$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa File: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (raw, json) Hash identifier: DNxgqSiCn9qAfH8sBiFATlvzCTPKXEnGqjWHD1SR0Jc= Subject key identifier: 83:3C:F7:D6:5C:72:53:B6:BE:E8:9F:D0:6C:6A:F6:B7:6F:11:1C:11 Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584AC9DBA39BE17516A097DEDA00 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2001:504:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a3:9b:e1:75:16:a0:97:de:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=7fe09c14-ef64-4c22-90de-eb3192f3dd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:75:3c:16:ae:b4:fa:52:e3:c8:af:5b:22: 40:98:ba:72:28:56:2d:d3:7d:cf:86:0d:36:05:a0: c0:4a:1e:d2:db:2b:6c:6f:0f:11:14:7f:29:74:f8: c8:57:a5:e4:d7:06:32:b1:58:7b:ee:dd:f1:da:93: 70:49:96:c1:61:cc:36:75:a6:e5:90:e1:53:77:26: f2:30:8b:05:95:66:17:d3:a4:4a:36:a4:49:66:a2: 02:29:08:d6:34:5a:be:f3:2c:02:77:26:23:51:67: 4e:21:c2:99:e4:1e:b6:8d:37:77:a6:71:05:38:2e: 09:be:cc:d1:e0:e7:6c:1f:91:ba:87:06:26:23:63: d5:f3:49:42:fd:99:5a:b9:91:83:af:db:68:f5:1d: b7:58:65:7a:85:d3:eb:f0:c5:42:1f:99:4b:c9:1d: 2b:6f:41:01:cf:2c:ba:1b:84:56:e3:5a:38:9d:b5: 11:b7:3f:b3:49:53:dd:f3:ea:b9:4e:c6:dd:11:f8: 4f:5e:12:ab:7d:68:ac:04:12:ed:ad:be:13:d4:94: be:85:7b:ce:d4:56:ba:c6:d0:34:58:1a:bb:c6:20: cb:a0:5c:14:fc:73:8c:72:d1:f9:48:22:b9:46:3e: 47:4b:88:4b:77:74:bb:09:98:c7:02:1b:8a:f3:de: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3C:F7:D6:5C:72:53:B6:BE:E8:9F:D0:6C:6A:F6:B7:6F:11:1C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5f:f9:39:cd:76:37:cb:e6:2f:57:31:9c:cb:81:a5:4b:18: c3:af:19:f7:9f:9a:8f:8e:4f:01:17:73:ed:58:a0:40:23:4e: e4:65:8e:ed:6a:57:c2:4b:d5:a3:e4:d8:7f:8a:68:da:4f:f1: c7:38:12:67:80:41:4f:c1:eb:5e:84:bf:16:d8:18:bc:a8:04: 8c:c1:79:b3:dc:f0:13:ba:37:d6:40:50:54:68:b9:e6:b9:b7: d7:1f:9a:79:66:4c:8d:b1:11:9b:d1:19:78:ac:e7:56:28:29: 39:5d:62:a8:5b:18:e5:a1:35:fe:8d:35:2f:b9:2d:b8:97:5a: 28:b6:cf:f9:6c:79:6a:ac:a0:c7:91:c8:dc:ad:16:36:23:b5: 15:31:8a:a1:43:12:04:ff:39:8d:87:74:2d:6c:57:b1:5c:00: 15:b5:32:67:9c:3b:b8:12:86:89:99:0b:45:1a:99:47:be:d3: 1f:66:c5:84:90:10:5a:4f:b8:21:30:c6:21:ed:d7:b5:3b:47: 27:98:f1:8d:37:2e:13:55:31:70:51:55:01:78:ce:b2:18:0d: 7b:6c:c6:36:ab:64:4c:77:38:1b:93:ce:98:5d:34:6b:c0:18: 22:49:d8:21:23:00:8a:c9:99:1d:3c:89:92:47:13:9a:7c:fb: 1c:a8:81:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErJ26Ob4XUWoJfe2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk N2ZlMDljMTQtZWY2NC00YzIyLTkwZGUtZWIzMTkyZjNkZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjV1PBautPpS48ivWyJAmLpyKFYt033Phg02 BaDASh7S2ytsbw8RFH8pdPjIV6Xk1wYysVh77t3x2pNwSZbBYcw2dablkOFTdyby MIsFlWYX06RKNqRJZqICKQjWNFq+8ywCdyYjUWdOIcKZ5B62jTd3pnEFOC4JvszR 4OdsH5G6hwYmI2PV80lC/ZlauZGDr9to9R23WGV6hdPr8MVCH5lLyR0rb0EBzyy6 G4RW41o4nbURtz+zSVPd8+q5TsbdEfhPXhKrfWisBBLtrb4T1JS+hXvO1Fa6xtA0 WBq7xiDLoFwU/HOMctH5SCK5Rj5HS4hLd3S7CZjHAhuK896qqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIM899ZcclO2vuif0Gxq9rdvERwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmExMWZmMDUtMGQxYy0z YmU4LTkzNjEtMmEwOTE0ODJjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAApf+TnNdjfL5i9XMZzLgaVLGMOvGfefmo+OTwEXc+1YoEAjTuRl ju1qV8JL1aPk2H+KaNpP8cc4EmeAQU/B616EvxbYGLyoBIzBebPc8BO6N9ZAUFRo uea5t9cfmnlmTI2xEZvRGXis51YoKTldYqhbGOWhNf6NNS+5LbiXWii2z/lseWqs oMeRyNytFjYjtRUxiqFDEgT/OY2HdC1sV7FcABW1MmecO7gShomZC0UamUe+0x9m xYSQEFpPuCEwxiHt17U7RyeY8Y03LhNVMXBRVQF4zrIYDXtsxjarZEx3OBuTzphd NGvAGCJJ2CEjAIrJmR08iZJHE5p8+xyogXk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:09:32 2025 by rpki-client