$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json) Hash identifier: ppZp+kcuHHKSvgBmBb6fBdsL52yTv0V+74Pk/rz3DEY= Subject key identifier: 38:93:E9:DC:62:C9:30:91:26:E8:C7:0D:47:52:68:99:D5:7E:FB:B1 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584B13D6ABB1BD127B2E5A8A5B00 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54650 IP address blocks: 2604:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ab:b1:bd:12:7b:2e:5a:8a:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=af251b0b-23d2-43db-81fb-dc32e3bfb0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:71:92:f2:d8:9e:0d:a2:2e:60:41:c9:e8:c8: 04:d1:b3:58:ac:5f:2e:01:e9:b6:06:fa:9d:6d:da: 51:e6:d0:58:32:f7:77:5f:8c:95:ff:1e:95:63:48: 40:c3:b5:3f:c1:45:a8:ae:c1:55:63:c1:19:3b:8a: bf:87:8c:b3:f4:30:de:6d:6e:c3:26:61:c2:ab:ef: f8:a3:cf:a1:7f:90:6e:b5:63:ff:63:f1:14:ca:f5: f5:4f:17:d3:1d:8a:36:f0:8b:59:1b:01:0f:c7:93: 0d:41:e9:dc:5d:d7:c2:b1:84:64:d8:b2:15:67:20: fa:ce:e9:8e:72:53:4e:aa:a3:30:e2:3a:3d:6c:ec: 4d:49:ed:69:42:84:d4:3a:ba:7b:06:72:dd:81:78: c0:17:83:6b:f6:3a:74:0c:8e:28:71:1e:34:88:8f: f5:84:36:3c:53:e3:ac:3f:9a:25:58:24:9c:48:64: 56:3d:ae:82:26:f0:95:2b:f7:64:3d:06:be:c9:a8: 62:23:45:9e:11:75:6a:ac:7a:b1:e7:2c:26:db:06: cc:29:c4:c0:d5:4b:1a:00:76:39:e9:be:37:e3:8b: e0:ae:d9:58:40:23:1e:d7:56:20:96:c2:03:2c:8d: 00:0b:f3:a6:6d:89:b8:1b:83:fd:51:7c:53:28:f6: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:93:E9:DC:62:C9:30:91:26:E8:C7:0D:47:52:68:99:D5:7E:FB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv6: 2604:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:16:55:55:ce:29:df:1f:49:62:56:dc:1b:e3:2c:66:c3:56: 17:af:fb:1b:4c:a3:0b:4b:01:10:73:9a:a3:34:7a:80:c1:a3: 7a:82:d4:61:2d:81:aa:18:fb:c1:f4:1e:b7:d2:7e:d9:b9:34: ca:a8:fc:a5:23:74:f6:ef:94:f6:fa:10:23:62:4c:c8:70:70: 7c:9a:02:da:71:15:97:fa:9f:9f:d4:fe:53:f2:73:cc:b0:08: cd:67:04:35:04:fc:aa:4c:e6:b0:6c:29:74:2e:c7:e0:f6:3b: e3:18:e7:a9:1f:ee:29:01:3c:01:02:f7:96:a3:27:50:2a:0e: 99:56:0c:90:0c:fd:b9:f9:f5:d8:53:e6:2c:bb:6d:52:e5:1c: 5e:70:2e:44:a1:c2:04:7e:da:11:cb:5d:9c:43:8a:5b:21:b7: 69:7e:33:7e:58:17:a5:d0:e1:1c:15:3d:92:d1:04:ae:dc:cb: 34:bd:32:da:02:6c:03:c5:a9:04:98:10:dd:89:90:39:f3:2f: a6:7b:bd:5a:fb:91:c6:5d:23:7c:6b:04:ac:7e:48:f9:27:22: c6:7c:d9:2f:68:35:82:7d:26:ee:75:a3:dc:c6:bf:ad:32:4d: 7b:c2:13:49:bc:4f:37:01:64:63:06:db:34:cb:b1:b6:16:7b: ff:b0:34:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1quxvRJ7LlqKWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YWYyNTFiMGItMjNkMi00M2RiLTgxZmItZGMzMmUzYmZiMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHGS8tieDaIuYEHJ6MgE0bNYrF8uAem2Bvqd bdpR5tBYMvd3X4yV/x6VY0hAw7U/wUWorsFVY8EZO4q/h4yz9DDebW7DJmHCq+/4 o8+hf5ButWP/Y/EUyvX1TxfTHYo28ItZGwEPx5MNQencXdfCsYRk2LIVZyD6zumO clNOqqMw4jo9bOxNSe1pQoTUOrp7BnLdgXjAF4Nr9jp0DI4ocR40iI/1hDY8U+Os P5olWCScSGRWPa6CJvCVK/dkPQa+yahiI0WeEXVqrHqx5ywm2wbMKcTA1UsaAHY5 6b4344vgrtlYQCMe11YglsIDLI0AC/OmbYm4G4P9UXxTKPaxjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDiT6dxiyTCRJujHDUdSaJnVfvuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvYmM2Njk2NzUtNGYwOS0z MTAwLTg1MmItZjg5YjhlNGZhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOFlVVzinfH0liVtwb4yxmw1YXr/sbTKMLSwEQc5qjNHqAwaN6gtRh LYGqGPvB9B630n7ZuTTKqPylI3T275T2+hAjYkzIcHB8mgLacRWX+p+f1P5T8nPM sAjNZwQ1BPyqTOawbCl0Lsfg9jvjGOepH+4pATwBAveWoydQKg6ZVgyQDP25+fXY U+Ysu21S5RxecC5EocIEftoRy12cQ4pbIbdpfjN+WBel0OEcFT2S0QSu3Ms0vTLa AmwDxakEmBDdiZA58y+me71a+5HGXSN8awSsfkj5JyLGfNkvaDWCfSbudaPcxr+t Mk17whNJvE83AWRjBts0y7G2Fnv/sDSo -----END CERTIFICATE-----Generated at Wed Nov 5 09:23:24 2025 by rpki-client