$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf5a50ac-87e2-3092-a674-9b9b1fa20d2c.roa File: bf5a50ac-87e2-3092-a674-9b9b1fa20d2c.roa (raw, json) Hash identifier: xx07OR8CY1LX6qdQFQwMsIURPDA+vyXTOsBEPv9G/OQ= Subject key identifier: BB:3D:DA:0E:E7:33:E7:C6:AD:35:F0:66:DF:31:80:3B:57:B3:B8:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2E8D990C3787120F36BA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf5a50ac-87e2-3092-a674-9b9b1fa20d2c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2603:3024:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:e8:d9:90:c3:78:71:20:f3:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=cbfb4067-589f-4ad5-acc6-0ac13070940b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:3e:00:78:53:15:46:86:5a:7b:94:39:e4: 7e:11:dd:ff:5f:32:cb:2a:61:82:47:b3:f1:97:2d: 6f:49:00:65:20:b9:d7:d3:32:01:d2:13:b1:18:fa: ad:b7:70:ed:40:79:f6:aa:49:72:a0:29:d5:6b:40: c1:44:df:fe:71:63:c1:b5:dd:b3:dd:3d:65:8f:4e: 02:65:c1:b7:0d:39:ed:2f:7e:17:04:6c:19:2a:d0: 94:07:9c:63:55:19:d6:0a:cb:fc:14:51:f2:da:2b: 07:3b:b6:1e:90:11:24:e7:fc:28:d8:45:e7:3a:95: eb:0e:30:b9:2a:f9:0f:47:d2:2e:6d:8f:3b:63:f7: 97:6a:18:35:65:6a:3f:2a:e9:17:30:54:12:2f:83: 5b:d7:59:12:e1:aa:dd:4d:54:6e:f2:4a:ab:0e:59: e2:1a:eb:da:0b:02:a8:6a:32:1b:a5:8a:de:4b:1d: 72:d2:7e:12:55:33:0f:04:c4:a4:41:ac:63:c4:69: e1:36:65:a0:f9:d0:a9:3e:06:a3:a8:8b:1d:1b:2f: be:d8:dd:34:db:0d:fb:c8:78:57:59:51:08:df:4b: 9e:76:70:03:a0:86:fa:29:e4:07:e7:f3:8f:ca:a2: b1:e4:32:57:fb:44:49:ae:bd:24:3b:0b:88:f7:2f: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3D:DA:0E:E7:33:E7:C6:AD:35:F0:66:DF:31:80:3B:57:B3:B8:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf5a50ac-87e2-3092-a674-9b9b1fa20d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3024:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:46:d3:37:31:1e:ad:93:c3:42:df:12:44:25:17:66:44:c1: 12:77:11:69:1e:1b:6f:76:ae:13:73:35:8e:89:3e:16:d1:83: e7:38:12:94:6a:72:8e:67:ec:fa:b9:3b:be:4f:10:88:cf:d2: ba:e4:f0:35:c8:36:e1:dd:76:ed:1d:38:21:4c:f0:9b:de:4b: f2:e1:7a:fe:e4:f1:f6:ee:4a:fd:f6:3f:47:f0:59:37:ce:76: 4e:f0:ca:ff:cb:9f:eb:9a:cb:05:d0:f4:6a:92:80:d9:3c:10: da:5c:f7:63:da:3c:4c:a4:34:af:fe:97:55:37:00:66:18:b4: fe:5c:59:74:3b:b0:a2:39:03:f7:af:3c:17:b9:5a:33:8a:ee: ac:9a:c9:59:09:1b:29:9a:8f:35:8f:96:95:a4:ed:b3:c8:fc: 25:1d:ba:1b:95:60:2f:86:50:14:6f:fc:73:25:e8:ae:93:cd: 71:a0:44:bd:bb:10:14:14:75:ce:ea:6f:55:f8:9f:6b:7b:36: b8:0b:b4:99:aa:c1:ac:d0:3c:be:53:8a:d7:b5:21:b5:28:15: 81:c9:b3:36:7c:00:17:ea:17:c2:83:16:8a:52:d3:ca:05:89: ff:22:7b:b2:be:5b:88:da:12:7f:e4:4d:d4:cd:c3:b5:5f:9a: a3:b4:32:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswujZkMN4cSDza6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2JmYjQwNjctNTg5Zi00YWQ1LWFjYzYtMGFjMTMwNzA5NDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuw+AHhTFUaGWnuUOeR+Ed3/XzLLKmGCR7Px ly1vSQBlILnX0zIB0hOxGPqtt3DtQHn2qklyoCnVa0DBRN/+cWPBtd2z3T1lj04C ZcG3DTntL34XBGwZKtCUB5xjVRnWCsv8FFHy2isHO7YekBEk5/wo2EXnOpXrDjC5 KvkPR9IubY87Y/eXahg1ZWo/KukXMFQSL4Nb11kS4ardTVRu8kqrDlniGuvaCwKo ajIbpYreSx1y0n4SVTMPBMSkQaxjxGnhNmWg+dCpPgajqIsdGy++2N002w37yHhX WVEI30uednADoIb6KeQH5/OPyqKx5DJX+0RJrr0kOwuI9y979QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLs92g7nM+fGrTXwZt8xgDtXs7i4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY1YTUwYWMtODdlMi0z MDkyLWE2NzQtOWI5YjFmYTIwZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwJCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAzUbTNzEerZPDQt8SRCUXZkTBEncRaR4bb3auE3M1jok+FtGD5zgS lGpyjmfs+rk7vk8QiM/SuuTwNcg24d127R04IUzwm95L8uF6/uTx9u5K/fY/R/BZ N852TvDK/8uf65rLBdD0apKA2TwQ2lz3Y9o8TKQ0r/6XVTcAZhi0/lxZdDuwojkD 9688F7laM4rurJrJWQkbKZqPNY+WlaTts8j8JR26G5VgL4ZQFG/8cyXorpPNcaBE vbsQFBR1zupvVfifa3s2uAu0marBrNA8vlOK17UhtSgVgcmzNnwAF+oXwoMWilLT ygWJ/yJ7sr5biNoSf+RN1M3DtV+ao7QyKw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:00 2025 by rpki-client