$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa File: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (raw, json) Hash identifier: zLZ4dGXhKCFMXZ9YD8MYUNFahYFknPVfQ3lO3W2OMZM= Subject key identifier: 77:75:5B:58:93:8E:2D:D7:48:22:40:A1:3F:74:7C:A2:BB:8F:E5:44 Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584BAA97A53C8958FC8D6EFD2600 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 2001:504:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a5:3c:89:58:fc:8d:6e:fd:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=842fb7ad-c789-46d1-b131-316e4d4f6ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f5:e6:cf:2a:81:24:51:88:37:67:0b:5b:1b: 5f:b3:31:95:3b:b2:87:3d:79:b0:47:b5:a3:ca:e3: f0:bc:5e:0b:e1:22:41:38:43:ce:fd:4f:22:58:b7: f0:fa:58:dc:0c:9f:c2:44:b8:a2:76:20:09:3e:50: 37:a6:fc:95:99:43:f1:a9:2a:97:a8:45:db:95:9f: 91:2a:75:f6:7c:d4:86:14:d6:7a:eb:c5:e8:3b:37: e7:a2:ec:92:f0:53:0a:23:4f:16:47:15:f9:98:21: 4b:93:40:ac:ba:cc:8c:04:bd:b7:43:d3:a1:00:57: 36:7f:5f:cd:da:a8:11:05:51:fc:89:1e:2e:0f:ee: 8f:06:e1:dc:8b:cb:4e:97:66:68:88:0e:6d:b8:16: 0e:0a:2a:4a:5e:10:21:d9:3d:a5:03:d1:2c:75:d8: a5:2c:8d:73:a2:73:1e:cb:22:34:ae:52:b8:f5:3f: 9e:0e:f7:eb:c9:94:07:8c:9f:46:f5:07:36:34:8a: 02:f8:15:c5:68:bf:3d:1c:35:03:af:a4:dd:83:44: d9:4e:58:62:d5:3e:6d:f6:dd:0f:ab:f8:72:8f:cf: d1:97:bd:62:34:8d:87:0e:d8:ad:03:ac:e7:50:46: 16:dd:c7:87:7f:98:d3:6c:0f:6d:84:d3:b4:53:f2: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:75:5B:58:93:8E:2D:D7:48:22:40:A1:3F:74:7C:A2:BB:8F:E5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:bd:fe:84:8c:db:36:21:d3:4f:45:e8:81:08:70:4d:cd:53: c5:4f:73:f3:9a:01:46:f5:5c:4d:fc:c2:6b:9b:16:fd:e1:96: 15:07:5e:33:b6:42:1b:34:16:fd:95:ab:7b:ac:3e:92:03:f3: dc:c9:a8:96:a3:c3:af:2b:00:5f:f3:7c:96:33:9d:62:93:3b: 2a:ef:03:f9:a9:a8:63:2d:86:28:58:c3:48:19:4c:fe:fe:31: 66:9b:1b:21:a0:c6:da:9f:e5:f5:44:86:18:2d:37:5f:17:7f: 01:e0:84:ac:1f:04:1a:a7:94:17:71:21:0a:70:61:12:1c:72: 69:4f:5d:83:ac:55:b3:3b:53:74:25:49:5d:a5:63:6d:cd:9b: 68:a5:bf:9c:23:ce:bb:83:95:80:1a:01:39:05:13:2c:42:a2: ff:7a:d5:ba:8e:d3:05:b4:60:95:d7:e9:d9:98:27:1a:ec:76: 73:2d:88:85:8b:3d:29:fc:20:55:fc:da:f7:37:6c:64:72:7a: c2:4f:94:5c:a0:b9:fa:92:b4:5c:3a:1d:d5:89:ca:92:67:9a: 54:a1:f4:93:95:20:5d:e6:f6:ae:ed:24:8a:ba:f8:d8:a1:0b: b4:95:56:e7:a0:00:35:56:84:c5:51:ba:48:42:5b:33:5e:90: c7:e9:b0:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuql6U8iVj8jW79JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ODQyZmI3YWQtYzc4OS00NmQxLWIxMzEtMzE2ZTRkNGY2YWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvXmzyqBJFGIN2cLWxtfszGVO7KHPXmwR7Wj yuPwvF4L4SJBOEPO/U8iWLfw+ljcDJ/CRLiidiAJPlA3pvyVmUPxqSqXqEXblZ+R KnX2fNSGFNZ668XoOzfnouyS8FMKI08WRxX5mCFLk0CsusyMBL23Q9OhAFc2f1/N 2qgRBVH8iR4uD+6PBuHci8tOl2ZoiA5tuBYOCipKXhAh2T2lA9EsddilLI1zonMe yyI0rlK49T+eDvfryZQHjJ9G9Qc2NIoC+BXFaL89HDUDr6Tdg0TZTlhi1T5t9t0P q/hyj8/Rl71iNI2HDtitA6znUEYW3ceHf5jTbA9thNO0U/K8jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHd1W1iTji3XSCJAoT90fKK7j+VEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmExMWZmMDUtMGQxYy0z YmU4LTkzNjEtMmEwOTE0ODJjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALu9/oSM2zYh009F6IEIcE3NU8VPc/OaAUb1XE38wmubFv3hlhUH XjO2Qhs0Fv2Vq3usPpID89zJqJajw68rAF/zfJYznWKTOyrvA/mpqGMthihYw0gZ TP7+MWabGyGgxtqf5fVEhhgtN18XfwHghKwfBBqnlBdxIQpwYRIccmlPXYOsVbM7 U3QlSV2lY23Nm2ilv5wjzruDlYAaATkFEyxCov961bqO0wW0YJXX6dmYJxrsdnMt iIWLPSn8IFX82vc3bGRyesJPlFygufqStFw6HdWJypJnmlSh9JOVIF3m9q7tJIq6 +NihC7SVVuegADVWhMVRukhCWzNekMfpsP8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:07 2025 by rpki-client