$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/87a4fdcf-93e3-31aa-b8fe-a12f35ba853c.roa File: 87a4fdcf-93e3-31aa-b8fe-a12f35ba853c.roa (raw, json) Hash identifier: JCKS03tXkwD83ZVo/0+UBFvvsbXxtj62YlDZrusxlVA= Subject key identifier: DF:A8:0E:26:34:57:BC:97:52:44:BA:17:FA:9A:7B:5D:9F:8E:02:7F Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AC016426219973205AA98C380 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/87a4fdcf-93e3-31aa-b8fe-a12f35ba853c.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 4213 IP address blocks: 2607:f180:5100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:42:62:19:97:32:05:aa:98:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=b03fa377-15c0-450f-9008-ac9abfe61179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:aa:33:21:a9:59:8c:ac:09:fa:97:7a:b9: e2:40:76:d9:a3:8f:fa:64:dd:e5:15:bb:67:ae:1d: 7b:73:84:a6:2f:b5:3e:b8:5b:6c:78:cd:7f:0b:8a: ac:1c:48:59:9f:8f:e0:15:37:84:d2:98:71:c5:8c: 3b:83:46:8d:b9:24:e2:3e:65:7d:ee:1a:3c:1e:88: c2:73:ad:d5:43:29:c1:28:f1:d8:f3:bd:05:3b:e1: aa:87:69:77:6f:35:59:79:c2:41:3a:a2:f5:b2:bc: 11:ef:d5:12:1d:08:0e:15:ec:c0:b1:16:91:a4:06: af:08:90:83:c0:d3:45:df:55:c2:aa:df:e5:a6:60: 84:d3:8a:62:1e:3c:41:d7:0f:38:36:dd:27:b9:e1: 7a:58:14:b6:2a:a2:c2:b6:2c:98:58:5c:5d:c6:76: 27:0b:b5:85:59:b4:cb:9a:d6:74:04:ba:fa:bf:17: 89:b8:59:9e:c1:a9:6a:2c:0b:e6:36:de:0c:71:f7: ea:fb:55:6a:3d:95:c2:6a:c1:44:00:f7:18:0f:35: a8:07:7c:33:d1:86:af:bf:07:c9:ea:45:93:b1:22: bf:80:0d:28:ed:fe:78:93:5f:42:1d:c4:0b:3d:86: d0:0d:35:4f:b8:05:d6:38:24:e0:74:11:09:3f:fe: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A8:0E:26:34:57:BC:97:52:44:BA:17:FA:9A:7B:5D:9F:8E:02:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/87a4fdcf-93e3-31aa-b8fe-a12f35ba853c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv6: 2607:f180:5100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8a:3d:81:ed:49:ee:39:bb:60:bd:15:c5:5b:b7:b3:35:85: 6a:85:e2:58:a2:2d:78:ba:51:f5:0c:c8:68:63:5a:62:31:16: 3b:ad:bd:9b:a0:ae:92:10:76:df:8a:e4:67:70:b2:0c:f5:de: bb:2a:b3:1b:9c:08:54:42:5f:6c:a8:a3:75:0f:0a:bc:4c:8b: 67:3f:4a:9e:f6:bc:00:3c:05:ae:2e:c9:ea:c6:ae:87:38:a8: fe:d8:44:48:ad:93:09:ae:51:86:03:be:a4:82:ca:46:d0:d9: e0:8b:69:45:c7:42:90:db:1e:ae:50:62:3e:bf:96:29:05:24: 81:a7:d5:17:6e:e6:2f:51:ff:00:2f:58:38:49:1d:24:e9:65: 59:62:b4:21:d7:4a:d6:92:79:c2:db:57:1e:a9:cc:6d:77:cf: 5b:b6:0c:24:bd:ba:71:aa:0d:75:00:62:1e:81:1f:23:10:2b: a0:67:70:95:52:96:c7:bf:8f:a4:58:d9:e0:f2:79:46:2c:2b: 90:ae:15:67:df:c6:70:ae:af:d6:58:87:81:ad:c8:90:9f:0f: 59:ca:46:c8:8c:09:63:20:93:e9:27:db:bf:7e:cf:43:50:24: 77:17:af:d9:2e:cf:c3:b3:9c:e8:fd:49:2d:da:77:7d:e5:61: 0c:18:66:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErAFkJiGZcyBaqYw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjAzZmEzNzctMTVjMC00NTBmLTkwMDgtYWM5YWJmZTYxMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPOqMyGpWYysCfqXerniQHbZo4/6ZN3lFbtn rh17c4SmL7U+uFtseM1/C4qsHEhZn4/gFTeE0phxxYw7g0aNuSTiPmV97ho8HojC c63VQynBKPHY870FO+Gqh2l3bzVZecJBOqL1srwR79USHQgOFezAsRaRpAavCJCD wNNF31XCqt/lpmCE04piHjxB1w84Nt0nueF6WBS2KqLCtiyYWFxdxnYnC7WFWbTL mtZ0BLr6vxeJuFmewalqLAvmNt4Mcffq+1VqPZXCasFEAPcYDzWoB3wz0YavvwfJ 6kWTsSK/gA0o7f54k19CHcQLPYbQDTVPuAXWOCTgdBEJP/6KAQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN+oDiY0V7yXUkS6F/qae12fjgJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvODdhNGZkY2YtOTNlMy0z MWFhLWI4ZmUtYTEyZjM1YmE4NTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfxgFEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiIo9ge1J7jm7YL0VxVu3szWFaoXiWKIteLpR9QzIaGNaYjEWO629 m6CukhB234rkZ3CyDPXeuyqzG5wIVEJfbKijdQ8KvEyLZz9Knva8ADwFri7J6sau hzio/thESK2TCa5RhgO+pILKRtDZ4ItpRcdCkNserlBiPr+WKQUkgafVF27mL1H/ AC9YOEkdJOllWWK0IddK1pJ5wttXHqnMbXfPW7YMJL26caoNdQBiHoEfIxAroGdw lVKWx7+PpFjZ4PJ5RiwrkK4VZ9/GcK6v1liHga3IkJ8PWcpGyIwJYyCT6Sfbv37P Q1Akdxev2S7Pw7Oc6P1JLdp3feVhDBhmcg== -----END CERTIFICATE-----Generated at Sun Aug 24 00:40:36 2025 by rpki-client