$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfafb855-3437-348c-9908-1e71541bb5df.roa File: bfafb855-3437-348c-9908-1e71541bb5df.roa (raw, json) Hash identifier: OawddPodFGBwWAXp+6ej+jBrPiO/DNAPEwMILdIGFGg= Subject key identifier: AC:33:A5:98:E1:9F:F1:B9:C8:AB:A7:0F:EC:0F:DA:E9:3F:69:D6:01 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B99D78F84FD7AEF59E67B3200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfafb855-3437-348c-9908-1e71541bb5df.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e87:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8f:84:fd:7a:ef:59:e6:7b:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1511ba51-c3b4-4bae-bcff-e18bc1a6d304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:e8:1b:88:41:ab:fe:c3:4f:60:a9:6f:38: 70:aa:9e:0c:da:bb:4b:35:2b:74:79:f6:3c:ce:cd: ab:ff:4f:f4:5f:a5:90:8c:20:ff:9d:ba:2d:b2:79: bf:2f:bc:1b:be:1f:43:e5:6d:c2:48:ac:7c:e4:12: 20:a8:8c:89:ea:d2:6f:10:d1:7e:4e:ae:30:56:b1: 13:13:21:6b:71:87:99:ef:f4:f7:65:1c:70:a4:5e: 6c:ef:89:75:ae:23:43:3a:20:ee:64:72:73:31:bf: 31:9a:26:ad:62:96:46:12:43:fc:f7:08:cf:02:0c: 86:ce:9d:a5:84:ff:bb:44:0a:73:b8:b8:e3:1e:41: e5:09:e8:2c:8a:9f:22:e0:c3:0d:29:b5:3f:14:2a: 41:ba:b6:85:f3:7a:63:00:cf:8e:a3:bd:12:7c:15: 1e:41:7b:0b:00:0f:18:ee:ec:ba:75:0f:97:27:54: b0:0c:e5:7d:98:81:95:2f:c2:9e:23:21:7b:15:4c: f3:1d:ea:ae:2f:1c:8d:53:49:e0:51:cd:76:9a:4f: d4:e7:d5:dd:37:77:3d:6e:e2:8c:1c:55:7e:69:c1: a8:75:29:5d:23:eb:b2:da:dd:a8:aa:dd:79:ad:09: 41:02:9c:42:e5:f8:7b:92:5d:be:c0:e4:13:b5:a1: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:33:A5:98:E1:9F:F1:B9:C8:AB:A7:0F:EC:0F:DA:E9:3F:69:D6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfafb855-3437-348c-9908-1e71541bb5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:46:6d:b2:03:6c:1a:73:93:2d:97:1d:60:e6:de:3a:74:eb: 6a:d0:0c:72:1b:1c:d2:09:18:bb:6d:de:28:e7:33:7c:e8:6c: d9:08:9d:f8:37:22:e9:85:aa:92:28:1b:eb:a8:27:87:91:a9: c3:f5:3d:a3:05:3e:6f:51:91:0c:e5:48:45:b0:eb:88:0b:fc: bd:d6:b9:5b:bb:ee:44:fb:dd:8e:29:2c:e6:70:51:9e:de:fd: c8:ea:dd:10:94:ce:79:f1:f3:cb:46:45:a3:88:32:31:a8:e1: 9e:d5:86:40:32:c2:bb:17:0a:ea:5b:34:46:ce:bf:6b:26:e2: f7:f8:db:2e:d0:7c:e8:75:63:7c:72:e2:48:ec:ba:ac:5e:f8: 7e:02:9c:b4:14:db:8e:7c:43:fa:36:83:4c:2c:9a:73:8b:be: f9:95:4d:c1:1e:5e:d2:df:64:3d:9a:20:87:f5:f7:72:1b:a7: c6:01:7e:99:38:5b:09:db:5a:68:20:cc:37:25:b8:33:27:5a: 0e:c5:44:25:e2:9e:83:80:57:a5:b7:8c:96:62:52:60:59:14: b4:cc:4a:d9:57:a8:5b:e1:fe:19:6a:17:34:2e:08:80:c5:74: 93:2a:0d:2e:eb:72:a3:7e:c5:3a:26:7a:37:a9:f2:d8:c9:0a: a0:a8:b4:80 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuZ14+E/XrvWeZ7MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTUxMWJhNTEtYzNiNC00YmFlLWJjZmYtZTE4YmMxYTZkMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvvoG4hBq/7DT2Cpbzhwqp4M2rtLNSt0efY8 zs2r/0/0X6WQjCD/nbotsnm/L7wbvh9D5W3CSKx85BIgqIyJ6tJvENF+Tq4wVrET EyFrcYeZ7/T3ZRxwpF5s74l1riNDOiDuZHJzMb8xmiatYpZGEkP89wjPAgyGzp2l hP+7RApzuLjjHkHlCegsip8i4MMNKbU/FCpBuraF83pjAM+Oo70SfBUeQXsLAA8Y 7uy6dQ+XJ1SwDOV9mIGVL8KeIyF7FUzzHequLxyNU0ngUc12mk/U59XdN3c9buKM HFV+acGodSldI+uy2t2oqt15rQlBApxC5fh7kl2+wOQTtaEcswIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKwzpZjhn/G5yKunD+wP2uk/adYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmZhZmI4NTUtMzQzNy0z NDhjLTk5MDgtMWU3MTU0MWJiNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhygw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlUZtsgNsGnOTLZcdYObeOnTratAMchsc0gkYu23eKOczfOhs2Qid +Dci6YWqkigb66gnh5Gpw/U9owU+b1GRDOVIRbDriAv8vda5W7vuRPvdjiks5nBR nt79yOrdEJTOefHzy0ZFo4gyMajhntWGQDLCuxcK6ls0Rs6/aybi9/jbLtB86HVj fHLiSOy6rF74fgKctBTbjnxD+jaDTCyac4u++ZVNwR5e0t9kPZogh/X3chunxgF+ mThbCdtaaCDMNyW4MydaDsVEJeKeg4BXpbeMlmJSYFkUtMxK2VeoW+H+GWoXNC4I gMV0kyoNLutyo37FOiZ6N6ny2MkKoKi0gA== -----END CERTIFICATE-----Generated at Wed Nov 5 09:14:03 2025 by rpki-client