$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/12121739-ba19-3a49-a1ce-88a3e9cad17f.roa File: 12121739-ba19-3a49-a1ce-88a3e9cad17f.roa (raw, json) Hash identifier: rvYZDFV41qYbdAPH9Tf5i75mW5VhLPberQdizHWov3Q= Subject key identifier: 98:A0:EA:8E:75:64:29:4F:B6:7D:9E:6F:E2:8F:9C:42:F6:9C:74:BB Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584AD3A10C061465AC35284EAC80 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/12121739-ba19-3a49-a1ce-88a3e9cad17f.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 8075 IP address blocks: 2606:e540:c04::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0c:06:14:65:ac:35:28:4e:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=9df3e868-75a8-4543-b5e8-f2c8180635b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:02:bc:a8:ea:83:1d:ea:ad:12:cb:5a:da:48: ae:cf:ec:b1:db:b8:ff:12:ae:0c:d0:c1:70:74:36: 0f:43:91:3c:b4:12:bf:4d:40:27:d7:7d:c1:b6:8b: 9d:11:b0:97:60:c2:8f:04:13:33:5e:ae:0f:da:43: 5b:b5:be:6c:da:7e:c1:87:cb:81:f9:44:17:1f:66: d0:05:ba:3e:1a:25:03:0b:2c:42:4a:74:e4:d5:27: 4d:9a:72:b2:5a:d4:b4:f7:ff:c9:ad:04:6d:9b:49: 48:20:3f:50:43:79:db:d2:f1:51:9a:21:7f:3b:3b: 41:d6:33:7a:e4:35:de:be:84:0b:ad:77:6a:42:93: 81:b4:c6:ad:f5:e4:99:d0:24:df:10:2f:78:fc:a0: 50:b2:48:6c:67:3e:44:af:d4:96:8e:64:6a:6a:cf: 99:d4:92:59:76:99:77:58:bd:15:db:c0:a6:d3:a4: 53:8f:d9:c0:b0:ce:2c:5e:7d:5e:bf:47:54:10:39: c0:7b:7c:bf:8b:80:bc:eb:3f:62:69:d9:10:7d:c5: fd:a8:b6:67:90:a5:43:89:d2:ed:80:0a:e1:00:99: 29:90:3b:0c:78:d7:5a:e8:00:e0:34:33:7d:b3:c5: df:78:d9:f4:97:e0:8a:46:2e:99:26:1f:f0:db:82: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A0:EA:8E:75:64:29:4F:B6:7D:9E:6F:E2:8F:9C:42:F6:9C:74:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/12121739-ba19-3a49-a1ce-88a3e9cad17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c04::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:98:34:c4:b3:d2:60:17:6d:70:ad:e6:8f:1d:a9:19:e0:db: 51:e9:96:1b:f2:57:eb:ca:21:ad:da:40:c0:f6:91:94:c1:ce: 32:89:64:d7:80:4c:b2:2a:59:57:e8:d8:8a:88:14:23:08:db: b1:c1:0a:56:c3:11:db:12:ba:5d:3a:f6:52:5e:44:0b:32:56: ec:a0:9e:d0:4e:c3:62:80:6b:a2:f6:df:44:17:2a:08:34:50: 38:df:1a:30:fa:ff:c5:87:b2:4f:75:ae:2b:bb:c2:28:3d:73: e7:ec:7a:f5:56:f4:dd:10:e8:e4:22:c9:6a:d3:ae:84:2d:53: 87:70:07:bf:b8:e9:3c:f4:37:62:2d:18:66:fd:01:26:d9:85: ba:cc:4d:27:f0:e2:f5:af:9c:4c:d6:87:2a:27:1e:ab:48:23: 68:9a:3f:f6:da:07:8e:cd:46:5f:63:33:c2:cc:57:b9:b4:aa: b6:af:1e:d2:83:e1:46:6c:54:73:bf:72:ee:7c:34:f0:ec:4c: 27:e7:fc:98:46:bf:98:db:a7:15:09:ce:8f:cf:ba:7d:2c:5e: 74:ae:c0:6a:0d:db:45:2f:d0:73:69:a5:3c:da:d6:3e:31:ad: c3:a1:bf:38:a8:2a:5b:15:8c:35:e0:ee:8e:d5:eb:81:2d:3f: 49:f5:b8:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQwGFGWsNShOrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OWRmM2U4NjgtNzVhOC00NTQzLWI1ZTgtZjJjODE4MDYzNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQK8qOqDHeqtEsta2kiuz+yx27j/Eq4M0MFw dDYPQ5E8tBK/TUAn133BtoudEbCXYMKPBBMzXq4P2kNbtb5s2n7Bh8uB+UQXH2bQ Bbo+GiUDCyxCSnTk1SdNmnKyWtS09//JrQRtm0lIID9QQ3nb0vFRmiF/OztB1jN6 5DXevoQLrXdqQpOBtMat9eSZ0CTfEC94/KBQskhsZz5Er9SWjmRqas+Z1JJZdpl3 WL0V28Cm06RTj9nAsM4sXn1ev0dUEDnAe3y/i4C86z9iadkQfcX9qLZnkKVDidLt gArhAJkpkDsMeNda6ADgNDN9s8XfeNn0l+CKRi6ZJh/w24KX1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJig6o51ZClPtn2eb+KPnEL2nHS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvMTIxMjE3MzktYmExOS0z YTQ5LWExY2UtODhhM2U5Y2FkMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6YNMSz0mAXbXCt5o8dqRng21HplhvyV+vKIa3aQMD2kZTBzjKJ ZNeATLIqWVfo2IqIFCMI27HBClbDEdsSul069lJeRAsyVuygntBOw2KAa6L230QX Kgg0UDjfGjD6/8WHsk91riu7wig9c+fsevVW9N0Q6OQiyWrTroQtU4dwB7+46Tz0 N2ItGGb9ASbZhbrMTSfw4vWvnEzWhyonHqtII2iaP/baB47NRl9jM8LMV7m0qrav HtKD4UZsVHO/cu58NPDsTCfn/JhGv5jbpxUJzo/Pun0sXnSuwGoN20Uv0HNppTza 1j4xrcOhvzioKlsVjDXg7o7V64EtP0n1uN8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:23 2025 by rpki-client