$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/bc7387ae-002f-3045-a8d3-87e993c21f45.roa File: bc7387ae-002f-3045-a8d3-87e993c21f45.roa (raw, json) Hash identifier: fgJH1QbrXNPlQSRIzYmKm5YaYaQ3yi6QX+cqvt9p66k= Subject key identifier: 6C:FA:04:F0:0E:B1:2D:3C:16:59:53:22:D2:D4:39:4C:29:AF:4C:39 Certificate issuer: /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Certificate serial: 010D0C9F4328584BA237938639CDE4BAD7FDCA80 Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/bc7387ae-002f-3045-a8d3-87e993c21f45.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 2602:f5c8:90::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:93:86:39:cd:e4:ba:d7:fd:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=37a3f423-4558-4c78-95d4-7db8c776941d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:d5:de:1b:c1:53:5b:36:81:c9:ff:b0:e4: 4c:9c:4b:f9:7b:13:81:93:d0:90:dd:47:5e:5c:0e: 05:9c:50:d7:01:71:3c:60:9e:a7:60:17:f0:14:85: ec:c0:96:40:8e:86:33:ac:b3:ec:82:dc:34:76:5f: 50:83:2e:4e:25:a1:6e:e7:92:1f:d4:32:98:17:d9: 93:6e:ea:3d:ea:75:a6:9d:69:e5:31:9c:fc:e4:e7: 85:85:5d:fa:ce:d3:58:96:5c:e5:c5:e6:ed:78:6d: 0b:ea:10:43:3c:b7:64:4b:fe:36:38:59:4e:f2:a8: d2:41:01:d0:0c:5f:06:16:25:b6:08:6e:7e:a8:b6: dc:91:11:cf:f8:58:1c:e3:8f:7c:77:ef:40:84:91: a5:fc:78:c1:11:07:bf:0b:92:42:ce:42:25:ae:d5: 1b:9a:ca:06:75:07:c8:f5:b9:d3:61:d5:1e:f8:47: 4b:ef:58:55:2f:6e:9d:8c:9c:27:5e:03:2a:dd:46: 51:5c:55:5a:54:54:7d:32:4a:0b:dc:34:04:27:0e: 46:5c:6c:23:67:56:0a:c1:7d:3c:38:0e:17:4d:11: 3d:53:09:fb:d8:83:41:d1:8c:50:7d:7d:ed:1a:73: 88:c6:87:9d:09:30:62:76:dc:21:09:79:28:80:f4: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FA:04:F0:0E:B1:2D:3C:16:59:53:22:D2:D4:39:4C:29:AF:4C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/bc7387ae-002f-3045-a8d3-87e993c21f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl X509v3 Authority Key Identifier: keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c8:90::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:29:0a:1b:f3:d5:61:c6:00:17:d9:99:be:23:96:6c:93:a3: 3f:03:e3:9e:50:14:e9:50:ad:0b:1e:25:56:cc:3f:79:1c:97: 84:6d:bc:f6:d2:9b:4f:4c:58:bf:2f:16:aa:23:6d:56:77:99: c2:24:5e:74:a2:51:42:b5:0b:c2:2f:de:c1:3a:fc:e6:41:2f: bc:66:e0:97:f9:48:d1:ef:3c:38:65:c5:dd:1d:c1:0d:45:34: 95:46:14:b3:0a:56:91:19:10:82:57:6c:65:1a:63:50:6e:08: 6b:4b:ed:be:d4:39:94:79:b5:5e:6e:15:3a:19:bf:c9:ff:58: 9c:fe:6c:1e:13:a8:bb:66:e4:ed:65:28:97:ab:da:92:ee:2e: 95:9f:5e:90:46:73:89:f8:80:96:8a:00:fc:1a:9d:de:ca:dc: 98:09:d1:41:48:66:3a:87:41:2a:6a:35:5e:b6:f3:2b:0b:8c: fc:d4:48:5d:12:0e:cf:da:c5:69:76:2a:a6:cd:d5:04:e6:4e: b6:49:20:d8:b9:e9:de:75:37:40:27:67:66:91:4b:43:1e:1f: fd:74:b2:63:60:be:2a:c2:a4:f3:eb:d3:3e:f7:10:9b:5c:cd: 64:27:23:5b:9a:b1:a2:34:93:5b:82:90:66:d6:26:11:e5:d4: 49:0c:40:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuiN5OGOc3kutf9yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzOWJjOTAtZTljZi00MTI1LWFiZTYtZjc1ZDk5YjFj YTFjMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MzdhM2Y0MjMtNDU1OC00Yzc4LTk1ZDQtN2RiOGM3NzY5NDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo23V3hvBU1s2gcn/sORMnEv5exOBk9CQ3Ude XA4FnFDXAXE8YJ6nYBfwFIXswJZAjoYzrLPsgtw0dl9Qgy5OJaFu55If1DKYF9mT buo96nWmnWnlMZz85OeFhV36ztNYllzlxebteG0L6hBDPLdkS/42OFlO8qjSQQHQ DF8GFiW2CG5+qLbckRHP+Fgc4498d+9AhJGl/HjBEQe/C5JCzkIlrtUbmsoGdQfI 9bnTYdUe+EdL71hVL26djJwnXgMq3UZRXFVaVFR9MkoL3DQEJw5GXGwjZ1YKwX08 OA4XTRE9Uwn72INB0YxQfX3tGnOIxoedCTBidtwhCXkogPQQ+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGz6BPAOsS08FllTItLUOUwpr0w5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5 YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVkOTliMWNhMWMvYmM3Mzg3YWUtMDAyZi0z MDQ1LWE4ZDMtODdlOTkzYzIxZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWQzOWJjOTAtZTljZi00MTI1LWFi ZTYtZjc1ZDk5YjFjYTFjL2FkMzliYzkwLWU5Y2YtNDEyNS1hYmU2LWY3NWQ5OWIx Y2ExYy5jcmwwHwYDVR0jBBgwFoAUZ+GlgVM7SvNBnGzNthnN8x6dX6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVk OTliMWNhMWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL1yACQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4pChvz1WHGABfZmb4jlmyToz8D455QFOlQrQseJVbMP3kcl4Rt vPbSm09MWL8vFqojbVZ3mcIkXnSiUUK1C8Iv3sE6/OZBL7xm4Jf5SNHvPDhlxd0d wQ1FNJVGFLMKVpEZEIJXbGUaY1BuCGtL7b7UOZR5tV5uFToZv8n/WJz+bB4TqLtm 5O1lKJer2pLuLpWfXpBGc4n4gJaKAPwand7K3JgJ0UFIZjqHQSpqNV628ysLjPzU SF0SDs/axWl2KqbN1QTmTrZJINi56d51N0AnZ2aRS0MeH/10smNgvirCpPPr0z73 EJtczWQnI1uasaI0k1uCkGbWJhHl1EkMQGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:45 2025 by rpki-client