$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa File: bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa (raw, json) Hash identifier: sYxFu2HkNQDQ8Iit/uUiYHiR77aT/cVCn0L9w8phOkA= Subject key identifier: B2:D9:E7:9F:13:26:4A:C3:A5:AA:03:09:CD:ED:71:46:93:E7:18:D4 Certificate issuer: /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5 Certificate serial: 010D0C9F4328584AA42B8448F40B34A8E781C248 Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 54113 IP address blocks: 2607:71c0:fff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:84:48:f4:0b:34:a8:e7:81:c2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=1bffb557-d3cf-4b83-a631-ef8476326f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:df:87:b7:f4:da:65:1b:f7:f4:79:a8:33: d5:6d:ae:9e:c0:e1:d7:22:11:b0:65:98:15:c7:41: 87:d2:54:82:02:67:d6:87:6d:09:56:bf:95:e0:88: 0a:5e:94:59:0a:17:b1:5c:48:07:b3:2d:9b:ff:c6: d4:ea:8e:1d:28:47:2d:80:34:ca:4f:ae:79:ad:2e: cf:aa:86:09:d9:5b:64:bf:15:11:4a:56:ef:d2:59: c1:ac:ef:7a:9d:14:28:ca:70:d6:87:78:91:e5:c0: da:a2:c8:82:6e:14:6e:55:bb:64:97:86:d7:15:df: 57:c0:d2:5f:ae:23:78:81:88:d6:d9:33:f3:23:d4: 2b:d4:61:3e:4b:20:cd:9b:dd:81:9c:54:23:6f:c0: 5b:ee:28:1e:18:33:37:93:8c:7d:d8:b5:9d:b7:9b: 86:f3:83:de:32:ea:c9:5c:12:d9:50:38:b9:dc:98: d8:d3:3b:82:0f:40:eb:19:0d:f6:d4:d5:93:05:89: 44:cf:1d:b5:ea:38:3a:83:bf:57:da:22:f6:bf:85: cb:fa:5d:07:0f:90:30:76:6d:c3:ac:da:77:b4:98: 85:95:08:b4:41:96:7f:a7:16:9b:63:59:26:e8:93: 53:d1:ee:41:a1:a8:8b:80:98:1c:ea:af:e3:4a:ed: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D9:E7:9F:13:26:4A:C3:A5:AA:03:09:CD:ED:71:46:93:E7:18:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl X509v3 Authority Key Identifier: keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer sbgp-ipAddrBlock: critical IPv6: 2607:71c0:fff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:71:4d:44:01:bc:58:a4:b4:bf:3f:34:7c:10:b0:67:4b:f7: 4c:5d:4e:07:26:7d:d0:99:49:7b:da:94:eb:61:ea:89:d1:76: c5:5e:fd:89:16:6b:d1:d7:10:84:ed:f0:0a:dc:67:48:af:7f: d5:82:53:5b:66:33:e9:30:73:a8:46:44:f6:5c:0f:34:71:e9: fb:e9:1f:4e:44:ac:42:b0:2d:91:12:fb:37:e1:08:b9:9d:c9: 67:16:41:85:d3:c9:a7:01:c5:1e:5f:c6:56:67:66:c0:8b:32: a9:44:92:3c:f4:6e:4e:4a:c1:f7:40:0f:ca:c4:44:1c:f5:53: 86:20:93:b0:fd:f4:1b:aa:47:47:cd:3a:c9:e2:88:75:13:d0: ea:5a:82:89:a2:5d:19:4b:fa:cd:18:25:df:4f:20:f4:de:e3: 48:fd:1c:3f:58:04:8f:9c:b6:0a:15:3f:e7:a4:d2:73:b5:29: fc:28:4f:8b:0d:c4:06:eb:0c:8c:1c:7b:02:e2:e9:af:27:e3: 23:41:4e:d9:d7:38:ce:a8:0b:96:3a:ff:75:ce:ea:4a:73:ff: 7d:ab:2b:27:6d:ef:c3:3b:aa:c2:4d:f9:cd:1a:60:6f:e3:62: a8:9b:8e:ff:bc:bb:de:bb:c9:61:50:6a:83:33:20:ed:3c:8d: f8:5c:eb:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqkK4RI9As0qOeBwkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk ZGI1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MWJmZmI1NTctZDNjZi00YjgzLWE2MzEtZWY4NDc2MzI2ZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyjfh7f02mUb9/R5qDPVba6ewOHXIhGwZZgV x0GH0lSCAmfWh20JVr+V4IgKXpRZChexXEgHsy2b/8bU6o4dKEctgDTKT655rS7P qoYJ2VtkvxURSlbv0lnBrO96nRQoynDWh3iR5cDaosiCbhRuVbtkl4bXFd9XwNJf riN4gYjW2TPzI9Qr1GE+SyDNm92BnFQjb8Bb7igeGDM3k4x92LWdt5uG84PeMurJ XBLZUDi53JjY0zuCD0DrGQ321NWTBYlEzx216jg6g79X2iL2v4XL+l0HD5Awdm3D rNp3tJiFlQi0QZZ/pxabY1km6JNT0e5BoaiLgJgc6q/jSu1jIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLZ558TJkrDpaoDCc3tcUaT5xjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYmYxYmI0OTgtYjhhMS0z YjE5LTg3NmUtNDIzZjBkZjZkZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1 YWRkZWRkYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgdxwP/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhxTUQBvFiktL8/NHwQsGdL90xdTgcmfdCZSXvalOth6onRdsVe /YkWa9HXEITt8ArcZ0ivf9WCU1tmM+kwc6hGRPZcDzRx6fvpH05ErEKwLZES+zfh CLmdyWcWQYXTyacBxR5fxlZnZsCLMqlEkjz0bk5KwfdAD8rERBz1U4Ygk7D99Buq R0fNOsniiHUT0OpagomiXRlL+s0YJd9PIPTe40j9HD9YBI+ctgoVP+ek0nO1Kfwo T4sNxAbrDIwcewLi6a8n4yNBTtnXOM6oC5Y6/3XO6kpz/32rKydt78M7qsJN+c0a YG/jYqibjv+8u967yWFQaoMzIO08jfhc6+w= -----END CERTIFICATE-----Generated at Mon Aug 4 07:52:59 2025 by rpki-client