$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/58d508a6-073f-3903-b27f-6122396fe93a.roa File: 58d508a6-073f-3903-b27f-6122396fe93a.roa (raw, json) Hash identifier: /ONdabN1H2kmZqYqulz0JQ/rQEj0jRPSyiN3kN50b44= Subject key identifier: 62:88:E2:DA:B2:20:E1:75:0E:4E:39:90:82:12:8D:0E:0F:2C:7C:46 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584AC8764FD747D5AA64095474B0 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/58d508a6-073f-3903-b27f-6122396fe93a.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 27446 IP address blocks: 2001:504:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:4f:d7:47:d5:aa:64:09:54:74:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=19490b32-1501-420a-aa24-f31ae18673ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:35:e1:ab:fa:9a:ba:3a:7a:01:1a:6b:e3: f4:ea:a1:18:54:24:69:d3:d4:9d:60:5d:ce:cc:b2: bd:b7:9d:9c:f1:64:76:10:29:32:a6:75:be:67:c6: 33:e2:fc:e4:f6:03:38:b4:48:02:09:2f:ab:4c:d1: b9:19:4e:9e:1d:09:3e:4c:0b:c7:c8:8d:ae:68:d6: 5b:54:cf:12:65:28:b7:a2:ae:48:e4:fb:99:15:ce: bc:20:7b:d1:d7:46:6b:f3:dd:61:17:58:7e:f8:c0: e6:81:14:f3:52:c8:ac:84:11:cc:64:92:14:60:b4: 3a:d5:49:22:61:c6:d8:12:bc:b1:4b:48:c9:a4:92: e4:23:4b:c5:b9:32:ad:e9:ff:22:88:f0:f9:b8:98: 5b:48:22:0a:30:75:86:f2:4f:83:09:85:fb:d6:95: 47:b4:cb:40:e6:d7:22:06:43:cd:fb:ae:20:50:e0: 2b:02:f5:16:52:27:a2:8e:81:9f:5d:ef:85:70:22: d3:6b:21:7b:4b:94:3b:e0:e2:94:a7:3d:23:1c:c8: 5d:d9:81:52:83:cc:d3:1b:74:d9:7a:7f:85:50:be: d5:dc:d5:af:2c:0c:2e:39:90:67:9c:19:88:4e:70: fa:78:ed:a1:a3:2b:9a:1d:a2:63:28:e3:79:22:13: 33:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:88:E2:DA:B2:20:E1:75:0E:4E:39:90:82:12:8D:0E:0F:2C:7C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/58d508a6-073f-3903-b27f-6122396fe93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:f4:78:f9:3e:fc:10:f1:a2:0f:60:f9:76:8d:57:a1:bc:68: 9d:61:50:fc:b5:af:e0:d1:12:f1:15:91:3b:84:8d:e3:1f:d2: 76:3a:20:aa:31:b6:48:6a:fa:13:76:c4:56:b9:1d:47:46:16: b6:fe:7e:fc:88:43:9b:b8:a9:bc:b6:0b:19:1e:ea:9f:ff:ac: 70:8a:d1:a4:94:c5:89:e4:01:07:70:68:4c:b7:82:58:35:52: 6d:99:7b:c8:08:6e:c3:95:58:e3:65:8e:5d:a2:71:94:97:32: 56:b4:58:b0:78:1d:73:1b:73:93:9a:86:d2:d9:86:17:52:22: 91:2a:fd:04:19:fb:ca:b3:44:76:ff:71:f2:96:68:1d:91:6b: 8b:72:d1:ef:63:62:e6:a1:5c:16:a2:88:31:9d:8a:df:e8:a8: 0b:31:e5:41:07:48:cc:3f:73:64:bc:4a:87:56:15:bf:b1:76: b6:50:cc:d0:11:06:b3:be:18:37:d6:5e:e7:be:ad:aa:10:e3: cc:a8:c6:6e:6b:e0:50:77:bc:8f:4b:a0:8b:73:6f:43:5c:a8: 1f:f8:a4:52:99:c1:dd:42:19:a2:b6:84:1d:c5:e7:03:11:d3: 3a:82:9e:1b:72:3d:fb:48:86:3a:7f:7e:f7:74:52:6e:48:5b: 3f:00:20:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdk/XR9WqZAlUdLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTk0OTBiMzItMTUwMS00MjBhLWFhMjQtZjMxYWUxODY3M2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX014av6mro6egEaa+P06qEYVCRp09SdYF3O zLK9t52c8WR2ECkypnW+Z8Yz4vzk9gM4tEgCCS+rTNG5GU6eHQk+TAvHyI2uaNZb VM8SZSi3oq5I5PuZFc68IHvR10Zr891hF1h++MDmgRTzUsishBHMZJIUYLQ61Uki YcbYEryxS0jJpJLkI0vFuTKt6f8iiPD5uJhbSCIKMHWG8k+DCYX71pVHtMtA5tci BkPN+64gUOArAvUWUieijoGfXe+FcCLTayF7S5Q74OKUpz0jHMhd2YFSg8zTG3TZ en+FUL7V3NWvLAwuOZBnnBmITnD6eO2hoyuaHaJjKON5IhMz8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGKI4tqyIOF1Dk45kIISjQ4PLHxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNThkNTA4YTYtMDczZi0z OTAzLWIyN2YtNjEyMjM5NmZlOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALr0ePk+/BDxog9g+XaNV6G8aJ1hUPy1r+DREvEVkTuEjeMf0nY6 IKoxtkhq+hN2xFa5HUdGFrb+fvyIQ5u4qby2Cxke6p//rHCK0aSUxYnkAQdwaEy3 glg1Um2Ze8gIbsOVWONljl2icZSXMla0WLB4HXMbc5OahtLZhhdSIpEq/QQZ+8qz RHb/cfKWaB2Ra4ty0e9jYuahXBaiiDGdit/oqAsx5UEHSMw/c2S8SodWFb+xdrZQ zNARBrO+GDfWXue+raoQ48yoxm5r4FB3vI9LoItzb0NcqB/4pFKZwd1CGaK2hB3F 5wMR0zqCnhtyPftIhjp/fvd0Um5IWz8AIGE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:46 2025 by rpki-client