$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa File: f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa (raw, json) Hash identifier: kCkp97GYjIC3sNUea9T5Ocxf+s6uR4HHreztQ4Go864= Subject key identifier: 9F:0F:C8:46:D0:27:9E:A5:AC:8A:70:6F:4A:B9:E8:8A:FC:93:72:93 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584AD3A11248873DFC3F365E2700 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 8070 IP address blocks: 2606:e540:c03::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:12:48:87:3d:fc:3f:36:5e:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=b0555102-c17e-4509-bae9-e8b3a8629d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:15:67:c4:6a:e8:36:0e:2d:02:09:7b:b7: 87:67:db:ad:6b:63:4b:d9:4f:8a:73:ae:66:dc:30: 0d:d5:a2:d0:18:8a:b7:73:be:72:df:58:9d:01:27: 9d:bd:89:dc:41:9f:7c:de:48:09:a0:45:da:b5:21: 01:be:f3:7b:ac:10:ae:4e:74:ac:c8:43:a5:0b:45: 44:3d:4c:df:93:ae:84:0b:9b:a2:57:fb:68:cb:ab: ff:18:34:4c:a1:68:23:5f:40:5f:8c:5c:c6:69:01: 18:63:88:dc:57:37:a0:1d:d8:48:a7:ab:46:79:b9: 46:03:1e:3c:0a:c3:f2:e2:2a:c9:ae:1d:85:8c:52: cf:7f:fe:38:46:30:24:d5:80:ae:a7:9f:ec:da:a9: 29:75:e0:7b:66:1c:b1:ca:a7:0d:1e:44:69:94:4e: 59:13:41:f6:33:38:6a:da:b9:7d:4e:66:db:41:99: 85:cb:0e:5a:6c:6c:15:14:3a:64:6e:43:4a:dc:c4: 02:49:2a:b0:77:a0:70:3b:e2:a9:f5:6e:54:7d:c9: e0:65:e2:6d:23:a9:dd:d2:3e:14:72:f5:b5:71:4c: 52:0c:ef:13:ee:29:49:05:93:2b:b4:53:53:f6:d1: 6c:df:04:ef:33:6a:16:4c:83:a0:93:80:6b:4a:cd: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0F:C8:46:D0:27:9E:A5:AC:8A:70:6F:4A:B9:E8:8A:FC:93:72:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c03::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e6:40:42:43:71:a5:0f:14:b8:ea:b0:11:5c:40:8e:c4:04: 4d:c0:72:f6:71:77:b6:02:a3:a1:68:3f:b9:1c:aa:0f:fd:f0: 88:99:b9:56:74:75:5f:d6:46:41:c3:82:ec:04:45:8b:90:7b: b4:ee:46:56:f4:e9:2c:94:3e:b6:f5:66:17:10:26:71:35:4d: e2:08:ac:e5:1c:ba:66:28:0d:76:76:46:9c:20:ee:d6:da:90: 68:41:d5:63:19:27:67:93:9f:cb:5b:d0:28:5a:5d:28:7b:06: 96:90:c5:fd:2c:6e:33:7c:ac:1e:9d:25:d1:09:ea:23:a0:73: 65:b5:18:e4:2a:d6:0d:b9:6f:99:ed:59:2c:d2:f7:41:26:5e: a7:e2:c6:8e:d8:38:46:29:a4:03:6c:51:37:0b:e6:5a:5d:b3: 59:81:31:d8:11:cc:73:df:cc:fb:6e:ad:be:02:09:89:77:55: b3:f1:e0:25:b2:fd:38:af:d4:33:20:5b:8e:ae:1e:2f:1e:6b: 73:c2:69:46:ac:0b:b7:2f:a7:94:d9:d5:2d:3b:e8:78:19:ac: 1b:0f:09:c5:e7:8f:1d:58:db:af:c8:59:46:f7:9c:97:c1:8e: d0:d5:41:c1:34:fa:37:64:57:85:7d:21:a8:50:eb:a0:cf:07: 54:25:7b:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToRJIhz38PzZeJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YjA1NTUxMDItYzE3ZS00NTA5LWJhZTktZThiM2E4NjI5ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7kVZ8Rq6DYOLQIJe7eHZ9uta2NL2U+Kc65m 3DAN1aLQGIq3c75y31idASedvYncQZ983kgJoEXatSEBvvN7rBCuTnSsyEOlC0VE PUzfk66EC5uiV/toy6v/GDRMoWgjX0BfjFzGaQEYY4jcVzegHdhIp6tGeblGAx48 CsPy4irJrh2FjFLPf/44RjAk1YCup5/s2qkpdeB7ZhyxyqcNHkRplE5ZE0H2Mzhq 2rl9TmbbQZmFyw5abGwVFDpkbkNK3MQCSSqwd6BwO+Kp9W5UfcngZeJtI6nd0j4U cvW1cUxSDO8T7ilJBZMrtFNT9tFs3wTvM2oWTIOgk4BrSs05pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ8PyEbQJ56lrIpwb0q56Ir8k3KTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvZjUxYjU5YzItZGJkZC0z ZTM4LTlhMzYtNDA4YmRiZGQ5NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/mQEJDcaUPFLjqsBFcQI7EBE3AcvZxd7YCo6FoP7kcqg/98IiZ uVZ0dV/WRkHDguwERYuQe7TuRlb06SyUPrb1ZhcQJnE1TeIIrOUcumYoDXZ2Rpwg 7tbakGhB1WMZJ2eTn8tb0ChaXSh7BpaQxf0sbjN8rB6dJdEJ6iOgc2W1GOQq1g25 b5ntWSzS90EmXqfixo7YOEYppANsUTcL5lpds1mBMdgRzHPfzPturb4CCYl3VbPx 4CWy/Tiv1DMgW46uHi8ea3PCaUasC7cvp5TZ1S076HgZrBsPCcXnjx1Y26/IWUb3 nJfBjtDVQcE0+jdkV4V9IahQ66DPB1Qlew8= -----END CERTIFICATE-----Generated at Sat Aug 23 21:59:38 2025 by rpki-client