$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc14e3d-97d9-3c44-b538-d350de21da7e.roa File: bfc14e3d-97d9-3c44-b538-d350de21da7e.roa (raw, json) Hash identifier: +b4HQY72EhLaYu41SwCP/Kj+9cTndh81WLhdWvZbqJE= Subject key identifier: ED:7C:04:DE:B7:3C:79:03:93:2A:73:85:28:5D:04:BA:B5:83:5B:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B434C4EA32E7A7E9006522A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc14e3d-97d9-3c44-b538-d350de21da7e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 397208 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4e:a3:2e:7a:7e:90:06:52:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=20e8e2fd-ca0e-494a-89ba-a2dfbbf97be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:bd:53:4f:1e:4c:06:be:01:b0:2d:63:6e: a8:4f:f3:f9:60:9d:b2:37:68:4a:c6:ea:f7:9a:6d: 87:2c:ee:2f:87:5a:b6:bf:37:0c:da:b4:35:19:35: e7:04:c2:ce:c1:86:49:cb:b8:05:69:59:53:74:4a: 98:c7:77:4f:dd:63:13:a6:0d:ae:a5:a9:6e:d8:da: b4:e0:c5:d0:26:8c:24:e0:e9:71:e0:bb:fb:f4:1d: 36:76:54:31:2f:e8:95:34:b5:27:03:67:fb:b1:87: 9c:b8:08:6b:2b:3f:6d:65:26:f2:09:b2:e7:4f:51: 4d:a7:c7:3e:54:a1:03:3c:7c:f9:3f:d2:50:5d:79: 27:f5:bb:85:85:10:76:5a:49:e2:04:4b:a3:90:07: cc:14:a9:12:d0:94:91:9e:df:1a:2e:77:63:26:ed: d7:4c:fe:5e:5f:89:50:a6:3a:43:b4:51:42:c6:65: 81:7f:8f:f8:16:e4:cc:1b:99:a5:3a:18:78:81:f5: 9a:77:26:64:2b:b9:c6:57:e8:78:b0:cc:6e:9e:f4: c3:e7:ff:2f:38:09:4c:0d:fb:8d:a4:79:42:21:8a: dc:4d:86:62:ad:41:c2:66:9a:cf:73:d5:c5:ee:ea: 8a:65:d2:1a:61:ad:c6:80:bc:eb:fa:a0:91:1c:fd: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7C:04:DE:B7:3C:79:03:93:2A:73:85:28:5D:04:BA:B5:83:5B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfc14e3d-97d9-3c44-b538-d350de21da7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:dd:ca:74:cb:40:ca:6b:17:9b:28:f9:e7:75:e7:c0:4d:3c: 3b:15:7f:38:2c:f9:5e:f6:4f:67:5a:a9:1c:fd:b4:8e:a0:d9: e2:de:b1:fa:18:a3:6a:1f:9c:43:98:48:3c:d8:20:71:26:44: 4c:56:e7:c0:2d:76:75:1d:d9:15:13:0d:63:c2:f1:1a:45:fb: 90:44:e1:92:4a:f7:76:52:7f:9e:21:04:0a:6d:27:0e:b7:c6: 8a:6a:85:c3:cd:10:99:05:9f:71:7e:37:78:df:80:7e:3c:e4: b6:f2:83:a2:63:1e:a6:83:aa:f0:f6:1a:2b:af:93:b5:3a:98: 28:2d:b8:92:3f:73:9f:7d:9a:5d:e6:c5:c1:c1:1b:65:71:1c: d8:32:5d:fb:45:b4:d3:8f:90:66:11:0a:67:a0:6a:99:e8:20: d8:6a:9d:14:d1:85:dc:c7:ff:65:6a:ac:4e:57:ae:e5:19:43: 5b:8f:93:6e:cf:a0:13:ab:d3:90:1b:53:87:e5:b3:f4:ff:dd: 49:bb:f9:30:7d:24:d0:fe:f4:b1:77:ae:fa:d1:69:b1:a6:c5: b7:8c:e6:63:44:f8:59:9f:fa:1d:ac:bb:ef:ab:e6:f4:02:78: 4e:09:91:3a:52:f1:7f:8c:29:3b:aa:90:0e:b8:f0:18:ec:12: b2:33:d9:a7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtDTE6jLnp+kAZSKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MjBlOGUyZmQtY2EwZS00OTRhLTg5YmEtYTJkZmJiZjk3YmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhm9U08eTAa+AbAtY26oT/P5YJ2yN2hKxur3 mm2HLO4vh1q2vzcM2rQ1GTXnBMLOwYZJy7gFaVlTdEqYx3dP3WMTpg2upalu2Nq0 4MXQJowk4Olx4Lv79B02dlQxL+iVNLUnA2f7sYecuAhrKz9tZSbyCbLnT1FNp8c+ VKEDPHz5P9JQXXkn9buFhRB2WkniBEujkAfMFKkS0JSRnt8aLndjJu3XTP5eX4lQ pjpDtFFCxmWBf4/4FuTMG5mlOhh4gfWadyZkK7nGV+h4sMxunvTD5/8vOAlMDfuN pHlCIYrcTYZirUHCZprPc9XF7uqKZdIaYa3GgLzr+qCRHP0AeQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO18BN63PHkDkypzhShdBLq1g1s5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZjMTRlM2QtOTdkOS0z YzQ0LWI1MzgtZDM1MGRlMjFkYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBN3cp0y0DKaxebKPnndefATTw7FX84LPle9k9n Wqkc/bSOoNni3rH6GKNqH5xDmEg82CBxJkRMVufALXZ1HdkVEw1jwvEaRfuQROGS Svd2Un+eIQQKbScOt8aKaoXDzRCZBZ9xfjd434B+POS28oOiYx6mg6rw9horr5O1 OpgoLbiSP3OffZpd5sXBwRtlcRzYMl37RbTTj5BmEQpnoGqZ6CDYap0U0YXcx/9l aqxOV67lGUNbj5Nuz6ATq9OQG1OH5bP0/91Ju/kwfSTQ/vSxd6760WmxpsW3jOZj RPhZn/odrLvvq+b0AnhOCZE6UvF/jCk7qpAOuPAY7BKyM9mn -----END CERTIFICATE-----Generated at Mon Oct 20 03:40:56 2025 by rpki-client