$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/04557194-575e-31a0-90a1-986be30cd212.roa File: 04557194-575e-31a0-90a1-986be30cd212.roa (raw, json) Hash identifier: jkzazbXX+yKCwnslkuIxy7OoT4ztyfrgtCb3qb2XrWY= Subject key identifier: FA:49:17:D1:FC:32:52:07:23:E0:57:08:C5:AB:13:93:49:D8:AB:5E Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584AD9364FA5B44B73D10B4CCB00 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/04557194-575e-31a0-90a1-986be30cd212.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 22822 IP address blocks: 2001:504:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:4f:a5:b4:4b:73:d1:0b:4c:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=24df0e83-d170-4aee-b4d7-54f8af2b8ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:fc:95:a0:be:eb:a1:a3:02:47:05:49:18: 6d:97:b6:30:33:3c:19:8d:b0:65:1f:42:75:e6:e7: 5a:f0:31:cb:8e:49:86:90:fb:37:09:f7:35:45:0b: 11:2e:08:34:bc:3c:d5:1c:17:22:4a:d8:be:a7:2a: dc:bf:4d:88:5d:77:bf:e3:e3:83:e8:13:36:ec:8b: 45:04:5e:68:ce:0a:dd:d3:ef:ac:e1:12:60:cb:0d: a9:f7:47:ea:a1:ba:30:ad:5a:47:61:c4:d5:d6:60: ca:1b:50:56:58:16:9f:c3:91:23:04:77:43:02:c0: 45:cf:2d:f4:a5:77:06:50:de:31:bf:6d:62:a6:a3: 4e:0f:7a:8e:6c:d2:10:4d:33:93:43:29:d3:28:df: d3:d7:0b:31:ef:79:e5:d9:e0:6f:c6:24:a5:05:0c: 2e:0b:79:ee:34:bf:0c:1a:a2:53:d3:3e:4d:5a:e5: 80:a1:f3:7e:ab:5d:10:b4:fa:c9:ce:bf:0c:b0:64: b9:f0:8f:5f:39:f5:13:26:b0:b5:1d:39:85:d3:71: f1:50:1a:ee:66:6d:e7:28:fe:3b:92:7f:1a:10:dd: f7:f5:9d:d9:12:34:4f:bf:81:c2:27:dd:73:1a:e4: 47:57:6c:96:4f:b9:f4:0e:09:8f:05:fa:d1:ed:53: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:17:D1:FC:32:52:07:23:E0:57:08:C5:AB:13:93:49:D8:AB:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/04557194-575e-31a0-90a1-986be30cd212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:96:2b:d5:b5:80:3d:6e:44:40:03:0e:be:15:06:46:84:8a: 18:ce:82:bc:b0:e3:c4:2e:45:b4:9c:d1:99:5e:28:52:5d:4c: 6b:f6:02:54:6c:0a:da:2a:cb:5c:14:a1:45:4c:58:0f:5b:c5: 62:53:96:eb:01:33:97:f2:5f:87:fe:02:7f:6f:57:ea:d1:db: f3:4f:28:af:4d:29:23:63:01:79:6a:74:3b:e4:af:46:60:20: b1:eb:40:c8:94:a8:6b:d9:b1:d8:47:9f:79:58:55:4c:71:71: bd:a9:d0:6f:3e:6f:64:09:5d:d8:61:1b:04:55:10:20:0b:52: 5c:7f:7a:2b:4f:6c:e2:1c:88:6a:13:7d:cf:3c:a9:b0:0d:08: ed:ea:b8:cd:e4:ed:e0:19:4b:dc:94:85:06:61:04:bc:04:15: b8:fa:1f:aa:c3:22:a8:15:f7:fd:ac:a7:dc:50:07:af:72:62: 20:e6:6a:69:65:ae:5c:a0:e1:f5:8e:7c:49:90:64:f4:83:bd: b9:4d:43:31:7b:bb:b0:14:41:79:51:ee:cf:23:81:b3:e8:5c: e9:06:69:63:51:44:78:b3:ba:2c:82:a4:0f:24:4c:19:17:c5: f6:bf:5b:26:8f:15:61:2f:45:df:7d:41:6b:45:08:df:ff:0b: 27:5c:b8:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErZNk+ltEtz0QtMywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MjRkZjBlODMtZDE3MC00YWVlLWI0ZDctNTRmOGFmMmI4ZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK38laC+66GjAkcFSRhtl7YwMzwZjbBlH0J1 5uda8DHLjkmGkPs3Cfc1RQsRLgg0vDzVHBciSti+pyrcv02IXXe/4+OD6BM27ItF BF5ozgrd0++s4RJgyw2p90fqobowrVpHYcTV1mDKG1BWWBafw5EjBHdDAsBFzy30 pXcGUN4xv21ipqNOD3qObNIQTTOTQynTKN/T1wsx73nl2eBvxiSlBQwuC3nuNL8M GqJT0z5NWuWAofN+q10QtPrJzr8MsGS58I9fOfUTJrC1HTmF03HxUBruZm3nKP47 kn8aEN339Z3ZEjRPv4HCJ91zGuRHV2yWT7n0DgmPBfrR7VNsDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPpJF9H8MlIHI+BXCMWrE5NJ2KteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvMDQ1NTcxOTQtNTc1ZS0z MWEwLTkwYTEtOTg2YmUzMGNkMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyWK9W1gD1uREADDr4VBkaEihjOgryw48QuRbSc0ZleKFJdTGv2 AlRsCtoqy1wUoUVMWA9bxWJTlusBM5fyX4f+An9vV+rR2/NPKK9NKSNjAXlqdDvk r0ZgILHrQMiUqGvZsdhHn3lYVUxxcb2p0G8+b2QJXdhhGwRVECALUlx/eitPbOIc iGoTfc88qbANCO3quM3k7eAZS9yUhQZhBLwEFbj6H6rDIqgV9/2sp9xQB69yYiDm amllrlyg4fWOfEmQZPSDvblNQzF7u7AUQXlR7s8jgbPoXOkGaWNRRHizuiyCpA8k TBkXxfa/WyaPFWEvRd99QWtFCN//CydcuLk= -----END CERTIFICATE-----Generated at Sun Aug 24 05:42:59 2025 by rpki-client