$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa File: baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa (raw, json) Hash identifier: Ii9AkF9qjR8csGUv9eXAqh0RkC6reFGY1o3oPll/gmM= Subject key identifier: C6:12:FC:79:C0:EC:D4:3E:5D:D9:F4:00:B6:AD:B6:52:6F:13:35:E9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF2DA782142F80C6D9200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 394380 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f2:da:78:21:42:f8:0c:6d:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=1f49dd1b-63c3-4f41-abf7-ec0e0c0a3e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:77:43:49:38:ff:64:60:d8:9b:cc:3d:27: 03:8c:86:b4:b1:bb:4d:79:28:0d:23:8d:84:b8:7d: c9:22:86:f1:89:e5:b6:46:a6:40:a9:2e:9a:cc:1d: b8:d4:77:ef:d6:94:e4:99:e3:70:a2:f6:1b:31:36: 28:c2:4a:5b:96:90:12:bf:b9:ac:95:2e:ca:bc:14: ce:a9:91:57:4c:22:26:c3:ef:cc:6e:89:3d:e5:8f: de:85:16:ce:7b:c7:85:51:b2:a8:ef:0f:9a:ed:d1: 5e:1b:f1:d9:0b:21:a3:04:bf:df:ea:5e:ee:cd:77: df:a9:82:a1:11:78:1e:4b:ea:66:8d:27:55:35:89: 53:0d:d5:8b:0a:74:8a:44:7e:d1:87:e9:d2:29:57: 3d:d6:2d:8c:fe:71:0a:0c:92:51:e0:c6:50:55:77: f8:78:35:f0:51:21:48:b9:f3:a7:9f:cd:2e:3e:44: ea:6e:9a:3e:95:8b:f6:3d:67:3d:c5:2d:7d:cc:9a: 02:ed:d7:80:bd:6f:ef:01:fe:48:9b:94:89:4a:19: c9:e0:d8:39:0b:b0:6a:80:76:5e:dc:2e:49:5b:15: 01:54:6d:94:06:e0:c3:60:ae:0e:22:63:32:ff:37: b6:00:8b:09:b6:3a:48:e5:90:19:ee:0c:1c:13:e9: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:12:FC:79:C0:EC:D4:3E:5D:D9:F4:00:B6:AD:B6:52:6F:13:35:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:63:31:a3:05:de:94:83:3d:a1:11:7e:76:68:e2:e8:7e:ad: ae:74:47:af:df:71:a1:7b:8c:3d:3a:79:59:7c:97:be:47:e3: 59:6f:2d:c6:2d:51:00:60:a5:5d:61:40:c3:28:ac:b0:00:05: 7a:8d:3a:0e:5a:57:e0:8e:d0:39:42:cd:99:4c:4e:89:66:29: 17:1c:e1:09:ae:5b:e6:1f:9e:27:6f:15:a8:91:0a:a2:4b:46: a2:70:11:28:ae:31:66:69:37:35:67:6f:82:3f:fb:5d:f5:0e: 8e:f1:d5:f2:60:e9:bc:78:12:38:f2:c1:0e:da:8a:ec:59:e8: 05:99:4a:4e:d6:cd:b4:d5:80:61:c7:c9:71:1e:eb:fb:95:2d: e6:eb:12:af:14:26:67:4f:7f:a8:65:3a:fa:64:c9:c4:f8:10: c7:ab:38:4e:ef:47:fd:d6:80:c6:1b:8b:bb:b8:f4:8b:43:42: 68:69:a2:2b:b9:f6:5e:7d:98:d9:ae:76:7d:09:62:0a:17:8c: 09:c4:2e:2c:d5:c6:ec:96:31:df:f0:b2:f0:cb:ba:00:89:4c: 0c:31:70:64:4c:c4:51:d7:8a:23:81:e6:be:2b:1c:c1:43:30: 67:3c:2a:46:0d:33:ba:2d:c8:95:db:a3:24:53:db:69:9e:9b: ee:7c:e2:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDPLaeCFC+AxtkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MWY0OWRkMWItNjNjMy00ZjQxLWFiZjctZWMwZTBjMGEzZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZx3Q0k4/2Rg2JvMPScDjIa0sbtNeSgNI42E uH3JIobxieW2RqZAqS6azB241Hfv1pTkmeNwovYbMTYowkpblpASv7mslS7KvBTO qZFXTCImw+/Mbok95Y/ehRbOe8eFUbKo7w+a7dFeG/HZCyGjBL/f6l7uzXffqYKh EXgeS+pmjSdVNYlTDdWLCnSKRH7Rh+nSKVc91i2M/nEKDJJR4MZQVXf4eDXwUSFI ufOnn80uPkTqbpo+lYv2PWc9xS19zJoC7deAvW/vAf5Im5SJShnJ4Ng5C7BqgHZe 3C5JWxUBVG2UBuDDYK4OImMy/ze2AIsJtjpI5ZAZ7gwcE+lT3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMYS/HnA7NQ+Xdn0ALattlJvEzXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmFmNjdjYTYtNDY0NS0z ZThjLWIxZjEtOGIxY2M5M2NmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL1jMaMF3pSDPaERfnZo4uh+ra50R6/fcaF7jD06eVl8l75H41lv LcYtUQBgpV1hQMMorLAABXqNOg5aV+CO0DlCzZlMTolmKRcc4QmuW+YfnidvFaiR CqJLRqJwESiuMWZpNzVnb4I/+131Do7x1fJg6bx4EjjywQ7aiuxZ6AWZSk7WzbTV gGHHyXEe6/uVLebrEq8UJmdPf6hlOvpkycT4EMerOE7vR/3WgMYbi7u49ItDQmhp oiu59l59mNmudn0JYgoXjAnELizVxuyWMd/wsvDLugCJTAwxcGRMxFHXiiOB5r4r HMFDMGc8KkYNM7otyJXboyRT22mem+584q8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:56:43 2025 by rpki-client