$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa File: 07231d67-9f09-3f69-b773-3c3fa25b3b66.roa (raw, json) Hash identifier: NJYWf6EP/vFJWYjd56W2PCVgBhdUAKYvWZF7P/TTgDI= Subject key identifier: 9D:03:5A:3A:57:A5:48:6A:6D:65:BA:C0:A8:D1:D7:C9:CC:A4:2A:A3 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584BA9326A07380EE6D42F246AF0 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 64213 IP address blocks: 2001:504:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6a:07:38:0e:e6:d4:2f:24:6a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=b60b59af-7c48-4b32-b3a0-476c05291ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:eb:65:d6:90:18:27:56:f4:67:86:ae:af: d7:be:46:19:41:bb:57:69:12:5f:64:05:09:71:81: 08:ae:f9:3a:92:46:2f:72:7e:0f:eb:76:0c:12:58: 20:37:c0:7f:c2:72:b8:c9:fb:9d:10:7d:74:68:2c: 6a:7d:76:31:5b:12:24:6d:82:4e:3d:85:d0:36:27: 86:a3:11:b9:4c:8e:35:b7:3d:d3:61:ed:88:95:be: 8e:41:9e:ca:f3:f4:64:03:c7:97:a7:01:84:97:a5: d8:34:9b:c6:49:6f:34:0c:0a:7a:89:3d:37:e2:ba: 90:38:fc:de:e8:3a:0c:8f:85:f6:05:a1:bb:0b:c5: 02:a1:58:b0:ac:03:d3:00:0d:e4:81:01:73:ce:e0: 6e:50:9b:ed:47:4f:85:d3:ef:23:8a:43:dd:d6:84: cd:ea:98:fa:5e:70:a2:69:cc:74:6e:fb:f2:5b:14: 94:ab:8a:64:4a:2c:92:a1:c1:37:6a:a6:9e:85:d9: 65:93:f2:71:2e:af:be:a9:f3:78:b5:f3:88:ff:ca: fa:01:23:6e:64:e8:64:e9:66:78:c5:cb:98:5e:a2: b2:d6:39:56:f5:20:96:f4:a9:d8:6e:7a:01:0e:48: 4c:cc:4f:2d:a6:15:39:8b:6c:99:78:69:c5:0b:c4: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:03:5A:3A:57:A5:48:6A:6D:65:BA:C0:A8:D1:D7:C9:CC:A4:2A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:81:63:ab:aa:d9:25:e9:ac:81:33:43:ea:67:c7:e9:a0:3f: f4:47:26:f3:29:85:70:41:de:90:e7:f6:49:ab:d7:ac:e7:63: e7:09:3c:b4:bf:3e:56:d8:ca:dd:a0:05:7c:f2:ce:89:d3:64: ea:18:93:2a:2f:ec:1a:1e:0f:d2:66:db:ca:83:27:67:19:d8: aa:8c:e7:72:5a:41:2e:84:b4:6f:fa:6d:30:13:45:06:9f:10: 06:ad:42:cc:4b:f5:3a:1f:27:4c:68:5e:c0:a9:eb:8b:59:9b: 78:55:e1:f4:0c:9d:bc:fd:2f:a0:2d:f4:36:4d:16:3c:ec:f4: 2d:a7:ad:ac:9a:bf:16:82:db:8f:ad:c1:01:29:fa:65:3e:d7: 7d:05:66:c4:a6:9f:0e:af:37:09:95:7f:93:43:3d:db:8b:bf: 3f:8b:12:18:da:31:3b:a2:25:de:39:13:d0:fa:b0:db:f5:40: c0:08:04:fc:1c:83:f1:76:5a:ac:9e:91:70:59:bd:7d:42:6b: 33:d9:92:7f:0d:9f:de:c1:a4:2b:0b:e2:5f:a6:76:24:47:15: 0b:16:24:43:f6:d2:42:65:7f:d5:22:c4:62:66:94:9a:23:af: 3a:29:ef:34:ac:a8:c9:b7:06:f6:52:0d:f3:18:15:58:d0:d5: 81:7c:67:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMmoHOA7m1C8kavAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YjYwYjU5YWYtN2M0OC00YjMyLWIzYTAtNDc2YzA1MjkxYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzPrZdaQGCdW9GeGrq/XvkYZQbtXaRJfZAUJ cYEIrvk6kkYvcn4P63YMElggN8B/wnK4yfudEH10aCxqfXYxWxIkbYJOPYXQNieG oxG5TI41tz3TYe2Ilb6OQZ7K8/RkA8eXpwGEl6XYNJvGSW80DAp6iT034rqQOPze 6DoMj4X2BaG7C8UCoViwrAPTAA3kgQFzzuBuUJvtR0+F0+8jikPd1oTN6pj6XnCi acx0bvvyWxSUq4pkSiySocE3aqaehdllk/JxLq++qfN4tfOI/8r6ASNuZOhk6WZ4 xcuYXqKy1jlW9SCW9KnYbnoBDkhMzE8tphU5i2yZeGnFC8RwHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ0DWjpXpUhqbWW6wKjR18nMpCqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvMDcyMzFkNjctOWYwOS0z ZjY5LWI3NzMtM2MzZmEyNWIzYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOBY6uq2SXprIEzQ+pnx+mgP/RHJvMphXBB3pDn9kmr16znY+cJ PLS/PlbYyt2gBXzyzonTZOoYkyov7BoeD9Jm28qDJ2cZ2KqM53JaQS6EtG/6bTAT RQafEAatQsxL9TofJ0xoXsCp64tZm3hV4fQMnbz9L6At9DZNFjzs9C2nrayavxaC 24+twQEp+mU+130FZsSmnw6vNwmVf5NDPduLvz+LEhjaMTuiJd45E9D6sNv1QMAI BPwcg/F2WqyekXBZvX1CazPZkn8Nn97BpCsL4l+mdiRHFQsWJEP20kJlf9UixGJm lJojrzop7zSsqMm3BvZSDfMYFVjQ1YF8Z4A= -----END CERTIFICATE-----Generated at Wed Nov 5 20:46:01 2025 by rpki-client