$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: vy9qlLxGO6R2pSCOLM0AIGjiYrbJdmB5SZMb1B/uO7I= Subject key identifier: 16:02:F2:E8:A9:40:E7:4A:CC:EB:58:75:11:63:A8:82:8C:3A:00:03 Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F4328584B2496C69402719BDC20077900 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c6:94:02:71:9b:dc:20:07:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=ef5334f4-9761-44b3-8a17-59e62ddadbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:0c:2d:7b:3d:38:17:fa:22:5f:92:5b:e2: a8:09:2d:fb:39:08:37:35:a0:18:66:29:3d:86:4e: 12:55:5d:78:41:9b:99:67:8f:cb:79:cd:44:c9:27: fc:b0:fe:00:1c:fa:c1:2b:67:f6:02:75:62:66:85: 77:36:9a:15:05:f0:a6:f0:db:c5:89:95:45:75:57: a0:0e:43:5c:e9:6a:13:7b:35:0e:32:99:01:c5:74: da:58:7d:4a:3f:9b:09:3b:af:11:8d:09:d1:2a:34: 06:46:09:b4:e6:e1:ce:99:ce:42:6b:cb:68:5e:ae: 76:3d:78:16:3a:74:18:20:60:e4:d0:a6:ec:0f:9a: 25:d2:24:08:f3:8a:5d:ca:e2:7e:68:09:ab:ce:f1: 11:1a:18:10:a7:bc:76:28:61:c4:cc:cf:90:4a:04: af:42:d9:12:ce:e4:ad:7d:9f:91:0f:9d:f8:ad:6a: c4:6e:49:ff:5d:d0:b0:8b:1c:ee:54:04:ab:7d:7e: aa:d2:0c:ca:cc:67:16:c2:c2:9f:86:c0:11:51:18: cc:71:35:66:a6:5e:c4:a9:cf:ba:7a:49:64:d6:46: 48:e5:76:0d:9e:c9:62:da:e5:ab:1f:a2:02:1a:89: a8:59:1c:21:2b:01:57:e2:b3:2b:ce:06:8b:ff:5f: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:F2:E8:A9:40:E7:4A:CC:EB:58:75:11:63:A8:82:8C:3A:00:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d1:dc:fa:23:b3:6d:4d:04:24:33:2b:89:7d:29:0a:3a:db: 09:fb:57:bf:3e:bb:5c:d6:ef:c0:01:99:e2:0d:8a:27:e5:b4: 3d:4c:7b:73:0b:0d:45:70:92:2c:4c:6a:6f:de:9c:22:d6:e8: 87:2a:25:45:d3:e1:93:2d:5d:2d:7c:a9:7d:99:f6:22:f6:36: 86:36:7c:c5:30:d4:00:37:d9:b0:12:58:f4:e4:4a:1d:7e:d8: 62:de:73:1b:0e:96:d7:e5:70:be:a6:9c:2c:ff:40:91:24:7c: 5b:82:2a:fa:48:11:5f:5b:68:15:51:6c:0f:cc:4f:fb:f8:0c: a0:29:84:7f:84:e4:45:05:d7:50:03:ac:24:17:bc:50:0a:3b: 7e:71:f6:74:a9:32:56:85:c9:2f:bb:5a:11:4b:99:05:c0:db: ef:10:5e:50:04:83:17:78:ac:15:69:b8:f8:91:65:d7:7e:6d: ca:90:9b:b3:3e:ef:ab:b0:bd:d9:12:7c:aa:1b:11:c6:ad:b5: e7:09:b3:70:d7:ff:67:85:dc:9e:64:34:6a:4d:f9:7e:09:51: a3:ae:ae:f1:c5:97:83:a5:5a:ef:37:a4:81:cc:7a:24:e5:2e: 6e:dd:6e:96:c2:dc:cb:0e:3c:f8:b7:c3:09:33:58:e1:d3:a5: 54:71:f4:fb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsklsaUAnGb3CAHeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWY1MzM0ZjQtOTc2MS00NGIzLThhMTctNTllNjJkZGFkYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOMMLXs9OBf6Il+SW+KoCS37OQg3NaAYZik9 hk4SVV14QZuZZ4/Lec1EySf8sP4AHPrBK2f2AnViZoV3NpoVBfCm8NvFiZVFdVeg DkNc6WoTezUOMpkBxXTaWH1KP5sJO68RjQnRKjQGRgm05uHOmc5Ca8toXq52PXgW OnQYIGDk0KbsD5ol0iQI84pdyuJ+aAmrzvERGhgQp7x2KGHEzM+QSgSvQtkSzuSt fZ+RD534rWrEbkn/XdCwixzuVASrfX6q0gzKzGcWwsKfhsARURjMcTVmpl7Eqc+6 eklk1kZI5XYNnsli2uWrH6ICGomoWRwhKwFX4rMrzgaL/1/vYwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBYC8uipQOdKzOtYdRFjqIKMOgADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAF0dz6I7NtTQQkMyuJfSkKOtsJ+1e/Prtc 1u/AAZniDYon5bQ9THtzCw1FcJIsTGpv3pwi1uiHKiVF0+GTLV0tfKl9mfYi9jaG NnzFMNQAN9mwElj05Eodfthi3nMbDpbX5XC+ppws/0CRJHxbgir6SBFfW2gVUWwP zE/7+AygKYR/hORFBddQA6wkF7xQCjt+cfZ0qTJWhckvu1oRS5kFwNvvEF5QBIMX eKwVabj4kWXXfm3KkJuzPu+rsL3ZEnyqGxHGrbXnCbNw1/9nhdyeZDRqTfl+CVGj rq7xxZeDpVrvN6SBzHok5S5u3W6WwtzLDjz4t8MJM1jh06VUcfT7 -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:29 2025 by rpki-client