$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa File: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (raw, json) Hash identifier: QI+7cwgQYexvHpym/GQqpTN6ZMbclj03kusUcfQrRKs= Subject key identifier: 5B:A9:3B:66:FB:8D:D9:ED:43:DF:C8:94:99:CF:B8:CB:29:9A:7A:9F Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584BAA97A512383806A55EE6B680 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 2001:504:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a5:12:38:38:06:a5:5e:e6:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=95bd0a97-55ec-4835-9cd9-0558c17687d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:3c:d7:96:8c:8c:bf:93:a8:09:5b:62:ca: fa:c0:f9:e1:96:a3:b4:49:a4:74:0d:48:ac:b1:68: 76:1c:a7:43:ef:92:ca:40:32:48:d0:ca:4e:91:c5: 29:a3:0a:48:05:9b:95:54:a5:84:f3:15:01:20:7f: c4:5f:a4:28:86:aa:af:52:4a:89:1e:37:02:2c:04: 59:8a:ef:10:45:f6:85:1b:1b:0c:83:a6:da:be:9e: b0:5c:6b:8e:e6:89:34:73:c3:4d:ba:65:7e:31:9e: 9a:85:f5:18:fd:78:3a:b2:b2:0c:fe:b7:e4:e5:e4: 2d:c0:78:05:2a:9a:0a:45:60:2c:c3:b3:47:45:1d: 28:c6:e3:8c:8f:d2:07:d7:11:75:2d:73:fd:06:33: b8:00:78:32:93:87:ea:08:3b:0a:cc:16:b1:71:58: e2:22:b1:ad:e9:22:d0:71:ee:28:e6:98:a3:85:5a: 3c:5b:04:83:fa:3a:11:a2:17:c7:d7:81:12:b0:68: e0:a7:62:17:f5:67:9e:be:6a:48:5a:dd:41:03:05: ed:f9:57:4f:c7:62:8e:5e:ea:09:4b:9b:65:18:ec: a6:1c:58:f9:76:2c:36:f3:08:d3:cd:2c:f9:bb:2c: 6e:6f:1a:bb:8e:b9:0b:39:65:be:bd:89:6a:fe:2c: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A9:3B:66:FB:8D:D9:ED:43:DF:C8:94:99:CF:B8:CB:29:9A:7A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e0:6d:74:6e:e2:ca:8c:21:d3:ea:74:cb:da:f3:47:3c:88: 09:6a:0d:78:37:7b:af:f4:fb:5e:99:25:fa:03:2e:ac:79:61: 7f:60:9d:35:bf:34:25:06:6f:8a:cd:f7:cb:5d:fd:aa:84:98: 69:91:1f:a1:b5:b4:cf:18:8f:3d:57:f3:f1:a1:9a:f7:18:30: 7a:1e:3f:b8:6f:68:6d:7d:f3:89:1a:47:db:71:13:2a:fe:4e: ba:fa:95:3f:96:b8:ca:40:ac:03:2c:a7:fb:bb:da:0c:e3:ad: 06:ed:85:17:72:11:e5:2e:51:ef:0d:b3:c4:f3:6c:73:7c:58: ea:c8:c2:b8:cf:ee:62:30:06:15:e8:ed:d9:36:11:1a:31:3b: 24:cb:2b:9f:c0:9d:4c:5a:99:64:65:f9:90:9a:3e:b4:36:f4: 12:0e:de:1b:28:5f:85:7e:db:43:87:20:fa:09:40:e7:bc:9b: c3:7f:8a:84:cb:c1:af:43:42:7b:24:8c:b8:cf:af:d6:8c:62: 1a:45:0a:5e:06:b0:da:61:a9:39:09:20:2c:19:ba:e0:8f:9f: 55:90:e5:e2:b2:8f:97:93:5b:2b:82:eb:2d:26:aa:85:e1:7f: d9:97:f7:d5:1b:b4:44:6a:a1:5e:4e:35:56:30:11:8f:ff:3a: ad:30:72:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuql6USODgGpV7mtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OTViZDBhOTctNTVlYy00ODM1LTljZDktMDU1OGMxNzY4N2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmg815aMjL+TqAlbYsr6wPnhlqO0SaR0DUis sWh2HKdD75LKQDJI0MpOkcUpowpIBZuVVKWE8xUBIH/EX6QohqqvUkqJHjcCLARZ iu8QRfaFGxsMg6bavp6wXGuO5ok0c8NNumV+MZ6ahfUY/Xg6srIM/rfk5eQtwHgF KpoKRWAsw7NHRR0oxuOMj9IH1xF1LXP9BjO4AHgyk4fqCDsKzBaxcVjiIrGt6SLQ ce4o5pijhVo8WwSD+joRohfH14ESsGjgp2IX9WeevmpIWt1BAwXt+VdPx2KOXuoJ S5tlGOymHFj5diw28wjTzSz5uyxubxq7jrkLOWW+vYlq/iwgxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFupO2b7jdntQ9/IlJnPuMspmnqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmFhNzU4NWYtZDUxYy0z MGRhLWEwZmItMzZkOTQ2MzY1NGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPgbXRu4sqMIdPqdMva80c8iAlqDXg3e6/0+16ZJfoDLqx5YX9g nTW/NCUGb4rN98td/aqEmGmRH6G1tM8Yjz1X8/GhmvcYMHoeP7hvaG1984kaR9tx Eyr+Trr6lT+WuMpArAMsp/u72gzjrQbthRdyEeUuUe8Ns8TzbHN8WOrIwrjP7mIw BhXo7dk2ERoxOyTLK5/AnUxamWRl+ZCaPrQ29BIO3hsoX4V+20OHIPoJQOe8m8N/ ioTLwa9DQnskjLjPr9aMYhpFCl4GsNphqTkJICwZuuCPn1WQ5eKyj5eTWyuC6y0m qoXhf9mX99UbtERqoV5ONVYwEY//Oq0wckE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:45 2025 by rpki-client