$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/58d508a6-073f-3903-b27f-6122396fe93a.roa File: 58d508a6-073f-3903-b27f-6122396fe93a.roa (raw, json) Hash identifier: 7YIw44A5y7Vp4CEHKlml8cHDL7zG0fujv+DuAHaB/q0= Subject key identifier: 45:31:97:87:9D:89:FD:94:6D:A5:13:54:0B:7B:6B:84:1A:AC:13:89 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584EED5219DE2B6660232E5ED040 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/58d508a6-073f-3903-b27f-6122396fe93a.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 27446 IP address blocks: 2001:504:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:19:de:2b:66:60:23:2e:5e:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=74875f50-6a10-477b-a8ad-3c17ae1661b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:cc:04:7f:1b:e7:72:ea:b7:b5:65:01:8f: d1:11:df:3e:9b:b7:80:52:55:26:e2:ae:a7:d3:ec: 1a:8e:41:e0:ff:85:5c:6e:36:1e:9a:38:30:46:93: ca:62:4b:15:bb:c8:c7:68:94:33:b3:00:4b:46:6f: 74:b8:99:cd:8f:c0:1e:2d:4f:8c:3f:75:b0:1c:9a: 12:2f:c8:27:cc:36:d9:45:7c:32:9c:b2:22:3c:eb: b5:db:30:d1:59:7e:2b:19:55:be:6d:0a:43:48:17: cf:84:16:c4:2e:e6:53:63:76:f6:0d:38:ab:45:71: 24:dd:e4:9f:52:3d:d3:fb:7a:9f:cb:96:94:c2:4c: 5e:fe:7e:02:ad:52:4e:36:39:12:fc:09:27:94:26: 81:ef:10:95:fb:c0:38:5a:52:37:60:c8:dc:18:7d: 5b:19:8e:ca:27:60:8b:58:55:a7:63:fc:1c:da:2f: ca:b8:60:05:3f:5f:39:91:bd:1f:1b:5d:40:e7:3d: 89:f4:cf:ce:4e:ff:89:8c:bf:5d:6a:5f:86:00:26: 3b:be:c4:a1:fa:29:63:80:6d:5a:84:48:cc:fb:0b: 0e:6a:b2:0b:2e:58:61:6a:61:77:15:71:1e:50:50: 0c:2b:e7:7c:c6:cb:56:16:99:32:69:60:69:1f:75: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:97:87:9D:89:FD:94:6D:A5:13:54:0B:7B:6B:84:1A:AC:13:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/58d508a6-073f-3903-b27f-6122396fe93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:71:eb:6b:f9:5a:d3:e1:24:d6:fe:78:52:5a:14:ae:3f:a2: 8a:7a:8e:57:77:33:69:92:d9:2c:e8:8a:42:73:07:fb:3e:5c: c3:47:53:84:65:a4:e8:94:27:95:db:2a:04:46:87:c7:e9:86: e4:14:69:66:ff:84:fe:85:43:92:7a:55:52:93:79:ec:a6:ce: 25:8b:a8:0b:22:c9:a7:c2:29:45:01:db:e6:4d:33:20:f2:ed: fa:b7:b5:39:b2:a1:75:2a:53:79:d5:4c:1b:0e:06:23:da:f7: 29:1b:cd:ed:3f:c7:1d:28:d8:6d:ce:b3:cb:2d:a8:0e:ba:11: 85:4b:9f:be:5d:fa:ea:01:38:56:b6:d1:c6:1b:5b:d1:22:2d: 73:3d:2e:97:ef:ab:1c:62:b2:a9:6d:7f:c4:e2:10:ef:da:d8: 7b:5a:e8:8a:40:1f:33:e5:67:2c:94:4b:dc:b9:39:d2:18:4f: 64:0f:be:15:92:bc:e6:b7:bb:9e:16:8c:a1:ea:f9:ad:2d:6d: 13:17:bd:b4:39:bc:e4:10:f3:fb:1b:8c:9c:20:2c:1a:2e:5c: 98:e1:1a:ac:b2:c5:13:d1:a4:a8:5e:a6:c1:df:5e:05:24:06: 3d:64:a9:7b:36:a6:a4:4f:d3:a6:dc:13:00:9f:21:58:a3:1c: be:d3:87:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7tUhneK2ZgIy5e0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NzQ4NzVmNTAtNmExMC00NzdiLWE4YWQtM2MxN2FlMTY2MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvLMBH8b53Lqt7VlAY/REd8+m7eAUlUm4q6n 0+wajkHg/4VcbjYemjgwRpPKYksVu8jHaJQzswBLRm90uJnNj8AeLU+MP3WwHJoS L8gnzDbZRXwynLIiPOu12zDRWX4rGVW+bQpDSBfPhBbELuZTY3b2DTirRXEk3eSf Uj3T+3qfy5aUwkxe/n4CrVJONjkS/AknlCaB7xCV+8A4WlI3YMjcGH1bGY7KJ2CL WFWnY/wc2i/KuGAFP185kb0fG11A5z2J9M/OTv+JjL9dal+GACY7vsSh+iljgG1a hEjM+wsOarILLlhhamF3FXEeUFAMK+d8xstWFpkyaWBpH3X40wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEUxl4edif2UbaUTVAt7a4QarBOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNThkNTA4YTYtMDczZi0z OTAzLWIyN2YtNjEyMjM5NmZlOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxx62v5WtPhJNb+eFJaFK4/oop6jld3M2mS2SzoikJzB/s+XMNH U4RlpOiUJ5XbKgRGh8fphuQUaWb/hP6FQ5J6VVKTeeymziWLqAsiyafCKUUB2+ZN MyDy7fq3tTmyoXUqU3nVTBsOBiPa9ykbze0/xx0o2G3Os8stqA66EYVLn75d+uoB OFa20cYbW9EiLXM9Lpfvqxxisqltf8TiEO/a2Hta6IpAHzPlZyyUS9y5OdIYT2QP vhWSvOa3u54WjKHq+a0tbRMXvbQ5vOQQ8/sbjJwgLBouXJjhGqyyxRPRpKhepsHf XgUkBj1kqXs2pqRP06bcEwCfIVijHL7ThzE= -----END CERTIFICATE-----Generated at Mon Aug 24 18:24:54 2026 by rpki-client