$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa File: bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa (raw, json) Hash identifier: kmDk+gtiLOSgFIeVoh2UdVy4q86/Pxf0x0nTAc5zuxs= Subject key identifier: AD:7E:57:54:48:D0:C1:21:CB:33:91:2C:B0:A2:95:95:18:10:69:63 Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584BA9325F7D3BCF699F01F47200 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14159 IP address blocks: 2604:aa00::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5f:7d:3b:cf:69:9f:01:f4:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=7a7f8393-dbb9-4a38-8afb-13bd34a269c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:08:0d:b8:31:14:84:5a:fc:f0:39:0e:f8: 00:84:23:7c:3d:18:5a:72:61:68:2a:23:45:17:64: cf:e0:83:89:b3:48:29:bd:ba:78:e5:1b:cb:d6:3c: bd:44:13:60:40:c5:df:28:9f:51:4f:6a:b0:d9:4f: 66:d0:b2:e4:22:eb:b0:ad:81:08:3b:12:be:b9:d3: 33:d4:86:6f:51:bf:67:cb:38:44:81:57:05:8a:9f: f7:20:85:b7:55:c7:ed:3b:4c:8c:88:5b:34:f6:90: 48:0e:37:34:28:25:e8:09:8b:3c:10:4b:28:7d:de: a1:2e:8d:c5:5e:99:3b:99:4a:ce:57:af:76:06:be: 74:b7:b5:cd:31:99:7c:a0:a8:c4:97:2b:a1:af:ba: 13:39:1c:0f:7c:0d:60:d7:4a:bc:f2:75:21:8a:e1: 06:8e:54:6c:16:f2:0e:47:92:73:78:2f:0c:2a:85: 2d:e9:a1:e9:1c:53:1d:4a:6a:58:c4:e4:ae:f8:db: fc:0c:6a:7a:5b:33:af:90:81:b3:b9:32:29:be:fe: 48:fc:2b:49:dc:29:52:c1:d4:48:8f:c5:24:6d:45: 23:6a:ee:51:d7:3b:f5:d8:a7:ba:02:99:60:bd:73: 3a:31:6d:84:6f:e3:44:da:62:f3:ae:08:c7:b5:16: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7E:57:54:48:D0:C1:21:CB:33:91:2C:B0:A2:95:95:18:10:69:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:53:75:73:3e:52:63:c0:b6:8b:e4:6a:1f:e8:3e:fe:2a:54: 03:30:7e:8e:0f:20:06:37:31:f1:7c:04:09:78:e7:89:9e:30: 52:ef:a9:20:dd:a9:2c:ec:21:3b:9b:10:94:c9:23:b7:d3:28: 87:0c:74:c0:e4:13:29:47:4e:20:50:f0:61:86:45:1e:c7:36: 33:18:c5:c5:6b:c7:64:f7:77:8f:44:05:87:6e:89:d2:e5:35: a2:00:f9:87:f5:d8:ec:f3:74:26:7a:5e:30:83:76:41:ac:28: 85:90:2c:cf:bc:46:1e:8c:47:fe:ae:30:18:a9:8d:2c:be:75: cb:e3:7e:bb:e3:1d:f0:ee:ce:bd:64:b6:00:af:1c:59:99:08: 1e:18:ae:9c:36:3c:21:7c:a5:b6:aa:ec:64:51:da:03:c8:1c: a3:9a:72:81:d5:a5:0c:12:9f:ad:06:45:26:94:f3:e0:e2:f1: 73:c7:4b:c8:73:c9:cf:20:8e:26:58:06:e7:94:dc:6f:7e:d6: 4b:d4:6f:1c:26:cc:6e:fb:95:79:ab:24:41:0d:42:c0:3d:03: 3e:02:47:42:72:fc:2a:ff:fe:c1:0b:1d:88:7f:b9:83:f1:2f: a7:ac:fa:27:98:c0:ec:22:ac:12:f0:cc:9d:12:3a:4f:f6:66: ba:d5:d5:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEupMl99O89pnwH0cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk N2E3ZjgzOTMtZGJiOS00YTM4LThhZmItMTNiZDM0YTI2OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxoIDbgxFIRa/PA5DvgAhCN8PRhacmFoKiNF F2TP4IOJs0gpvbp45RvL1jy9RBNgQMXfKJ9RT2qw2U9m0LLkIuuwrYEIOxK+udMz 1IZvUb9nyzhEgVcFip/3IIW3VcftO0yMiFs09pBIDjc0KCXoCYs8EEsofd6hLo3F Xpk7mUrOV692Br50t7XNMZl8oKjElyuhr7oTORwPfA1g10q88nUhiuEGjlRsFvIO R5JzeC8MKoUt6aHpHFMdSmpYxOSu+Nv8DGp6WzOvkIGzuTIpvv5I/CtJ3ClSwdRI j8UkbUUjau5R1zv12Ke6AplgvXM6MW2Eb+NE2mLzrgjHtRZOHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK1+V1RI0MEhyzORLLCilZUYEGljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvYmJjMGI5NDAtYTBiMC0z NTdmLTljMTItZTM3NDdmOTFhNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSqADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGU3VzPlJjwLaL5Gof6D7+KlQDMH6ODyAGNzHxfAQJeOeJnjBS76kg 3aks7CE7mxCUySO30yiHDHTA5BMpR04gUPBhhkUexzYzGMXFa8dk93ePRAWHbonS 5TWiAPmH9djs83Qmel4wg3ZBrCiFkCzPvEYejEf+rjAYqY0svnXL43674x3w7s69 ZLYArxxZmQgeGK6cNjwhfKW2quxkUdoDyByjmnKB1aUMEp+tBkUmlPPg4vFzx0vI c8nPII4mWAbnlNxvftZL1G8cJsxu+5V5qyRBDULAPQM+AkdCcvwq//7BCx2If7mD 8S+nrPonmMDsIqwS8MydEjpP9ma61dVE -----END CERTIFICATE-----Generated at Thu Nov 6 02:13:30 2025 by rpki-client