$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa File: 07231d67-9f09-3f69-b773-3c3fa25b3b66.roa (raw, json) Hash identifier: 1nlVlc0kY1rd74LA6aQveAxyTWmAhBFkgXgteUEMbpY= Subject key identifier: 35:A1:FE:64:5D:A2:49:EA:E2:97:71:07:2A:6D:BB:5D:32:83:FE:6C Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584E4AEF49B6D20B64BB76AC6100 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 64213 IP address blocks: 2001:504:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:49:b6:d2:0b:64:bb:76:ac:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=4aa352a9-ec91-4a35-baf0-2bced35d0b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:9f:92:f5:a9:31:4a:2e:d8:dd:8d:30:de: 53:54:09:7b:af:4a:4e:36:4a:52:25:1c:6d:e5:33: 4b:af:5a:97:e1:3b:1e:07:53:de:a5:a4:5f:f2:80: 99:c8:c3:f1:01:02:e2:7d:1c:47:88:97:77:15:38: f3:1c:f9:39:47:6f:73:4d:5b:00:a1:5f:de:11:6e: 00:47:d8:c6:98:ca:16:df:a6:ff:53:a1:ac:42:28: f3:75:50:bd:b6:69:17:46:fa:46:e8:41:d3:6c:94: 7e:04:9c:a1:d4:af:46:00:49:81:5c:a4:c5:99:70: 22:c5:f0:cc:98:4c:54:7a:2f:76:02:4f:a9:a1:aa: b5:92:e0:65:e5:d0:85:84:06:05:6e:ea:21:4a:74: f5:87:e7:38:7b:1e:44:88:bb:19:31:b1:76:c7:4a: 2f:44:a5:97:cb:34:c8:a4:25:be:13:ce:d7:71:f4: 87:f3:40:e8:c1:c5:c7:41:99:b3:72:93:59:5a:a3: 1d:2a:7a:99:f5:0c:df:54:92:5b:e3:1c:87:5e:7a: 22:fa:e7:0f:8b:bc:e9:5e:c0:ce:ee:2d:3a:d8:6b: 92:54:52:c1:83:73:1b:03:3d:1b:ab:da:94:ac:41: 9c:09:bb:03:36:79:35:27:49:c0:3f:3f:54:a8:ee: ba:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A1:FE:64:5D:A2:49:EA:E2:97:71:07:2A:6D:BB:5D:32:83:FE:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9d:f7:86:b3:c3:47:46:73:f4:7a:32:4c:1f:38:4a:f7:13: ba:2b:f9:0e:91:4a:47:04:09:e3:88:35:e2:f9:9a:75:c8:e4: e2:88:27:f3:4c:d4:40:ac:35:43:cf:db:77:dc:a8:5d:aa:17: eb:3f:cb:35:b0:d3:7f:f5:39:b5:33:55:30:80:c4:1d:d9:d4: 10:97:90:5c:47:01:59:e2:d2:9e:98:20:3b:4a:5b:ff:ab:49: ae:28:e0:92:65:d6:97:6d:96:49:93:83:8c:f9:75:7c:96:77: 86:50:e4:b6:24:8b:1c:a7:87:f7:c0:8e:4b:d2:07:33:fe:2b: 48:1e:cc:2d:d8:25:c9:db:7b:fc:a4:f8:a0:81:ff:15:e1:a8: 49:9b:6d:2a:41:e5:76:74:92:4a:9b:18:ea:15:47:5a:5d:7f: f0:42:0e:92:19:50:69:7d:b7:7e:7e:35:6a:22:a1:49:e6:1f: 45:39:4f:f7:86:35:8a:03:ea:13:c5:5a:d9:df:ab:57:be:04: dc:ac:c0:42:ee:ed:dd:62:7b:c6:19:fa:69:b9:7e:16:57:c3: b4:b3:ba:24:37:72:c8:4f:f2:10:d5:5d:47:81:af:7a:dd:cf: 3f:94:fc:c9:a8:30:1e:f0:12:34:82:33:ad:80:8a:93:d4:20: c6:48:52:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5K70m20gtku3asYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk NGFhMzUyYTktZWM5MS00YTM1LWJhZjAtMmJjZWQzNWQwYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBGfkvWpMUou2N2NMN5TVAl7r0pONkpSJRxt 5TNLr1qX4TseB1PepaRf8oCZyMPxAQLifRxHiJd3FTjzHPk5R29zTVsAoV/eEW4A R9jGmMoW36b/U6GsQijzdVC9tmkXRvpG6EHTbJR+BJyh1K9GAEmBXKTFmXAixfDM mExUei92Ak+poaq1kuBl5dCFhAYFbuohSnT1h+c4ex5EiLsZMbF2x0ovRKWXyzTI pCW+E87XcfSH80DowcXHQZmzcpNZWqMdKnqZ9QzfVJJb4xyHXnoi+ucPi7zpXsDO 7i062GuSVFLBg3MbAz0bq9qUrEGcCbsDNnk1J0nAPz9UqO66vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDWh/mRdoknq4pdxByptu10yg/5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvMDcyMzFkNjctOWYwOS0z ZjY5LWI3NzMtM2MzZmEyNWIzYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGd94azw0dGc/R6MkwfOEr3E7or+Q6RSkcECeOINeL5mnXI5OKI J/NM1ECsNUPP23fcqF2qF+s/yzWw03/1ObUzVTCAxB3Z1BCXkFxHAVni0p6YIDtK W/+rSa4o4JJl1pdtlkmTg4z5dXyWd4ZQ5LYkixynh/fAjkvSBzP+K0gezC3YJcnb e/yk+KCB/xXhqEmbbSpB5XZ0kkqbGOoVR1pdf/BCDpIZUGl9t35+NWoioUnmH0U5 T/eGNYoD6hPFWtnfq1e+BNyswELu7d1ie8YZ+mm5fhZXw7SzuiQ3cshP8hDVXUeB r3rdzz+U/MmoMB7wEjSCM62AipPUIMZIUuc= -----END CERTIFICATE-----Generated at Thu Jul 9 14:14:51 2026 by rpki-client