$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa File: bf8f855d-79d9-359a-b716-f369f7368f3d.roa (raw, json) Hash identifier: QcqfBpvsPQBwXg8cVeB2Um25IEgAd3Q63EXolVIHfGg= Subject key identifier: BE:9A:49:2E:A9:C4:F4:F1:90:B8:27:CC:9E:BA:14:CE:4A:C1:FF:D6 Certificate issuer: /CN=8baf6f06-4472-4c79-8a01-5c338d64c402 Certificate serial: 010D0C9F4328584A814652F371362808FDEEFA28 Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 401082 IP address blocks: 2602:f8b4::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:52:f3:71:36:28:08:fd:ee:fa:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=af598f9d-97d5-4188-8fd3-ef1457a3d5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:9e:bb:f4:de:5f:c2:aa:90:42:5d:f2:0a: ad:73:78:9e:4a:27:a6:d1:8a:65:d3:d7:3c:a5:c4: 52:51:ee:2e:33:bc:25:df:79:4b:6c:5a:e4:84:43: e8:41:d6:5a:ad:d3:a6:c1:0c:a7:6f:87:0e:ff:d4: 33:c6:b0:b9:20:90:44:ea:7c:7f:3a:8d:8d:b9:e3: 79:84:48:1b:21:9f:8c:e1:22:f4:92:fe:9d:19:65: e6:7d:f5:6e:58:65:be:e8:11:93:f3:be:ec:b2:27: 41:fd:47:b3:e8:60:c6:41:c0:b5:5d:8e:93:7a:4c: ef:40:cf:62:6f:1f:e3:d6:50:f6:45:5d:82:c3:39: 1f:73:39:9c:34:11:e7:6d:bc:ee:d9:06:0d:68:0f: 1d:38:44:fe:2e:41:b5:c1:ad:df:36:1c:15:a4:0f: f3:76:7c:6a:90:32:7e:18:ca:d1:af:fb:d8:e3:90: 8c:ca:3a:e3:82:22:65:7b:76:8a:1e:6a:b9:e1:84: 43:cd:57:a6:84:56:e1:ff:17:38:de:92:ca:3d:cd: d5:d3:7f:a9:e1:ab:9c:d5:e6:37:1e:28:87:16:d0: f8:26:05:88:19:7d:c6:bb:32:be:46:88:88:65:8a: 17:c5:57:9c:ac:22:b0:02:40:10:a9:4e:b6:62:a6: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:49:2E:A9:C4:F4:F1:90:B8:27:CC:9E:BA:14:CE:4A:C1:FF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl X509v3 Authority Key Identifier: keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fd:4f:18:f4:51:94:53:62:2a:44:69:c1:c6:b4:92:be:e0: 6e:39:b5:53:f0:b9:09:68:dd:89:b6:8d:92:98:d4:9b:2a:97: 7f:f8:6c:2d:f5:3b:27:d9:7a:5f:2f:1b:4f:d9:56:e7:e6:82: 7e:92:0c:3c:93:1f:98:92:04:43:20:09:ff:a6:54:bb:dd:b9: f4:2e:06:61:c5:8e:1e:2c:63:1d:38:1f:e6:a8:18:90:71:f9: 54:ae:76:90:f0:64:da:5d:4f:bb:84:29:a6:b4:9b:07:7e:46: 39:b3:eb:1f:2a:40:c4:e2:27:b5:13:e1:ce:5c:09:8e:89:60: 11:60:7f:ad:96:b6:c4:18:07:4f:0b:c8:d9:ba:41:58:08:02: 28:45:90:7e:c4:95:d9:59:69:24:22:99:ce:29:14:98:c6:ff: b5:b0:98:31:48:f0:0a:4d:67:75:1a:11:9b:b5:64:f9:a0:4d: 60:96:6a:1e:ab:55:ae:ee:d5:11:ce:c8:a3:22:ac:c7:22:8e: c0:cf:c6:8e:16:2d:22:90:e2:f6:54:50:3e:88:5b:a4:6c:8b: e6:05:d3:50:89:4d:3a:d3:8e:61:9c:ff:e5:80:c1:15:f1:f4: c1:34:51:4c:ce:82:9e:b2:e5:02:c9:37:d8:b6:d9:60:b8:e4: 33:3e:c2:19 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqBRlLzcTYoCP3u+igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJhZjZmMDYtNDQ3Mi00Yzc5LThhMDEtNWMzMzhkNjRj NDAyMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YWY1OThmOWQtOTdkNS00MTg4LThmZDMtZWYxNDU3YTNkNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3qeu/TeX8KqkEJd8gqtc3ieSiem0Ypl09c8 pcRSUe4uM7wl33lLbFrkhEPoQdZardOmwQynb4cO/9QzxrC5IJBE6nx/Oo2NueN5 hEgbIZ+M4SL0kv6dGWXmffVuWGW+6BGT877ssidB/Uez6GDGQcC1XY6TekzvQM9i bx/j1lD2RV2CwzkfczmcNBHnbbzu2QYNaA8dOET+LkG1wa3fNhwVpA/zdnxqkDJ+ GMrRr/vY45CMyjrjgiJle3aKHmq54YRDzVemhFbh/xc43pLKPc3V03+p4auc1eY3 HiiHFtD4JgWIGX3GuzK+RoiIZYoXxVecrCKwAkAQqU62YqaWJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL6aSS6pxPTxkLgnzJ66FM5Kwf/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YmFm NmYwNi00NDcyLTRjNzktOGEwMS01YzMzOGQ2NGM0MDIvYmY4Zjg1NWQtNzlkOS0z NTlhLWI3MTYtZjM2OWY3MzY4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGJhZjZmMDYtNDQ3Mi00Yzc5LThh MDEtNWMzMzhkNjRjNDAyLzhiYWY2ZjA2LTQ0NzItNGM3OS04YTAxLTVjMzM4ZDY0 YzQwMi5jcmwwHwYDVR0jBBgwFoAUldO1jA1dX4UZzY/6OfSCwjO7nRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YmFmNmYwNi00NDcyLTRjNzktOGEwMS01YzMz OGQ2NGM0MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4tAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAj/1PGPRRlFNiKkRpwca0kr7gbjm1U/C5CWjdibaNkpjUmyqXf/hs LfU7J9l6Xy8bT9lW5+aCfpIMPJMfmJIEQyAJ/6ZUu9259C4GYcWOHixjHTgf5qgY kHH5VK52kPBk2l1Pu4QpprSbB35GObPrHypAxOIntRPhzlwJjolgEWB/rZa2xBgH TwvI2bpBWAgCKEWQfsSV2VlpJCKZzikUmMb/tbCYMUjwCk1ndRoRm7Vk+aBNYJZq HqtVru7VEc7IoyKsxyKOwM/GjhYtIpDi9lRQPohbpGyL5gXTUIlNOtOOYZz/5YDB FfH0wTRRTM6CnrLlAsk32LbZYLjkMz7CGQ== -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:01 2025 by rpki-client