbXGh9uFf4+6wORYhWI ymBL+bOECUWmdb2aRcSHgGr0r097Q0jyrO4qX+gzmaaGk2gWhIAO7BUqhpuA8kTO CKWUFshEHKOPJkGXQ600JqmlRIQ6Tcbs8QO+JZJtJ3tDeppE9TjtEjY8HVRfrFbE hxxYZOxpAexTit9t9c/XZDFTlYF9ie6bmKDgotAF7PfrOSno/skl3gXVXIH86r4L FgYY40RdkHEw4cpvesNULXxsB6YfO17TjhnEwl6Q4c2ubr4G8AmmiiCna+PYKRNO fbQg/OO0LR69EopRp2rWdCBGOeEVvi1Afw== -----END CERTIFICATE-----Generated at Sat Aug 23 22:10:00 2025 by rpki-client