$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa File: 58999dee-a5dd-3f9e-9eae-4627b45d30df.roa (raw, json) Hash identifier: GOt7OVpDO70OlFQYiBeC2EmsO0EYmAcO9AsdkHgba/Y= Subject key identifier: D5:36:18:89:37:B4:7B:BA:44:79:D4:9B:AD:A1:33:FB:0E:07:B7:43 Certificate issuer: /CN=59df81a1-cce3-4626-9cbb-51da282803bf Certificate serial: 010D0C9F4328584AC5AB8293049E3CFB17EC7F00 Authority key identifier: D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 399557 IP address blocks: 2001:504:109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:82:93:04:9e:3c:fb:17:ec:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59df81a1-cce3-4626-9cbb-51da282803bf Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=bf78ce07-06f0-4441-abcb-9e3765523194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:43:b3:5d:83:d0:0a:5a:7f:69:d2:43:9a:75: 6b:6c:fb:06:de:43:43:37:e2:c8:dd:45:5e:55:a2: e6:15:80:32:ec:6c:f3:97:3a:4c:15:db:2f:8b:df: c6:5e:a9:0b:f1:89:26:dd:05:4f:98:36:4f:85:df: 7e:8d:c0:4d:ab:f8:18:3a:65:db:4b:e4:31:44:4c: f8:5f:c9:a2:8e:b4:78:b3:c7:c3:a5:02:89:fc:65: 2a:e5:fc:3b:ce:ec:52:1d:19:7e:f8:d8:c7:6c:55: 9d:74:ea:10:9a:a0:37:97:57:07:cb:ee:fd:4e:eb: d6:66:25:94:f9:94:c9:76:b7:d4:4c:fd:2a:85:0f: 5c:8d:99:09:df:f7:b5:8b:ad:b5:d9:b2:36:c1:62: 01:9f:01:11:34:19:fe:a2:eb:a5:65:ab:47:ef:95: d2:4e:8e:47:b1:1f:0b:2e:3d:f0:e7:da:a6:21:84: 41:21:bb:3e:68:e8:64:87:ac:c3:92:12:a5:90:72: 25:4c:6c:c5:5a:00:c6:bb:38:76:25:53:ac:ae:f4: e4:0d:f5:4d:48:a9:a8:93:85:37:87:9f:d3:78:62: 14:d5:79:77:f1:e3:03:65:17:86:d3:d7:4b:2a:84: 56:fb:c8:53:b2:d9:a0:96:6b:e8:11:ff:8a:4e:f4: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:36:18:89:37:B4:7B:BA:44:79:D4:9B:AD:A1:33:FB:0E:07:B7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl X509v3 Authority Key Identifier: keyid:D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:109::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d5:79:7e:58:50:0f:7c:67:9d:16:ee:d5:50:09:e0:1d:a9: e2:dd:07:c4:72:80:e9:f5:aa:23:d7:98:12:01:ba:9f:89:44: 72:c5:b3:22:5c:ec:4b:3d:9d:6a:3a:18:29:fb:08:3d:97:76: 10:3e:52:a3:2b:f7:a5:7a:c1:41:24:6c:93:28:24:37:a2:fd: 60:31:1b:81:9f:7c:0d:74:3e:db:1d:b3:50:a8:30:8d:ed:50: 53:c7:a9:70:07:74:fb:f5:0b:e3:3d:87:eb:12:ce:f8:41:f9: 07:8a:69:dd:8d:5d:c6:85:eb:ca:1c:3c:eb:44:c9:e1:ad:c6: a3:4e:03:fc:11:0b:66:7d:ec:84:7f:82:94:5e:82:20:85:9a: 05:69:d5:af:5e:3e:2f:2f:20:9c:6a:26:b2:38:a3:6f:a1:dd: 17:b2:69:e7:7c:5b:2a:67:c8:57:77:71:05:f2:fe:39:a7:77: 23:14:f2:4f:2b:26:82:63:a3:4c:c5:8e:92:03:64:46:c0:2e: 40:07:5c:fd:75:60:99:2f:52:46:01:44:52:50:37:be:55:0e: ae:f3:98:98:80:cc:8c:a4:85:4a:16:d1:15:b0:1f:8e:ca:a2: 57:d5:d2:67:03:78:31:ca:9d:2e:42:bc:c0:f5:89:70:4a:d7: 67:a9:08:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErFq4KTBJ48+xfsfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlkZjgxYTEtY2NlMy00NjI2LTljYmItNTFkYTI4Mjgw M2JmMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YmY3OGNlMDctMDZmMC00NDQxLWFiY2ItOWUzNzY1NTIzMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUOzXYPQClp/adJDmnVrbPsG3kNDN+LI3UVe VaLmFYAy7GzzlzpMFdsvi9/GXqkL8Ykm3QVPmDZPhd9+jcBNq/gYOmXbS+QxREz4 X8mijrR4s8fDpQKJ/GUq5fw7zuxSHRl++NjHbFWddOoQmqA3l1cHy+79TuvWZiWU +ZTJdrfUTP0qhQ9cjZkJ3/e1i6212bI2wWIBnwERNBn+ouulZatH75XSTo5HsR8L Lj3w59qmIYRBIbs+aOhkh6zDkhKlkHIlTGzFWgDGuzh2JVOsrvTkDfVNSKmok4U3 h5/TeGIU1Xl38eMDZReG09dLKoRW+8hTstmglmvoEf+KTvQM3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNU2GIk3tHu6RHnUm62hM/sOB7dDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWRm ODFhMS1jY2UzLTQ2MjYtOWNiYi01MWRhMjgyODAzYmYvNTg5OTlkZWUtYTVkZC0z ZjllLTllYWUtNDYyN2I0NWQzMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTlkZjgxYTEtY2NlMy00NjI2LTlj YmItNTFkYTI4MjgwM2JmLzU5ZGY4MWExLWNjZTMtNDYyNi05Y2JiLTUxZGEyODI4 MDNiZi5jcmwwHwYDVR0jBBgwFoAU2XAvW4nZxdOGYYGUWiB7NUU7PfQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWRmODFhMS1jY2UzLTQ2MjYtOWNiYi01MWRh MjgyODAzYmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAEJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXVeX5YUA98Z50W7tVQCeAdqeLdB8RygOn1qiPXmBIBup+JRHLF syJc7Es9nWo6GCn7CD2XdhA+UqMr96V6wUEkbJMoJDei/WAxG4GffA10Ptsds1Co MI3tUFPHqXAHdPv1C+M9h+sSzvhB+QeKad2NXcaF68ocPOtEyeGtxqNOA/wRC2Z9 7IR/gpRegiCFmgVp1a9ePi8vIJxqJrI4o2+h3Reyaed8WypnyFd3cQXy/jmndyMU 8k8rJoJjo0zFjpIDZEbALkAHXP11YJkvUkYBRFJQN75VDq7zmJiAzIykhUoW0RWw H47KolfV0mcDeDHKnS5CvMD1iXBK12epCKU= -----END CERTIFICATE-----Generated at Thu Aug 7 04:23:57 2025 by rpki-client