$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa File: 532a6650-1360-380d-a68f-680dd10f9fc8.roa (raw, json) Hash identifier: tBaijcv7LtWsZv3lEwXlpbWid145WXcc4447bFUB9Bc= Subject key identifier: 95:9C:4B:35:9F:D1:64:7E:97:EA:84:2C:55:9A:FF:C8:07:DA:E9:7F Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584AC87653DCC6C6960360D78100 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 61317 IP address blocks: 2604:4500:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:53:dc:c6:c6:96:03:60:d7:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=13efe9a4-154b-46ca-b452-18558d09f46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:9e:42:59:a7:e3:87:75:2a:e4:e3:43:ed: 05:c6:c6:51:a4:1d:0e:2f:5b:e7:78:f4:84:ad:a5: 24:07:21:e8:62:ef:d8:86:54:53:bc:e4:8d:8f:a6: 8d:f7:df:b0:eb:8a:95:86:06:4d:44:ad:b3:b5:53: 61:c8:1c:1f:6e:77:18:16:d4:dd:c8:98:55:f7:40: b2:b7:4e:53:62:e5:fa:99:89:a8:dc:b0:3b:09:53: 8a:6b:bd:90:ce:1c:89:4d:71:a2:e0:79:a3:3e:09: 2f:df:86:13:50:be:07:4f:b7:09:2c:8d:af:39:2a: 58:c1:5e:f9:ce:71:d4:60:0c:ca:97:3c:f5:0c:fa: 3a:71:ce:ab:69:ec:19:b4:a2:7b:2f:b2:79:4d:14: 80:69:e4:fb:cc:8f:41:be:17:5f:84:fc:47:a4:07: 49:44:34:d4:25:3c:d3:ab:40:9b:fe:ca:ee:9a:da: 82:e7:c9:c5:d0:da:7a:3f:28:f0:09:bd:7a:b0:6a: b1:84:49:72:96:43:8e:01:19:ce:95:97:b8:67:13: 39:de:3d:e3:7e:8b:04:fa:8c:1b:17:38:61:b9:73: f9:5b:7b:c4:fc:d3:9f:14:ac:b8:38:f0:c8:a5:d1: 69:29:72:cc:cb:9d:b1:52:88:80:57:a3:19:5e:13: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9C:4B:35:9F:D1:64:7E:97:EA:84:2C:55:9A:FF:C8:07:DA:E9:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:63:30:50:19:cd:1d:98:39:13:26:4c:91:8f:ce:58:67:02: c6:a0:53:3d:8c:0c:71:af:fb:39:1d:d7:5e:41:dc:e8:5b:e9: fc:df:fa:aa:54:8f:47:12:6c:93:70:48:c0:cf:d0:cb:d8:be: ec:62:ff:31:55:b7:85:b5:d8:91:d6:dc:4b:d0:4a:fa:1a:43: 43:98:35:c0:c1:1d:f0:2b:d0:bb:92:c3:7c:58:05:af:02:4b: 04:e9:f9:f5:da:7e:37:a4:db:48:6c:b8:2f:26:52:24:21:2e: 9d:ed:97:61:13:5d:9b:4d:81:aa:70:f4:90:61:0f:2c:53:1c: 71:63:34:5f:24:5e:f3:11:f5:6e:86:51:25:b1:83:2e:30:55: 13:04:28:cf:57:25:8a:30:3d:c8:e9:b3:da:56:6c:fc:84:5b: ba:c2:e0:37:72:29:01:fa:f4:25:78:ff:c1:07:1b:c1:69:6e: 0b:77:97:ef:3f:9b:7f:7f:85:29:3e:bf:d9:a5:e2:46:f0:32: 8b:06:89:61:66:dd:83:a0:e3:ae:9a:1a:68:ce:d1:12:b8:ff: 18:cc:b3:52:ed:4a:a5:20:88:02:79:56:2f:ca:48:01:fa:d3: 4f:08:af:3e:75:b2:55:2f:19:dd:fe:45:7e:ca:7c:32:43:12: 70:72:b5:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdlPcxsaWA2DXgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTNlZmU5YTQtMTU0Yi00NmNhLWI0NTItMTg1NThkMDlmNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFmeQlmn44d1KuTjQ+0FxsZRpB0OL1vnePSE raUkByHoYu/YhlRTvOSNj6aN99+w64qVhgZNRK2ztVNhyBwfbncYFtTdyJhV90Cy t05TYuX6mYmo3LA7CVOKa72QzhyJTXGi4HmjPgkv34YTUL4HT7cJLI2vOSpYwV75 znHUYAzKlzz1DPo6cc6raewZtKJ7L7J5TRSAaeT7zI9BvhdfhPxHpAdJRDTUJTzT q0Cb/srumtqC58nF0Np6PyjwCb16sGqxhElylkOOARnOlZe4ZxM53j3jfosE+owb FzhhuXP5W3vE/NOfFKy4OPDIpdFpKXLMy52xUoiAV6MZXhOXCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJWcSzWf0WR+l+qELFWa/8gH2ul/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTMyYTY2NTAtMTM2MC0z ODBkLWE2OGYtNjgwZGQxMGY5ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADtjMFAZzR2YORMmTJGPzlhnAsagUz2MDHGv+zkd115B3Ohb6fzf +qpUj0cSbJNwSMDP0MvYvuxi/zFVt4W12JHW3EvQSvoaQ0OYNcDBHfAr0LuSw3xY Ba8CSwTp+fXafjek20hsuC8mUiQhLp3tl2ETXZtNgapw9JBhDyxTHHFjNF8kXvMR 9W6GUSWxgy4wVRMEKM9XJYowPcjps9pWbPyEW7rC4DdyKQH69CV4/8EHG8Fpbgt3 l+8/m39/hSk+v9ml4kbwMosGiWFm3YOg466aGmjO0RK4/xjMs1LtSqUgiAJ5Vi/K SAH6008Irz51slUvGd3+RX7KfDJDEnBytU0= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:35 2025 by rpki-client