$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa File: bc36308e-607f-36db-982f-4ca4d4f2788b.roa (raw, json) Hash identifier: 4KZMZfC+9kZEMVzaOxZzOeZK0Sul3CJsb422Z1TVX/o= Subject key identifier: B8:40:D2:AB:C0:4F:B2:95:03:16:60:21:E0:72:49:FC:A6:F5:53:52 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584BAA9797751188CCD3CE7B1640 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 1403 IP address blocks: 2600:d400::/28 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:97:75:11:88:cc:d3:ce:7b:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=35cf7ccb-1546-4d8a-8a76-80d13c6d9f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:36:5d:5f:f0:bf:d3:62:94:05:f4:41:ca:9e: 44:e0:13:92:b8:b7:a4:a5:a4:55:da:94:f3:8a:95: 84:9e:3c:a4:0b:84:65:f3:5b:61:8d:49:1d:f2:2f: d8:e0:e8:ea:8c:09:b8:5a:e1:26:e9:b3:fb:8e:fc: d8:31:89:de:a0:2b:f6:c1:a1:22:93:c7:fe:03:62: 8a:63:16:a1:5c:98:8c:4a:0f:9d:e0:58:cc:72:14: ab:06:6b:01:2c:85:18:28:c9:b3:ee:9b:f1:f5:bb: 2b:4e:68:bf:6b:55:11:e8:1c:43:af:d6:2f:65:89: 07:7d:40:31:01:8d:92:5a:02:44:78:41:2e:ce:ea: 73:98:a2:63:83:ba:97:fd:77:c4:b2:96:95:ed:03: 7a:61:5d:1e:e8:5c:09:c7:80:22:85:7a:3a:45:59: 86:c8:97:2d:f4:2b:f4:ac:52:29:3b:d4:66:26:81: 41:b9:90:fa:ce:b1:6c:65:65:ad:f9:93:2d:da:2f: d9:2e:df:22:21:89:3e:30:7f:f8:f5:6a:50:10:b3: b5:e9:79:ef:59:22:3a:df:ec:4e:43:37:5b:74:5a: ab:34:f5:6f:9f:4f:15:4e:45:ca:9b:26:4e:a7:04: 7a:cb:16:9f:a7:c7:60:ba:4d:f8:34:b0:45:12:6a: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:D2:AB:C0:4F:B2:95:03:16:60:21:E0:72:49:FC:A6:F5:53:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv6: 2600:d400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:4f:77:c0:a2:b8:c9:4a:4a:36:5e:df:9f:a5:be:06:8d:df: fe:61:e5:b9:89:bf:1c:d7:f5:bb:50:03:7b:18:14:7b:89:dd: ec:6a:71:6c:9c:82:34:35:26:9f:64:e2:4b:12:98:95:a2:e1: 69:3a:55:f6:ca:09:d1:21:48:d7:f1:a9:10:37:76:7a:e5:58: 8b:73:5d:05:12:46:1d:1e:90:a2:21:ed:cc:31:0a:71:6f:cf: 6d:d5:49:61:0e:05:4f:6c:17:16:69:1e:c6:22:c2:bf:5f:0f: 56:31:5d:28:c3:b1:78:0c:96:10:0a:a5:73:0c:ef:14:c7:30: 9d:36:c2:70:30:1b:fb:56:ff:83:db:d1:61:c4:f1:6c:e6:c5: 2f:b8:9e:66:45:b4:5a:67:7f:85:a1:25:b0:6c:dd:ea:b4:40: ac:76:9f:b6:74:06:50:34:21:89:5e:0a:04:87:68:05:9a:70: 79:60:cb:dc:f5:1d:50:3c:e9:48:4a:f3:62:6d:13:7f:42:38: 7b:f7:f4:ef:f5:4a:cf:2f:11:d2:38:81:4d:74:c8:b2:73:e0: cb:9b:68:0f:cb:c0:6d:c0:b5:6a:93:e7:f9:63:df:14:b4:77: a0:fb:9c:e7:be:9e:cd:c3:d6:2d:d4:d2:f8:a3:a4:f5:f4:88: 55:d6:bd:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuql5d1EYjM0857FkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MzVjZjdjY2ItMTU0Ni00ZDhhLThhNzYtODBkMTNjNmQ5ZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDZdX/C/02KUBfRByp5E4BOSuLekpaRV2pTz ipWEnjykC4Rl81thjUkd8i/Y4OjqjAm4WuEm6bP7jvzYMYneoCv2waEik8f+A2KK YxahXJiMSg+d4FjMchSrBmsBLIUYKMmz7pvx9bsrTmi/a1UR6BxDr9YvZYkHfUAx AY2SWgJEeEEuzupzmKJjg7qX/XfEspaV7QN6YV0e6FwJx4AihXo6RVmGyJct9Cv0 rFIpO9RmJoFBuZD6zrFsZWWt+ZMt2i/ZLt8iIYk+MH/49WpQELO16XnvWSI63+xO QzdbdFqrNPVvn08VTkXKmyZOpwR6yxafp8dguk34NLBFEmr5hQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLhA0qvAT7KVAxZgIeBySfym9VNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmMzNjMwOGUtNjA3Zi0z NmRiLTk4MmYtNGNhNGQ0ZjI3ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDUADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCiT3fAorjJSko2Xt+fpb4Gjd/+YeW5ib8c1/W7UAN7GBR7id3sanFs nII0NSafZOJLEpiVouFpOlX2ygnRIUjX8akQN3Z65ViLc10FEkYdHpCiIe3MMQpx b89t1UlhDgVPbBcWaR7GIsK/Xw9WMV0ow7F4DJYQCqVzDO8UxzCdNsJwMBv7Vv+D 29FhxPFs5sUvuJ5mRbRaZ3+FoSWwbN3qtECsdp+2dAZQNCGJXgoEh2gFmnB5YMvc 9R1QPOlISvNibRN/Qjh79/Tv9UrPLxHSOIFNdMiyc+DLm2gPy8BtwLVqk+f5Y98U tHeg+5znvp7Nw9Yt1NL4o6T19IhV1r2e -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:18 2025 by rpki-client