$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa File: d1ec7d81-82ad-3029-abd2-5405897dacbf.roa (raw, json) Hash identifier: y6zrP2jkV98NeFPdXiBZoqHHg2A8hk/aYMe6mOF/fj0= Subject key identifier: 58:2A:0B:5B:AE:3B:9D:09:3E:65:CC:65:AB:F8:52:CC:58:B4:34:52 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584AE9F66A17C533DB63D1D28080 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 62651 IP address blocks: 2604:c980:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6a:17:c5:33:db:63:d1:d2:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=c75f475f-a417-44a7-a691-0a79b2d5d98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:15:9f:27:39:68:9a:23:e4:8f:3c:2d:61:65: 5c:b5:6f:ba:03:54:78:4d:0c:9b:1d:8c:0c:3e:d5: 9b:14:2f:46:a7:c0:8f:73:bd:64:65:9e:a0:f3:19: be:43:62:d0:be:6b:5d:6f:28:09:5f:60:fb:cd:27: 40:45:03:2e:5a:d8:db:b5:2e:a0:1e:3c:0a:ca:d1: 59:c9:59:4c:f3:fa:ee:36:28:ed:ba:d0:14:d1:63: b5:2c:98:6f:f0:da:03:96:fb:10:4d:03:a6:88:f0: 58:ac:df:be:34:09:2a:b2:8e:d0:e0:24:85:f0:a9: ed:23:0a:f8:c3:bb:b3:18:90:9c:6b:e5:1a:d7:9c: c3:e5:56:03:ad:f3:93:8b:94:5f:ed:0d:4d:43:70: 69:f3:0a:f0:68:e6:59:ce:41:4a:a3:cf:e3:24:5a: e2:42:13:a6:bb:9e:29:12:2c:6a:5c:01:90:c5:45: 3e:0d:36:da:14:08:ee:83:5f:a5:ae:6d:3f:16:ae: 9d:33:17:46:94:00:e0:68:59:2f:7f:4d:65:74:3f: 50:2f:c4:43:5d:c7:f5:85:7d:51:4f:8b:c2:c9:44: 6b:5a:34:58:fd:78:7e:98:35:ed:b7:da:b7:71:19: 21:6e:e4:38:08:90:96:b8:fd:a7:65:0b:c0:f0:a5: 08:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:0B:5B:AE:3B:9D:09:3E:65:CC:65:AB:F8:52:CC:58:B4:34:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:c980:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6c:d1:02:a2:51:62:43:e7:41:82:68:e7:65:be:9b:d6:34: ff:58:46:bd:66:10:18:14:90:1b:d6:23:da:9b:97:d6:d1:89: ec:67:e9:7e:5f:f3:69:f5:2e:0e:dd:8e:34:04:9f:6c:9a:3f: 0b:ad:c8:1a:6b:ea:b9:6d:a3:67:1b:f5:a1:59:5d:52:21:c1: e9:03:e1:2d:dd:94:50:b3:1c:6f:5f:08:08:de:78:ed:9d:d0: 15:e2:d6:e5:49:f2:bd:2c:7c:94:69:9e:90:d5:47:9d:de:58: 0f:f1:8a:93:9e:9b:a4:a8:61:25:5b:e1:38:31:a1:aa:b0:9a: 2c:9c:f5:a5:21:d5:1f:3a:a8:2d:67:43:8d:38:87:24:63:05: 86:15:84:f9:a2:f6:e2:12:bc:09:be:d4:3a:63:46:f0:46:b8: 65:76:c1:b1:8e:1f:16:14:9c:5c:8a:15:68:39:0b:38:3c:e4: 23:e9:f3:af:d3:c9:eb:1b:65:cf:00:99:e8:34:25:c3:2c:8b: 70:e4:34:cb:92:d6:4f:de:81:f9:08:33:9e:4e:e0:56:68:92: a7:30:d2:82:ae:eb:10:a4:a4:3d:ec:1a:36:54:e2:82:4a:9d: c0:aa:42:26:ac:e2:bf:e5:53:78:e5:25:eb:b6:1d:3b:e4:49: 7f:c9:77:17 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErp9moXxTPbY9HSgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk Yzc1ZjQ3NWYtYTQxNy00NGE3LWE2OTEtMGE3OWIyZDVkOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghWfJzlomiPkjzwtYWVctW+6A1R4TQybHYwM PtWbFC9Gp8CPc71kZZ6g8xm+Q2LQvmtdbygJX2D7zSdARQMuWtjbtS6gHjwKytFZ yVlM8/ruNijtutAU0WO1LJhv8NoDlvsQTQOmiPBYrN++NAkqso7Q4CSF8KntIwr4 w7uzGJCca+Ua15zD5VYDrfOTi5Rf7Q1NQ3Bp8wrwaOZZzkFKo8/jJFriQhOmu54p EixqXAGQxUU+DTbaFAjug1+lrm0/Fq6dMxdGlADgaFkvf01ldD9QL8RDXcf1hX1R T4vCyURrWjRY/Xh+mDXtt9q3cRkhbuQ4CJCWuP2nZQvA8KUI8QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFgqC1uuO50JPmXMZav4UsxYtDRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDFlYzdkODEtODJhZC0z MDI5LWFiZDItNTQwNTg5N2RhY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANWzRAqJRYkPnQYJo52W+m9Y0/1hGvWYQGBSQG9Yj2puX1tGJ7Gfp fl/zafUuDt2ONASfbJo/C63IGmvquW2jZxv1oVldUiHB6QPhLd2UULMcb18ICN54 7Z3QFeLW5UnyvSx8lGmekNVHnd5YD/GKk56bpKhhJVvhODGhqrCaLJz1pSHVHzqo LWdDjTiHJGMFhhWE+aL24hK8Cb7UOmNG8Ea4ZXbBsY4fFhScXIoVaDkLODzkI+nz r9PJ6xtlzwCZ6DQlwyyLcOQ0y5LWT96B+Qgznk7gVmiSpzDSgq7rEKSkPewaNlTi gkqdwKpCJqziv+VTeOUl67YdO+RJf8l3Fw== -----END CERTIFICATE-----Generated at Sat Aug 23 22:12:48 2025 by rpki-client