$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa File: bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa (raw, json) Hash identifier: MSuVL5UHb4SDsUFHMVdqnZrTdRlfe1V4l7tiNtUah0Q= Subject key identifier: 6B:D6:88:60:34:46:5E:0F:8E:05:7D:CE:CE:A6:EA:E9:F5:79:EB:B5 Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F4328584AF95144A56913563CDB01A478 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 0 IP address blocks: 2001:504:1b::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:44:a5:69:13:56:3c:db:01:a4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=0e84cdea-caa1-450e-95d6-3d3eadd925cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:7e:0f:28:86:2e:da:49:05:2d:bd:70:48: 12:f5:37:45:1b:f7:64:43:09:dc:f1:24:b7:81:7f: c0:73:57:a6:df:ee:dd:7b:46:4a:26:6e:90:5c:a8: f8:39:b7:ec:7b:21:3e:b9:b7:ff:ad:72:4b:a3:5d: e4:03:9a:8e:8d:5b:d4:21:a0:6d:bb:6c:19:82:e0: a5:54:c8:df:90:0f:24:6b:25:5a:0b:ea:fb:f2:e6: be:db:1c:03:02:ac:69:f8:c7:0f:52:70:32:b8:83: f0:0a:2d:00:97:2f:37:84:62:69:3a:83:c1:d9:53: 27:41:88:01:72:20:6b:71:0a:d2:84:6f:16:e6:9e: 96:36:f4:0e:45:1b:19:e2:ad:cb:29:b7:78:52:e9: a0:e0:a4:c8:68:51:82:42:1e:bf:62:5d:81:e2:33: c6:b8:66:87:f0:d5:41:78:81:83:bd:6a:e3:c4:dd: 30:05:81:04:86:40:08:d2:fc:00:ee:28:2b:1b:4b: 2c:f2:69:1e:13:1c:9f:4a:dc:73:f7:42:b1:d1:c1: ab:09:84:d3:b6:32:98:85:54:84:c9:c1:2f:b3:15: 24:ee:40:92:d4:29:d5:58:48:97:84:fd:f4:03:0f: c2:7e:33:77:3d:4c:51:4e:ea:c9:23:69:bb:ca:e0: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D6:88:60:34:46:5E:0F:8E:05:7D:CE:CE:A6:EA:E9:F5:79:EB:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:77:5a:2b:18:1d:59:23:32:31:45:e8:03:3d:5c:26:05:d6: db:72:b2:a1:b3:8b:88:0b:06:ff:00:b3:ac:4a:0c:25:ae:43: 59:63:ea:f4:f1:4d:de:30:38:99:d8:b0:3c:57:c0:4e:cc:4f: f7:ef:0c:64:9e:46:79:1e:72:3c:69:2c:49:d4:aa:60:f2:e3: 6e:01:72:9b:83:aa:b2:d6:41:3a:36:bd:d1:34:72:60:84:d9: 93:a9:4b:04:8d:47:90:ed:38:8f:f9:0c:37:50:4b:e8:a0:f3: 64:cc:bb:11:e9:81:aa:85:03:da:5d:f1:59:da:8c:38:5a:10: 59:ad:6e:90:12:c9:1c:ee:e7:94:12:ed:d4:fd:01:3e:63:5e: be:22:36:ba:b3:bb:4c:a3:2d:90:b1:28:82:96:9d:aa:70:a0: 67:ce:99:4f:df:a5:b4:9a:4a:9c:a7:24:38:c0:df:a0:79:dd: 09:80:03:81:1b:f5:03:1e:8e:f8:3a:30:2d:86:dd:a1:a7:d7: cc:7d:c9:d5:dc:85:1f:2f:7d:4c:a0:4c:c0:e2:4a:6a:b1:95: 7e:d1:b8:0d:ba:19:fb:71:d3:11:67:f4:34:44:73:60:73:d9: 05:a1:89:06:ff:40:9f:d8:83:e0:62:02:70:67:f4:3b:db:8b: 88:2d:37:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr5UUSlaRNWPNsBpHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MGU4NGNkZWEtY2FhMS00NTBlLTk1ZDYtM2QzZWFkZDkyNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZN+DyiGLtpJBS29cEgS9TdFG/dkQwnc8SS3 gX/Ac1em3+7de0ZKJm6QXKj4ObfseyE+ubf/rXJLo13kA5qOjVvUIaBtu2wZguCl VMjfkA8kayVaC+r78ua+2xwDAqxp+McPUnAyuIPwCi0Aly83hGJpOoPB2VMnQYgB ciBrcQrShG8W5p6WNvQORRsZ4q3LKbd4Uumg4KTIaFGCQh6/Yl2B4jPGuGaH8NVB eIGDvWrjxN0wBYEEhkAI0vwA7igrG0ss8mkeExyfStxz90Kx0cGrCYTTtjKYhVSE ycEvsxUk7kCS1CnVWEiXhP30Aw/CfjN3PUxRTurJI2m7yuCTTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGvWiGA0Rl4PjgV9zs6m6un1eeu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvYmQyNGZmODctYzE3OC0z ZjBkLWExZTctNzg4Y2Y5MGE4YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGt3WisYHVkjMjFF6AM9XCYF1ttysqGzi4gLBv8As6xKDCWuQ1lj 6vTxTd4wOJnYsDxXwE7MT/fvDGSeRnkecjxpLEnUqmDy424BcpuDqrLWQTo2vdE0 cmCE2ZOpSwSNR5DtOI/5DDdQS+ig82TMuxHpgaqFA9pd8VnajDhaEFmtbpASyRzu 55QS7dT9AT5jXr4iNrqzu0yjLZCxKIKWnapwoGfOmU/fpbSaSpynJDjA36B53QmA A4Eb9QMejvg6MC2G3aGn18x9ydXchR8vfUygTMDiSmqxlX7RuA26Gftx0xFn9DRE c2Bz2QWhiQb/QJ/Yg+BiAnBn9Dvbi4gtN18= -----END CERTIFICATE-----Generated at Wed Oct 8 15:47:30 2025 by rpki-client