$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa File: bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa (raw, json) Hash identifier: rRXfK3LR/tOPq87LdZG+xGEN0YNadrP3rZnVy7VSlHo= Subject key identifier: 0F:D4:2A:A8:38:0E:2A:FB:87:F5:38:59:D6:C5:92:F7:15:CD:ED:7A Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F4328584B79BCBF8566BF2B0D17550780 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 15191 IP address blocks: 2604:4180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:bf:85:66:bf:2b:0d:17:55:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=69c4a52a-bed9-4525-a771-563ed68ab41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:f9:db:9a:1e:92:74:0b:27:3c:fa:1c:cd: 7d:53:cf:53:62:11:7a:b3:80:74:1b:23:0f:d5:93: b9:d0:84:08:56:3f:47:92:f2:68:e3:10:f0:87:1e: d0:61:2c:90:51:79:4c:9c:24:75:95:cc:d3:73:23: 71:db:3c:51:02:31:09:62:35:3a:98:ae:80:11:51: f6:30:19:3a:06:e7:9c:f5:67:61:ef:00:8c:3a:84: 85:0a:8e:df:e4:a4:2b:66:bd:b4:a6:6a:9d:88:12: d5:de:0d:fb:38:d5:ed:24:a7:ea:35:7f:87:6a:fe: 3d:b6:64:b4:83:65:92:c6:67:5a:dd:40:47:e2:84: 90:bc:e8:18:ed:5a:53:71:e0:d2:31:6e:5c:2e:df: ec:f9:8b:5c:a4:13:2c:4a:db:e7:6d:55:cc:c0:03: 25:2b:fb:89:19:f2:62:4d:37:fc:db:0d:df:c6:5f: 3b:2b:10:89:f9:57:7c:e3:b5:03:d7:29:c9:da:52: fa:cd:51:55:f5:53:99:ae:22:ed:87:d8:a7:9d:46: 32:b4:41:0c:f1:c9:28:0c:24:72:3d:9d:a8:fb:f0: 03:a3:70:c9:b8:21:f3:fb:c0:0d:a6:ec:32:d5:03: 78:d2:64:a1:61:75:03:00:a4:28:e1:89:72:3d:6f: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D4:2A:A8:38:0E:2A:FB:87:F5:38:59:D6:C5:92:F7:15:CD:ED:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/bfb15f29-d4d0-3251-9bc1-b2d845ea4e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv6: 2604:4180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c8:91:2c:af:59:3f:56:d3:7c:e5:43:ca:d9:15:0e:ac:25: 8c:b5:05:e1:34:a9:a3:2c:14:19:f4:fa:a9:0b:d2:21:20:bd: c8:b9:92:b9:30:b7:07:8d:32:50:76:58:90:4b:9b:5f:5d:50: 6d:d7:50:f4:83:16:92:49:1e:25:76:3f:17:b6:85:ee:a9:81: ea:7a:68:09:89:0d:80:93:16:86:c5:0b:f2:11:02:06:0f:53: bd:b8:81:e6:23:3c:b0:f9:df:4f:c8:ef:4a:fd:a1:fe:53:f7: 11:ba:fd:84:a3:7f:46:23:9e:77:2b:cc:5b:37:0e:39:56:59: 6f:69:3b:13:29:51:e0:d7:86:c4:17:30:ab:f2:3e:8f:7c:eb: 2a:cf:04:b2:45:ed:57:91:cd:f7:61:f3:8a:bf:a1:90:42:25: e7:62:6e:51:6d:ff:1a:93:6a:c0:12:5b:41:a6:74:5c:b8:20: 9d:43:64:95:a8:ae:ec:1e:d4:64:1c:a5:7d:5e:45:ca:1a:fd: f0:5d:26:f9:81:93:0a:57:18:bc:3f:1f:3f:1e:e8:06:04:88: af:e3:3f:59:c9:4e:33:59:9a:ea:96:58:43:85:e8:f1:56:39: 3e:d3:89:aa:05:67:a2:c1:ff:cd:60:c0:e4:10:df:dc:94:30: f4:95:69:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt5vL+FZr8rDRdVB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NjljNGE1MmEtYmVkOS00NTI1LWE3NzEtNTYzZWQ2OGFiNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUT525oeknQLJzz6HM19U89TYhF6s4B0GyMP 1ZO50IQIVj9HkvJo4xDwhx7QYSyQUXlMnCR1lczTcyNx2zxRAjEJYjU6mK6AEVH2 MBk6Buec9Wdh7wCMOoSFCo7f5KQrZr20pmqdiBLV3g37ONXtJKfqNX+Hav49tmS0 g2WSxmda3UBH4oSQvOgY7VpTceDSMW5cLt/s+YtcpBMsStvnbVXMwAMlK/uJGfJi TTf82w3fxl87KxCJ+Vd847UD1ynJ2lL6zVFV9VOZriLth9innUYytEEM8ckoDCRy PZ2o+/ADo3DJuCHz+8ANpuwy1QN40mShYXUDAKQo4YlyPW9LGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA/UKqg4Dir7h/U4WdbFkvcVze16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvYmZiMTVmMjktZDRkMC0z MjUxLTliYzEtYjJkODQ1ZWE0ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRBgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZyJEsr1k/VtN85UPK2RUOrCWMtQXhNKmjLBQZ9PqpC9IhIL3IuZK5 MLcHjTJQdliQS5tfXVBt11D0gxaSSR4ldj8XtoXuqYHqemgJiQ2AkxaGxQvyEQIG D1O9uIHmIzyw+d9PyO9K/aH+U/cRuv2Eo39GI553K8xbNw45VllvaTsTKVHg14bE FzCr8j6PfOsqzwSyRe1Xkc33YfOKv6GQQiXnYm5Rbf8ak2rAEltBpnRcuCCdQ2SV qK7sHtRkHKV9XkXKGv3wXSb5gZMKVxi8Px8/HugGBIiv4z9ZyU4zWZrqllhDhejx Vjk+04mqBWeiwf/NYMDkEN/clDD0lWk6 -----END CERTIFICATE-----Generated at Thu Nov 6 00:42:13 2025 by rpki-client