$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa File: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (raw, json) Hash identifier: wpNPsryt0D4Bm0PNf1WnW40KUNlDtLoUtQ6tGHKuCE8= Subject key identifier: FC:13:D7:0E:FC:FB:71:2B:2D:8A:76:43:0D:78:5C:95:00:49:3F:31 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584ACE0BA29C9B8869D8D7C26880 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 8075 IP address blocks: 2606:e540:c00::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a2:9c:9b:88:69:d8:d7:c2:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=e115a9c2-c880-4dd4-87ab-9fd6907e2b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:8d:57:53:19:f7:86:bf:d9:90:e1:42:04: 9b:5b:19:01:4d:d8:6b:0d:d2:7d:38:00:db:4f:68: 62:df:82:ad:b6:5c:8a:f7:af:26:ec:3b:8b:f4:89: 2d:2f:b0:a0:f1:8d:6f:7c:08:7b:1c:35:04:7f:e3: 4a:ee:88:c1:e5:cd:79:e4:d2:86:fa:ec:e6:51:73: f0:24:48:8b:e6:50:d4:71:ba:5f:d3:1e:31:32:3a: 94:99:90:21:7d:85:5b:67:9f:81:98:8e:d1:6e:fa: 23:ec:b5:31:f4:cc:c6:18:d7:28:3f:fd:18:1d:9d: 83:d6:b1:a2:29:61:ca:65:9d:4c:56:3f:c3:91:cc: 42:62:1e:be:b3:fe:cb:67:9c:62:65:d3:e2:ed:ea: 2d:27:8a:1e:f3:e7:fa:4a:e9:f0:33:45:95:33:07: 4f:4b:c5:30:8b:6e:80:38:14:35:b8:67:2f:00:72: 63:a1:d4:0f:fe:ac:3d:15:9e:74:96:20:cd:60:87: 44:46:4d:dd:2b:0a:94:60:13:33:1b:3e:37:d6:b2: c1:26:d6:c6:bd:3f:42:47:a4:94:c9:2d:02:99:ef: b1:5c:8b:4c:5e:ea:a1:e1:50:25:1f:c0:6f:cf:3c: 98:96:c6:d8:c4:6e:30:4d:3c:52:9c:93:ef:90:ef: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:13:D7:0E:FC:FB:71:2B:2D:8A:76:43:0D:78:5C:95:00:49:3F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:5a:55:31:19:75:fb:92:5c:79:99:c6:d4:a1:f9:5e:53:a8: 48:38:f7:c8:88:b2:f6:82:ba:25:e2:c2:d7:e8:45:4e:93:ee: c0:e6:18:3c:87:60:f3:2e:d6:b7:04:0c:f8:23:e8:9a:38:e4: 8b:3a:b8:c9:a9:f2:88:26:4e:83:4b:59:6b:27:40:9b:ce:20: 9e:42:c4:49:48:e5:e0:92:1f:1d:9b:b4:01:66:b0:4a:2c:f9: 99:21:de:0a:76:2e:41:47:42:43:21:aa:7c:13:82:63:2b:53: b6:c1:03:c0:2a:b1:40:13:41:95:67:f8:cd:a4:a2:0d:76:c4: 50:df:db:f8:d7:b3:03:f0:15:85:86:5b:af:f3:ff:e6:bc:5d: 0e:f9:5d:70:f3:81:12:d3:14:bf:fc:8f:29:c1:bd:c8:c9:04: c3:5e:10:06:fc:75:a2:31:30:fa:08:5a:f5:05:b2:1a:58:ec: 92:ed:6b:53:5b:5a:ff:7b:8f:e9:55:7d:9a:4b:2c:24:d8:8b: 44:de:4f:0a:2e:a2:99:4a:37:04:0b:35:64:82:8e:bd:1d:42: e9:7e:cc:08:30:59:86:8d:89:92:30:78:2a:e1:a6:d9:af:39: 4b:1d:f8:ad:cb:de:75:6d:4d:15:ba:bd:c1:eb:64:d6:27:5e: 00:3e:8c:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC6Kcm4hp2NfCaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZTExNWE5YzItYzg4MC00ZGQ0LTg3YWItOWZkNjkwN2UyYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/SNV1MZ94a/2ZDhQgSbWxkBTdhrDdJ9OADb T2hi34KttlyK968m7DuL9IktL7Cg8Y1vfAh7HDUEf+NK7ojB5c155NKG+uzmUXPw JEiL5lDUcbpf0x4xMjqUmZAhfYVbZ5+BmI7Rbvoj7LUx9MzGGNcoP/0YHZ2D1rGi KWHKZZ1MVj/DkcxCYh6+s/7LZ5xiZdPi7eotJ4oe8+f6SunwM0WVMwdPS8Uwi26A OBQ1uGcvAHJjodQP/qw9FZ50liDNYIdERk3dKwqUYBMzGz431rLBJtbGvT9CR6SU yS0Cme+xXItMXuqh4VAlH8BvzzyYlsbYxG4wTTxSnJPvkO+pUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPwT1w78+3ErLYp2Qw14XJUAST8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvMzRjZTFlMjItZDgwYi0z Mzk0LTk3NGItZWQ1ZTJiYThjNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNaVTEZdfuSXHmZxtSh+V5TqEg498iIsvaCuiXiwtfoRU6T7sDm GDyHYPMu1rcEDPgj6Jo45Is6uMmp8ogmToNLWWsnQJvOIJ5CxElI5eCSHx2btAFm sEos+Zkh3gp2LkFHQkMhqnwTgmMrU7bBA8AqsUATQZVn+M2kog12xFDf2/jXswPw FYWGW6/z/+a8XQ75XXDzgRLTFL/8jynBvcjJBMNeEAb8daIxMPoIWvUFshpY7JLt a1NbWv97j+lVfZpLLCTYi0TeTwouoplKNwQLNWSCjr0dQul+zAgwWYaNiZIweCrh ptmvOUsd+K3L3nVtTRW6vcHrZNYnXgA+jI4= -----END CERTIFICATE-----Generated at Sat Aug 23 22:03:07 2025 by rpki-client