$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa File: bf7f3f32-7977-3022-acfe-63176d0b6222.roa (raw, json) Hash identifier: iwvgUXoSqVHkVxNgpsmE0QN46m3p4k0wbB4mnBv+ANk= Subject key identifier: 52:1A:75:C8:A6:1C:E1:7F:94:6D:AA:AD:DE:7D:65:FB:AF:B1:F4:DF Certificate issuer: /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64 Certificate serial: 010D0C9F4328584B8EACDF30E99E6E95BA337A80 Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 63290 IP address blocks: 2605:c880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:df:30:e9:9e:6e:95:ba:33:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ad9044c0-d2fa-4065-9655-1034ae57fbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:4c:6f:60:b7:16:92:6b:98:95:a5:05:ba: a5:c1:b2:4e:d0:c2:e4:5a:f8:71:be:1b:e7:17:f6: 66:06:a0:48:52:10:b8:f0:17:27:e1:4a:de:3d:98: 96:17:59:53:27:fb:9e:30:d9:47:f7:ea:a1:30:02: e5:84:c0:d3:4e:45:6a:7f:a9:d8:11:2a:6d:52:2c: 6d:5d:9a:41:b6:66:02:0b:12:9f:f4:a5:ae:60:0f: 0b:a7:81:a5:c5:49:38:81:a5:7e:01:05:b6:92:65: fd:5e:d7:ed:10:7b:fa:0e:13:a9:a2:00:36:02:80: 82:e5:15:a6:da:64:d0:7f:e1:6c:d8:c9:35:73:a3: 76:60:37:9e:b2:fc:ae:39:65:50:57:98:40:2b:5e: 9f:fd:bf:f3:4f:dd:c6:b0:a3:7b:18:63:be:f0:61: bd:36:61:b6:fc:41:98:9d:cb:55:54:d2:ad:db:fd: d3:d3:cc:fc:7e:7c:b7:6c:86:49:f0:36:2d:1b:a6: 0e:79:6d:21:07:c9:ee:27:cc:de:29:58:2c:a5:87: 59:ec:ef:aa:89:c6:69:1d:a7:26:a5:31:c9:87:6f: 80:72:cb:df:15:c4:02:89:51:2c:3d:98:14:c8:60: 79:62:82:e2:47:e4:d3:8c:56:a2:a9:43:c6:cc:2a: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1A:75:C8:A6:1C:E1:7F:94:6D:AA:AD:DE:7D:65:FB:AF:B1:F4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl X509v3 Authority Key Identifier: keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer sbgp-ipAddrBlock: critical IPv6: 2605:c880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fb:da:b4:24:8d:79:6c:cc:b3:33:5c:c2:2f:45:1d:3d:1b: 06:30:9b:03:c0:27:ec:91:c4:c3:8a:4b:37:c1:8b:79:f6:5c: c2:66:ff:c2:83:6b:45:a1:5a:0a:b3:17:83:7a:31:a0:a4:39: a5:1a:b3:78:54:c4:16:96:1a:6c:98:5d:d3:16:ae:bc:0c:1a: c6:d0:47:5c:82:5f:dc:51:d4:30:ca:f0:78:d7:fd:18:d9:1f: 2b:ce:77:b9:f1:d1:7c:32:9c:d4:cc:ce:5c:b4:c6:d0:d0:ad: 25:a7:cd:cb:8a:fc:8b:13:09:8f:2a:00:e3:67:1c:18:0b:1e: d4:60:e9:ec:6c:2a:11:6f:2e:0f:05:63:aa:88:37:1f:71:10: 41:ae:72:99:72:37:4d:bb:1d:df:ff:22:55:fa:6e:36:03:dd: 8f:2a:4b:e8:46:f4:26:ff:e9:55:76:07:a4:c3:e1:3d:28:7b: 57:ff:57:28:3f:75:11:1b:43:01:56:b9:0b:e3:c7:2f:62:8d: fe:41:b1:cc:2a:43:cf:f8:4d:52:88:5a:5d:dd:fb:bd:1a:b3: b7:68:24:92:d1:60:98:bd:57:42:5b:85:5b:61:dc:79:62:bf: 74:7a:c9:26:48:4a:c0:df:59:2e:10:4d:3e:ca:9c:d8:8c:68: 48:67:c3:ba -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuOrN8w6Z5ulbozeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkOWU0NGUtOWEyZi00YWUzLWI4MGItNTUwZjkwZjE1 ZjY0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YWQ5MDQ0YzAtZDJmYS00MDY1LTk2NTUtMTAzNGFlNTdmYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8RMb2C3FpJrmJWlBbqlwbJO0MLkWvhxvhvn F/ZmBqBIUhC48Bcn4UrePZiWF1lTJ/ueMNlH9+qhMALlhMDTTkVqf6nYESptUixt XZpBtmYCCxKf9KWuYA8Lp4GlxUk4gaV+AQW2kmX9XtftEHv6DhOpogA2AoCC5RWm 2mTQf+Fs2Mk1c6N2YDeesvyuOWVQV5hAK16f/b/zT93GsKN7GGO+8GG9NmG2/EGY nctVVNKt2/3T08z8fny3bIZJ8DYtG6YOeW0hB8nuJ8zeKVgspYdZ7O+qicZpHacm pTHJh2+AcsvfFcQCiVEsPZgUyGB5YoLiR+TTjFaiqUPGzCqAvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFIadcimHOF/lG2qrd59ZfuvsfTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5 ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBmOTBmMTVmNjQvYmY3ZjNmMzItNzk3Ny0z MDIyLWFjZmUtNjMxNzZkMGI2MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzBkOWU0NGUtOWEyZi00YWUzLWI4 MGItNTUwZjkwZjE1ZjY0LzMwZDllNDRlLTlhMmYtNGFlMy1iODBiLTU1MGY5MGYx NWY2NC5jcmwwHwYDVR0jBBgwFoAUK0zB0+E17IWkg8WIud8sdPkUMb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBm OTBmMTVmNjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBA+9q0JI15bMyzM1zCL0UdPRsGMJsDwCfskcTDiks3wYt59lzCZv/C g2tFoVoKsxeDejGgpDmlGrN4VMQWlhpsmF3TFq68DBrG0Edcgl/cUdQwyvB41/0Y 2R8rzne58dF8MpzUzM5ctMbQ0K0lp83LivyLEwmPKgDjZxwYCx7UYOnsbCoRby4P BWOqiDcfcRBBrnKZcjdNux3f/yJV+m42A92PKkvoRvQm/+lVdgekw+E9KHtX/1co P3URG0MBVrkL48cvYo3+QbHMKkPP+E1SiFpd3fu9GrO3aCSS0WCYvVdCW4VbYdx5 Yr90eskmSErA31kuEE0+ypzYjGhIZ8O6 -----END CERTIFICATE-----Generated at Wed Nov 5 11:06:16 2025 by rpki-client