$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa File: 8a504d20-acb4-356e-98ad-eecca8e4d734.roa (raw, json) Hash identifier: DVghx4dGuMV5tSjowYLcmhIpXA4PF3KXuDGkIB5C+hY= Subject key identifier: DD:1D:4C:27:16:60:9C:AE:32:92:BB:BA:32:57:93:BF:CC:E9:BA:6B Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584AB76B70AB85600D03FC25A68C Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa Signing time: Fri 01 Aug 2025 22:30:10 +0000 ROA not before: Fri 01 Aug 2025 22:30:10 +0000 ROA not after: Thu 30 Oct 2025 22:30:10 +0000 asID: 0 IP address blocks: 2001:504:a0::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:6b:70:ab:85:60:0d:03:fc:25:a6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Aug 1 22:30:10 2025 GMT Not After : Oct 30 22:30:10 2025 GMT Subject: CN=6fcccb5f-fd9e-40e7-a26c-2e74558113b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:e0:a0:9b:fb:92:01:ea:08:e6:4b:44:31: 65:1d:27:bf:3e:d7:3d:4e:52:4b:17:03:81:1f:ef: 6a:f8:57:dd:17:00:be:ed:29:94:39:da:28:54:eb: f8:f8:c6:8b:2b:9e:f5:1e:e2:e6:ca:3e:9c:a9:3c: 05:44:01:84:97:dd:1a:01:b8:d7:a0:f0:c3:b0:70: 67:24:2b:f4:d3:5f:16:96:c5:53:66:7d:77:39:70: b1:0b:d3:19:33:c8:6d:69:3c:8e:16:ab:bb:e1:67: 60:37:04:0a:fc:bb:78:c8:5e:6c:a7:43:33:59:f8: dc:4d:14:ca:3e:13:aa:69:c5:38:a7:c3:2b:9c:ce: 1d:c1:f1:c3:45:68:11:de:e1:20:36:a3:18:aa:57: 9e:ba:e1:ba:af:5a:2a:09:83:b2:b9:e7:60:71:32: bf:42:11:d2:c0:ef:24:ae:98:f8:b4:93:d0:8a:73: 72:1b:c9:74:96:ba:44:e8:90:b6:3e:d6:0a:58:b6: 10:dc:3e:36:28:f0:cd:5c:89:e2:ec:40:a0:2e:9c: 64:23:f2:17:cd:22:d4:60:39:04:c8:9b:b7:a6:fd: ee:ec:58:e8:52:7b:c9:bc:ba:44:0a:0e:6b:42:3d: 96:0d:02:df:f1:81:af:ee:39:8e:6e:78:41:67:92: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1D:4C:27:16:60:9C:AE:32:92:BB:BA:32:57:93:BF:CC:E9:BA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:a0::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9b:a9:7e:38:8a:b3:dc:9d:de:5a:55:da:51:5d:25:ff:10: db:69:1a:ad:2b:fd:d7:b0:62:69:b0:37:10:03:d0:91:42:d2: 68:01:2a:a9:25:7c:e5:ba:58:b7:fe:79:71:ec:60:03:37:9d: c7:30:b5:08:cc:a3:6c:ca:ed:1f:72:c4:91:34:ff:5f:f1:cf: 61:09:30:10:1c:0a:91:e0:b0:ee:db:cd:e0:49:84:5f:23:ed: 0c:a0:b7:4c:f4:15:d8:ee:d8:c4:66:60:86:31:72:d0:a9:6e: 8e:d6:09:59:c0:40:d4:9d:96:eb:5e:f5:5c:a6:e6:aa:66:36: a4:91:3e:f2:44:18:dc:c0:cf:50:bf:5b:19:1c:13:88:59:5b: ea:e5:48:1a:45:2e:aa:e7:82:1a:4f:77:af:de:00:28:2b:dd: ce:c5:b4:3f:5a:03:2b:00:00:9e:cc:36:0f:ce:7e:db:1f:3c: 2c:4d:f6:25:01:cd:de:9b:1b:d0:ef:04:76:50:4f:92:8f:7e: cc:c2:73:b2:35:62:09:14:32:10:5c:de:33:92:dc:67:7e:22: de:f0:65:20:37:a2:80:67:44:2a:f0:1c:0c:cf:ee:66:a0:f6: 0c:bb:a8:d5:34:cb:8b:88:8b:24:82:57:20:f4:3d:69:9d:75: 46:9d:4e:43 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEq3a3CrhWANA/wlpowwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI1MDgwMTIyMzAxMFoXDTI1MTAzMDIyMzAxMFowLzEtMCsGA1UEAxMk NmZjY2NiNWYtZmQ5ZS00MGU3LWEyNmMtMmU3NDU1ODExM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRTgoJv7kgHqCOZLRDFlHSe/Ptc9TlJLFwOB H+9q+FfdFwC+7SmUOdooVOv4+MaLK571HuLmyj6cqTwFRAGEl90aAbjXoPDDsHBn JCv0018WlsVTZn13OXCxC9MZM8htaTyOFqu74WdgNwQK/Lt4yF5sp0MzWfjcTRTK PhOqacU4p8MrnM4dwfHDRWgR3uEgNqMYqleeuuG6r1oqCYOyuedgcTK/QhHSwO8k rpj4tJPQinNyG8l0lrpE6JC2PtYKWLYQ3D42KPDNXIni7ECgLpxkI/IXzSLUYDkE yJu3pv3u7FjoUnvJvLpECg5rQj2WDQLf8YGv7jmObnhBZ5J7WwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFN0dTCcWYJyuMpK7ujJXk7/M6bprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvOGE1MDRkMjAtYWNiNC0z NTZlLTk4YWQtZWVjY2E4ZTRkNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACg AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJZupfjiKs9yd3lpV2lFdJf8Q22karSv917BiabA3EAPQkULS aAEqqSV85bpYt/55cexgAzedxzC1CMyjbMrtH3LEkTT/X/HPYQkwEBwKkeCw7tvN 4EmEXyPtDKC3TPQV2O7YxGZghjFy0KlujtYJWcBA1J2W6171XKbmqmY2pJE+8kQY 3MDPUL9bGRwTiFlb6uVIGkUuqueCGk93r94AKCvdzsW0P1oDKwAAnsw2D85+2x88 LE32JQHN3psb0O8EdlBPko9+zMJzsjViCRQyEFzeM5LcZ34i3vBlIDeigGdEKvAc DM/uZqD2DLuo1TTLi4iLJIJXIPQ9aZ11Rp1OQw== -----END CERTIFICATE-----Generated at Wed Aug 6 10:16:32 2025 by rpki-client