$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ab2f454f-c997-318b-aa66-9b35c7bd22b8.roa File: ab2f454f-c997-318b-aa66-9b35c7bd22b8.roa (raw, json) Hash identifier: MorBzSSwqiH2e4VA5E+YrZ2JFT0fGt9Jfv8ch0eMcuI= Subject key identifier: E9:D0:77:25:3C:7B:74:1A:A6:A1:13:AA:F9:00:CA:0E:E5:06:08:80 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584BA0D25F9D0D421554B5F6D000 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ab2f454f-c997-318b-aa66-9b35c7bd22b8.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 45652 IP address blocks: 2607:f180:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5f:9d:0d:42:15:54:b5:f6:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=b9cd0a2c-9ac5-45e3-9a9f-dbbe2d1453bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:3d:ee:2a:62:f5:57:ec:e9:03:db:43:62: d4:f5:2e:8c:2f:6c:44:48:f9:db:39:a6:ac:9f:7d: c4:a5:7e:cd:cf:07:d0:73:7f:9b:76:40:bb:00:9f: 2b:71:9a:5a:59:f0:dd:c2:33:8e:f0:53:47:af:ff: 29:15:47:67:40:14:74:8b:48:71:c5:60:1f:65:f0: 8f:3d:c0:5e:d9:12:69:be:c3:bf:04:ff:18:d2:7c: d1:7a:2f:23:9b:cb:46:9f:17:ed:97:26:43:eb:e4: c9:83:47:f5:72:54:af:d7:7e:e5:42:73:39:96:80: 1f:f1:20:8a:cd:a8:b5:99:76:24:7c:a4:c6:c3:56: c2:ad:db:42:9a:1c:39:24:af:1b:bd:72:25:25:d2: dc:82:16:19:0d:8b:92:1b:a2:13:11:95:ca:3e:3d: e7:63:99:b9:58:aa:f7:6e:1c:40:7c:58:dc:e3:00: a1:17:4d:0b:ad:1c:df:49:95:7d:2f:7c:a7:ab:a6: 80:3d:ac:d4:6f:3b:d5:8a:c2:0c:58:88:e2:48:4f: 49:47:0d:42:41:12:7d:45:b9:77:d1:05:66:95:3e: 9c:42:05:1a:e9:8c:0f:c8:84:88:45:53:3c:5e:e5: 98:67:35:5c:73:e8:39:d7:f6:46:19:32:70:4d:a5: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:77:25:3C:7B:74:1A:A6:A1:13:AA:F9:00:CA:0E:E5:06:08:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ab2f454f-c997-318b-aa66-9b35c7bd22b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv6: 2607:f180:7100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1e:82:75:81:b2:6c:9a:25:e2:11:45:5a:e9:54:ff:5c:e2: 74:59:80:6f:b7:df:a5:41:87:f7:83:dc:14:c8:5d:af:a7:9b: de:ec:58:89:4a:85:63:a1:f2:0a:ef:0f:f8:fd:a8:ab:91:fc: 1e:a8:fc:9b:60:d9:3b:ed:50:54:ba:e1:06:cf:98:ca:6c:79: 75:4f:f6:76:3f:eb:37:bf:0a:82:8c:56:89:88:cb:f9:24:ef: f1:a6:50:df:77:b7:6a:30:6a:35:23:1b:c8:83:32:e4:9a:a2: 31:80:a1:64:c6:d3:d7:90:7e:b1:5d:fc:35:3d:2b:5f:0e:01: c2:b9:24:46:c6:fc:2f:8b:17:b7:93:79:11:6c:b0:5f:e4:e9: b1:22:8e:a7:d1:0a:e1:0f:04:b9:35:26:0a:fa:3d:68:10:8a: 32:86:91:43:a3:52:16:8b:f1:b8:c9:8d:cf:2c:f2:f3:a6:2c: 3f:1c:7b:3a:b3:85:4a:69:0c:3f:b0:87:59:67:53:97:7c:aa: 38:3d:e9:b4:13:00:a2:e5:5d:0d:d7:de:51:6a:01:8b:a0:d1: b2:63:4a:77:23:b8:1d:5f:01:52:e2:6d:7e:a0:57:d7:85:b1: 78:ee:a3:55:ab:ad:31:b5:a5:75:b2:1c:b4:66:74:3a:b3:ad: d7:d7:7c:8d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEug0l+dDUIVVLX20AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YjljZDBhMmMtOWFjNS00NWUzLTlhOWYtZGJiZTJkMTQ1M2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2E97ipi9Vfs6QPbQ2LU9S6ML2xESPnbOaas n33EpX7NzwfQc3+bdkC7AJ8rcZpaWfDdwjOO8FNHr/8pFUdnQBR0i0hxxWAfZfCP PcBe2RJpvsO/BP8Y0nzRei8jm8tGnxftlyZD6+TJg0f1clSv137lQnM5loAf8SCK zai1mXYkfKTGw1bCrdtCmhw5JK8bvXIlJdLcghYZDYuSG6ITEZXKPj3nY5m5WKr3 bhxAfFjc4wChF00LrRzfSZV9L3ynq6aAPazUbzvVisIMWIjiSE9JRw1CQRJ9Rbl3 0QVmlT6cQgUa6YwPyISIRVM8XuWYZzVcc+g51/ZGGTJwTaUs8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOnQdyU8e3QapqETqvkAyg7lBgiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYWIyZjQ1NGYtYzk5Ny0z MThiLWFhNjYtOWIzNWM3YmQyMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfxgHEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASh6CdYGybJol4hFFWulU/1zidFmAb7ffpUGH94PcFMhdr6eb3uxY iUqFY6HyCu8P+P2oq5H8Hqj8m2DZO+1QVLrhBs+Yymx5dU/2dj/rN78KgoxWiYjL +STv8aZQ33e3ajBqNSMbyIMy5JqiMYChZMbT15B+sV38NT0rXw4BwrkkRsb8L4sX t5N5EWywX+TpsSKOp9EK4Q8EuTUmCvo9aBCKMoaRQ6NSFovxuMmNzyzy86YsPxx7 OrOFSmkMP7CHWWdTl3yqOD3ptBMAouVdDdfeUWoBi6DRsmNKdyO4HV8BUuJtfqBX 14WxeO6jVautMbWldbIctGZ0OrOt19d8jQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:02 2025 by rpki-client