$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa File: 53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa (raw, json) Hash identifier: XcHo4xE2XabYo5T0M5U2MXhOQApde5Xe6iuNsNwHfCY= Subject key identifier: F7:CE:66:98:B0:B7:A1:CC:5D:29:15:78:15:23:DC:3F:4D:4C:DE:B6 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584AC2E103C058D07A8DE68FA980 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 32181 IP address blocks: 2001:1850::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:03:c0:58:d0:7a:8d:e6:8f:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=b5b39fe7-c209-4ed5-9954-6c13a69c2baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:4d:ea:11:f8:bc:90:88:90:40:58:aa:cb: 23:97:94:7a:62:a2:3f:70:69:4c:7d:b3:26:c6:e5: d0:6a:0a:03:91:0d:6c:09:36:f9:c9:fe:a5:73:d4: 0d:4b:cf:1a:db:b9:30:16:08:b2:66:8f:11:16:3e: ac:95:8d:7b:5d:c5:c1:e5:9f:c4:73:9b:f6:0c:b2: fb:72:06:9f:ab:6d:da:0d:17:55:30:f9:7a:3e:f0: db:bc:57:ee:fb:3b:f2:4b:3b:d0:d5:c2:ec:f7:78: e2:55:13:c2:17:b7:7f:0f:d1:c5:2f:41:03:27:ab: 19:1e:ab:98:8a:0d:9d:0c:13:d3:cb:59:4f:73:33: cf:58:67:7d:4b:60:42:16:dc:66:13:36:a6:e9:d9: 07:31:87:48:b8:64:08:47:aa:bf:79:09:e4:8f:22: 2d:2e:8f:70:a9:3d:52:8c:ca:49:66:e2:85:ad:9c: fa:0e:c3:25:a0:bc:9a:44:9d:fe:1a:42:b3:7d:f5: b7:74:12:00:29:c6:20:18:70:33:81:73:f9:92:79: 5d:5a:d7:ba:17:2e:5b:3c:52:91:4f:ed:86:ed:32: d3:74:28:b0:ab:87:e9:0a:34:30:b3:cc:a1:7a:aa: fc:b8:71:67:0d:a9:8b:36:36:4b:1d:05:e6:1e:d2: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CE:66:98:B0:B7:A1:CC:5D:29:15:78:15:23:DC:3F:4D:4C:DE:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv6: 2001:1850::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:4a:47:8d:54:fd:54:8f:0d:60:65:4a:e5:f8:43:f0:c0:82: 1d:ac:20:cb:02:fd:71:cd:81:10:76:45:75:47:3c:07:a4:38: 0b:9a:96:79:32:e7:ad:00:4b:72:c2:1c:34:ce:e9:ff:22:11: d3:60:c6:ca:63:52:e4:61:84:ce:ac:94:a9:a9:0e:d6:36:ff: db:cf:b7:e3:8d:65:59:6e:21:2b:42:d8:61:6e:18:54:73:f6: a5:cd:b6:80:4a:b4:3b:bd:5f:12:86:29:90:13:6a:af:9f:e8: 84:71:8c:d4:11:f8:74:f0:16:6e:9c:2b:69:8b:8b:e0:1a:a0: 69:2a:88:37:38:65:55:a4:86:97:96:22:d3:74:80:d0:be:a5: 84:70:ca:fd:48:f5:b0:59:40:71:f1:35:50:34:9d:d8:8d:d7: 2f:54:35:07:82:6c:5d:07:c2:8a:ec:bf:06:9a:c9:a4:19:49: 29:ae:f8:4c:fb:b0:7a:a3:79:9a:56:47:a3:53:7d:03:3d:7c: d9:36:a6:87:86:f8:72:4a:57:f8:d8:91:6e:fd:64:e3:17:d7: c7:a2:0a:7a:55:64:1a:8a:85:2f:40:34:96:ff:ec:aa:cf:82: 90:36:74:df:5e:cf:b5:42:60:61:de:d3:c5:68:ca:70:0a:33: b5:a7:f9:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErC4QPAWNB6jeaPqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjViMzlmZTctYzIwOS00ZWQ1LTk5NTQtNmMxM2E2OWMyYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tdN6hH4vJCIkEBYqssjl5R6YqI/cGlMfbMm xuXQagoDkQ1sCTb5yf6lc9QNS88a27kwFgiyZo8RFj6slY17XcXB5Z/Ec5v2DLL7 cgafq23aDRdVMPl6PvDbvFfu+zvySzvQ1cLs93jiVRPCF7d/D9HFL0EDJ6sZHquY ig2dDBPTy1lPczPPWGd9S2BCFtxmEzam6dkHMYdIuGQIR6q/eQnkjyItLo9wqT1S jMpJZuKFrZz6DsMloLyaRJ3+GkKzffW3dBIAKcYgGHAzgXP5knldWte6Fy5bPFKR T+2G7TLTdCiwq4fpCjQws8yheqr8uHFnDamLNjZLHQXmHtLG5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPfOZpiwt6HMXSkVeBUj3D9NTN62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNTNkN2VhNjgtMzUxZS0z OGMzLTkzN2UtOGYyZTQ4ZTcwYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfSkeNVP1Ujw1gZUrl+EPwwIIdrCDLAv1xzYEQdkV1RzwHpDgLmpZ5 MuetAEtywhw0zun/IhHTYMbKY1LkYYTOrJSpqQ7WNv/bz7fjjWVZbiErQthhbhhU c/alzbaASrQ7vV8ShimQE2qvn+iEcYzUEfh08BZunCtpi4vgGqBpKog3OGVVpIaX liLTdIDQvqWEcMr9SPWwWUBx8TVQNJ3YjdcvVDUHgmxdB8KK7L8GmsmkGUkprvhM +7B6o3maVkejU30DPXzZNqaHhvhySlf42JFu/WTjF9fHogp6VWQaioUvQDSW/+yq z4KQNnTfXs+1QmBh3tPFaMpwCjO1p/m9 -----END CERTIFICATE-----Generated at Sun Aug 24 03:44:12 2025 by rpki-client