$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa File: 558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa (raw, json) Hash identifier: pJoNYMHoQ0CdB1YABBaLX3hLT2crFsCEESD+pqNUeBk= Subject key identifier: B4:D1:A8:49:EF:B6:30:65:C4:4B:12:F9:99:05:CF:44:B4:34:19:4D Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584ACE0BA473B0E3A963C438FD80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 54113 IP address blocks: 2602:816:5001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 18 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a4:73:b0:e3:a9:63:c4:38:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=a38c5e29-c060-4dbf-826a-1182e72a2fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:59:ef:bc:dc:b5:5d:42:a7:7a:72:5f:1d: d1:57:c2:60:44:8f:96:b0:31:75:86:57:95:0b:98: 91:61:7a:2d:b6:eb:22:02:1a:5b:5f:35:29:67:72: b5:64:ba:c9:64:08:bc:20:2b:48:ea:48:38:0c:73: 49:72:33:60:4b:59:14:bd:11:da:78:fd:2f:e5:a9: ae:89:0c:f7:16:a3:9a:90:db:c2:34:2e:42:30:82: 80:a8:b2:15:28:25:ab:7c:9a:a8:58:7f:a9:51:fd: 71:ad:6e:cb:40:90:6f:5e:d7:f6:56:8a:02:ce:a9: 1b:f4:fe:cd:53:45:19:6c:a0:bb:cc:ed:6a:e4:24: 61:c2:b2:a9:ba:fc:42:4f:c2:9b:7e:29:64:b2:97: 92:f9:ba:bb:60:dd:e5:8e:db:10:e7:6e:e5:e4:e0: 2b:b1:f6:2d:ca:da:95:82:f5:59:cc:7d:42:56:15: 0c:cf:5a:96:b4:1e:89:05:d0:2d:6b:ae:bd:7f:cd: 5b:cc:bb:d5:88:c6:ae:9d:c4:e9:d5:c4:ac:9d:6b: e8:2c:8f:dc:d8:7b:b9:53:09:bf:b3:78:65:f1:95: 8b:4c:c1:90:89:b1:01:f6:1b:f2:5f:ab:20:67:39: d8:ec:aa:bf:30:3c:c8:4d:5d:b9:85:b9:dd:d2:74: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D1:A8:49:EF:B6:30:65:C4:4B:12:F9:99:05:CF:44:B4:34:19:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:5001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8c:f6:2c:6a:4d:65:4f:b0:0a:15:70:a9:ee:a4:52:f2:de: a7:33:96:36:98:6d:6c:e8:ba:df:42:78:a7:aa:19:e4:b1:1b: ab:83:fd:e7:89:c3:d6:ce:bb:a1:15:a7:ca:c2:fa:98:68:18: 19:11:00:b5:a6:d9:6f:96:9c:31:1d:53:cc:b7:0f:e7:21:f2: fb:e2:74:27:be:d9:93:87:66:38:22:9b:96:a2:be:71:ab:27: 9e:98:3a:d0:47:fa:4b:de:a8:a5:14:d9:76:ca:76:d4:39:df: 36:9c:46:06:a5:a2:09:d9:54:b8:1f:5f:f3:40:46:f3:22:3e: a9:ef:3d:3d:99:5b:42:57:5a:7f:9f:56:ba:09:80:c8:db:f4: c5:e3:7c:41:b2:d7:8e:0c:65:c3:51:b1:31:3b:9d:0c:b0:02: 54:5c:aa:ed:53:93:2d:39:50:28:3e:07:39:1e:70:48:34:75: e0:10:45:9a:10:d9:43:ba:08:cc:d6:ab:80:58:00:91:55:84: 96:98:42:ea:b4:03:7f:f4:06:16:ef:8a:37:fa:48:c2:b1:24: a4:6d:46:ad:ad:0c:9a:e0:8b:9e:c8:e4:1f:fc:4c:e2:36:cf: 63:97:59:40:e5:29:ee:58:d7:6d:96:49:5d:43:0a:a2:73:92: 3e:55:db:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC6RzsOOpY8Q4/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YTM4YzVlMjktYzA2MC00ZGJmLTgyNmEtMTE4MmU3MmEyZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDdZ77zctV1Cp3pyXx3RV8JgRI+WsDF1hleV C5iRYXottusiAhpbXzUpZ3K1ZLrJZAi8ICtI6kg4DHNJcjNgS1kUvRHaeP0v5amu iQz3FqOakNvCNC5CMIKAqLIVKCWrfJqoWH+pUf1xrW7LQJBvXtf2VooCzqkb9P7N U0UZbKC7zO1q5CRhwrKpuvxCT8KbfilkspeS+bq7YN3ljtsQ527l5OArsfYtytqV gvVZzH1CVhUMz1qWtB6JBdAta669f81bzLvViMauncTp1cSsnWvoLI/c2Hu5Uwm/ s3hl8ZWLTMGQibEB9hvyX6sgZznY7Kq/MDzITV25hbnd0nRTXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLTRqEnvtjBlxEsS+ZkFz0S0NBlNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNTU4YTJlNjItZWMzMi0z ZWVkLWFjMzUtYjU0YjhmMGZjMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFlAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECM9ixqTWVPsAoVcKnupFLy3qczljaYbWzout9CeKeqGeSxG6uD /eeJw9bOu6EVp8rC+phoGBkRALWm2W+WnDEdU8y3D+ch8vvidCe+2ZOHZjgim5ai vnGrJ56YOtBH+kveqKUU2XbKdtQ53zacRgalognZVLgfX/NARvMiPqnvPT2ZW0JX Wn+fVroJgMjb9MXjfEGy144MZcNRsTE7nQywAlRcqu1Tky05UCg+BzkecEg0deAQ RZoQ2UO6CMzWq4BYAJFVhJaYQuq0A3/0Bhbvijf6SMKxJKRtRq2tDJrgi57I5B/8 TOI2z2OXWUDlKe5Y122WSV1DCqJzkj5V2/E= -----END CERTIFICATE-----Generated at Sat Aug 16 17:30:47 2025 by rpki-client