$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e1217593-b6d4-3d57-b503-3d3c536b13f3.roa File: e1217593-b6d4-3d57-b503-3d3c536b13f3.roa (raw, json) Hash identifier: LqQIyPWhoVqiJp5kvQQU8kRAUVU1+kfGzVxnT7myItk= Subject key identifier: A0:92:49:17:F2:DA:10:D5:07:0C:3B:C9:42:85:BF:D6:C2:F8:75:73 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584ABA80C9B984A65BBFC2C56B00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e1217593-b6d4-3d57-b503-3d3c536b13f3.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 396356 IP address blocks: 2604:c980:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c9:b9:84:a6:5b:bf:c2:c5:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=df4de29b-aafb-42fe-9088-e18077abbb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:8f:4d:8f:35:77:e1:f3:98:7c:f7:86:28: 62:de:4b:df:9c:97:30:b7:3f:3d:ad:8c:51:39:76: a3:05:87:c9:bd:cf:8d:51:38:7c:b2:37:db:11:5d: 90:cb:3d:6c:ec:1b:79:cc:4d:eb:d0:80:0a:9f:ea: 41:68:24:b1:bf:99:18:b0:6e:33:d6:77:62:5c:1d: c1:00:db:1f:e8:0a:ba:ed:7a:dd:68:f4:16:e5:97: 45:0f:ad:e4:79:ac:f6:f2:51:cb:83:3d:f5:da:96: b0:a0:4f:21:c9:2d:05:06:15:6f:dc:07:04:81:91: ae:ad:92:5e:ed:43:1c:49:16:5a:02:0a:23:59:fd: ed:9e:86:f6:9f:82:91:bf:c7:45:65:1e:d4:4f:70: 54:66:53:45:e7:ef:3b:5b:d0:30:42:5f:a7:5a:82: 8a:44:32:ed:c2:dd:0c:57:fb:e8:3a:4c:a5:2a:75: 65:84:bf:88:d3:63:36:70:97:17:1c:15:d3:5b:b1: a4:e6:e8:5b:cf:15:5e:5b:1d:17:75:63:d2:0f:4d: 9f:34:81:4a:22:c7:16:cf:97:19:a5:43:43:cb:ca: f9:6f:20:e9:c0:cf:e4:2c:9b:a5:07:c5:5a:08:d8: 4c:56:3f:78:6b:af:aa:ea:a5:31:20:41:79:cf:d2: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:92:49:17:F2:DA:10:D5:07:0C:3B:C9:42:85:BF:D6:C2:F8:75:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e1217593-b6d4-3d57-b503-3d3c536b13f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:c980:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:89:32:96:28:79:45:95:5b:53:88:bb:06:32:fa:6b:a9:fb: 59:d9:a2:86:d0:c0:c2:c6:f5:ed:05:b5:b9:55:f4:56:a1:46: f5:5e:97:80:b3:ae:b1:a6:52:36:48:c4:45:a0:a4:eb:e8:b7: b8:eb:e0:53:bd:4b:14:b2:bf:21:32:8d:71:af:28:bf:35:33: a1:29:6d:05:c5:62:c4:92:58:0b:92:81:de:6f:b7:d0:78:11: 9f:df:1c:48:71:81:af:a4:51:a8:51:3f:ab:27:53:4b:75:c2: 4f:fb:9f:f9:f7:b1:ff:19:61:30:5c:21:13:48:9b:77:60:bb: e9:bb:c0:4b:0e:0b:0b:ea:93:59:ef:75:d1:3c:75:05:ea:58: 5d:9d:e6:16:c5:4b:83:ff:bf:ad:58:a3:1b:39:bf:0e:92:57: d1:f0:8c:7a:92:1a:55:4b:0d:3b:d4:16:02:16:ba:04:89:1c: ff:ce:06:5d:f0:ab:e4:c7:54:2d:05:27:6a:cf:60:43:de:a2: a2:5c:26:fb:3d:44:c9:0c:70:23:a1:49:57:e6:28:6c:b5:19: 4b:76:35:8d:3e:a6:52:1b:d8:8f:f9:ee:c5:4a:e9:39:fb:fa: e1:f2:4d:3b:00:75:54:96:1b:c2:6e:7a:9f:04:8f:f1:eb:6a: 46:c6:b7:b4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq6gMm5hKZbv8LFawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZGY0ZGUyOWItYWFmYi00MmZlLTkwODgtZTE4MDc3YWJiYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquOPTY81d+HzmHz3hihi3kvfnJcwtz89rYxR OXajBYfJvc+NUTh8sjfbEV2Qyz1s7Bt5zE3r0IAKn+pBaCSxv5kYsG4z1ndiXB3B ANsf6Aq67XrdaPQW5ZdFD63keaz28lHLgz312pawoE8hyS0FBhVv3AcEgZGurZJe 7UMcSRZaAgojWf3tnob2n4KRv8dFZR7UT3BUZlNF5+87W9AwQl+nWoKKRDLtwt0M V/voOkylKnVlhL+I02M2cJcXHBXTW7Gk5uhbzxVeWx0XdWPSD02fNIFKIscWz5cZ pUNDy8r5byDpwM/kLJulB8VaCNhMVj94a6+q6qUxIEF5z9Kv0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKCSSRfy2hDVBww7yUKFv9bC+HVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZTEyMTc1OTMtYjZkNC0z ZDU3LWI1MDMtM2QzYzUzNmIxM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgFAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATokylih5RZVbU4i7BjL6a6n7WdmihtDAwsb17QW1uVX0VqFG9V6X gLOusaZSNkjERaCk6+i3uOvgU71LFLK/ITKNca8ovzUzoSltBcVixJJYC5KB3m+3 0HgRn98cSHGBr6RRqFE/qydTS3XCT/uf+fex/xlhMFwhE0ibd2C76bvASw4LC+qT We910Tx1BepYXZ3mFsVLg/+/rVijGzm/DpJX0fCMepIaVUsNO9QWAha6BIkc/84G XfCr5MdULQUnas9gQ96iolwm+z1EyQxwI6FJV+YobLUZS3Y1jT6mUhvYj/nuxUrp Ofv64fJNOwB1VJYbwm56nwSP8etqRsa3tA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:59:11 2025 by rpki-client