$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa File: 07231d67-9f09-3f69-b773-3c3fa25b3b66.roa (raw, json) Hash identifier: 40QxAvM2fKRUP4TqmtCQsWLbwYHX1eXwJX+voWD2qxU= Subject key identifier: 00:21:77:35:63:A9:43:6E:FD:FA:B3:07:83:54:61:E0:21:12:B1:3F Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584AC8764FE92B7B85F99F479100 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 64213 IP address blocks: 2001:504:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:4f:e9:2b:7b:85:f9:9f:47:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=f4dafcc1-c17f-4db7-9ca8-8edbb0346a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:ed:5e:54:58:b9:36:ca:d2:6a:12:5a:e2: cc:a0:f4:5d:42:94:7a:c0:78:26:b2:6c:ea:66:0f: 70:f6:03:e2:eb:ca:dd:08:92:2e:3b:1b:d3:9d:5e: b1:54:b7:1f:ff:79:23:94:98:35:6a:0c:5b:58:64: 68:ba:24:c1:f3:e2:ec:be:28:08:8e:46:f0:02:87: 7c:97:5a:76:3c:19:07:46:5f:58:b7:46:4e:5a:6c: 13:90:eb:4e:d3:c1:9c:83:13:57:08:36:76:81:91: ea:10:43:87:f2:ed:f7:71:a3:1f:6d:a4:91:1c:b7: 5c:a4:e5:4d:04:e6:8c:13:2e:79:64:4b:f4:a8:6b: 55:4d:01:fc:3c:1c:64:07:61:a0:64:55:3a:a0:2a: f6:3b:2c:2c:17:a2:a7:dd:e5:c7:d2:45:21:dd:80: 9b:07:61:ab:af:e3:89:54:82:2c:52:27:95:44:b2: 19:d4:3c:e9:53:00:08:b5:b7:f1:a5:97:0b:bc:1c: 5b:79:3f:41:ae:0f:c1:61:17:8f:8d:97:64:d5:a1: 67:05:cb:24:e7:4f:87:c7:b1:ac:30:e8:e7:89:79: 6a:89:ae:5a:cd:21:b2:d8:04:14:1f:66:d1:d2:49: 54:51:d9:45:eb:06:66:9f:9d:f8:d0:8a:8a:05:01: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:77:35:63:A9:43:6E:FD:FA:B3:07:83:54:61:E0:21:12:B1:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:49:f0:9b:33:d2:1f:f3:72:df:95:df:2d:86:5b:e1:2f:6e: c4:c0:87:76:78:6f:5b:54:3c:41:29:0d:94:3a:b0:32:ec:2f: a3:82:74:8b:65:06:15:65:eb:7d:66:2e:82:74:3d:cb:65:db: 15:7b:44:bc:89:b9:87:42:de:cc:83:17:cc:f5:0a:d1:b6:ee: fd:a6:44:09:7d:10:19:3f:c3:74:32:79:3a:ca:4e:94:a9:e2: 4b:70:e4:01:43:80:27:b4:d5:5d:f7:9d:1a:1b:6e:41:8f:0f: 27:50:1f:36:a9:49:2d:12:36:2a:5f:4b:4f:1e:1c:d9:5a:60: 3a:e6:fc:76:bf:60:e1:a5:7b:48:aa:a3:5a:d3:9b:7b:a3:97: 91:60:e1:d6:3e:13:35:aa:1d:58:37:37:c1:10:67:9b:5c:3e: d4:4a:21:e6:8c:59:51:7f:76:1b:cf:7d:84:55:32:58:d3:51: eb:0a:81:b6:06:62:bb:ae:9e:9e:86:03:fb:dc:a2:ac:23:3c: 9c:75:f4:7a:6a:d9:ed:61:8a:d5:4e:52:46:cc:aa:bd:96:1f: 64:c1:d9:7f:51:71:d7:04:ca:54:b9:11:e8:b6:f4:2c:72:10: a2:9c:59:5b:6e:09:ce:c3:6e:13:bc:2a:c9:ed:2c:c6:42:d1: d9:b4:84:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdk/pK3uF+Z9HkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjRkYWZjYzEtYzE3Zi00ZGI3LTljYTgtOGVkYmIwMzQ2YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL/tXlRYuTbK0moSWuLMoPRdQpR6wHgmsmzq Zg9w9gPi68rdCJIuOxvTnV6xVLcf/3kjlJg1agxbWGRouiTB8+LsvigIjkbwAod8 l1p2PBkHRl9Yt0ZOWmwTkOtO08GcgxNXCDZ2gZHqEEOH8u33caMfbaSRHLdcpOVN BOaMEy55ZEv0qGtVTQH8PBxkB2GgZFU6oCr2OywsF6Kn3eXH0kUh3YCbB2Grr+OJ VIIsUieVRLIZ1DzpUwAItbfxpZcLvBxbeT9Brg/BYRePjZdk1aFnBcsk50+Hx7Gs MOjniXlqia5azSGy2AQUH2bR0klUUdlF6wZmn5340IqKBQGooQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAhdzVjqUNu/fqzB4NUYeAhErE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvMDcyMzFkNjctOWYwOS0z ZjY5LWI3NzMtM2MzZmEyNWIzYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpJ8Jsz0h/zct+V3y2GW+EvbsTAh3Z4b1tUPEEpDZQ6sDLsL6OC dItlBhVl631mLoJ0Pctl2xV7RLyJuYdC3syDF8z1CtG27v2mRAl9EBk/w3QyeTrK TpSp4ktw5AFDgCe01V33nRobbkGPDydQHzapSS0SNipfS08eHNlaYDrm/Ha/YOGl e0iqo1rTm3ujl5Fg4dY+EzWqHVg3N8EQZ5tcPtRKIeaMWVF/dhvPfYRVMljTUesK gbYGYruunp6GA/vcoqwjPJx19Hpq2e1hitVOUkbMqr2WH2TB2X9RcdcEylS5Eei2 9CxyEKKcWVtuCc7DbhO8KsntLMZC0dm0hJY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:38:30 2025 by rpki-client