$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/95f84eb9-bf21-3413-a217-d56b009e4492.roa File: 95f84eb9-bf21-3413-a217-d56b009e4492.roa (raw, json) Hash identifier: uHrXe5SPj2ZQCdgRhagyZl+sm8HGtytEcgwqCu69gAs= Subject key identifier: A9:27:37:ED:05:B0:C8:0E:68:CB:C7:3F:C9:2F:46:F4:AF:5B:1A:3F Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584AC8764FFA8D294EAEA8A69100 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/95f84eb9-bf21-3413-a217-d56b009e4492.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 27446 IP address blocks: 2001:4850:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:4f:fa:8d:29:4e:ae:a8:a6:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=5e78a812-1a71-4c5e-bcac-a15f30886cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fb:d1:79:fc:a5:cf:87:cf:78:5a:d7:d0:20: 52:83:04:94:f0:84:ab:aa:b7:f5:be:e7:13:0b:da: 2c:e8:5f:c3:8f:12:69:3d:75:69:4e:a4:5e:5f:1e: 5b:3a:f5:60:fd:32:be:67:98:99:dd:44:4a:dc:98: 24:bb:fd:8c:9a:2a:e4:a0:03:d2:fd:f3:91:30:34: 65:41:cc:a0:fd:a8:04:68:20:8c:33:38:ee:d3:e6: 77:7d:0b:1d:e2:18:40:33:9d:02:9f:70:4b:fd:4c: 8e:85:44:66:d9:7c:f5:cc:64:60:9e:57:0f:bb:86: 62:63:2f:06:69:03:9f:15:0d:29:55:60:70:52:cd: 0b:7d:b2:da:cd:0f:04:12:7b:98:8b:cd:25:ba:0f: e0:db:4a:f8:4e:d1:5c:b4:e7:97:8f:d8:54:ee:73: fa:2c:a8:f5:35:4b:8a:bc:41:16:c0:ac:45:6b:5a: a9:d8:34:e3:ed:a5:b5:8a:5b:5d:e0:70:a5:f9:35: b7:bf:34:5e:de:36:2a:2a:48:bb:06:00:c0:dd:b2: 80:f2:44:e9:12:ea:34:7f:ec:85:18:96:7d:36:55: 29:9e:cc:6e:8d:00:0e:91:2a:92:22:44:f1:98:8e: 4f:12:27:e9:b7:6b:be:20:8d:9f:0b:25:99:5b:1d: 29:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:27:37:ED:05:B0:C8:0E:68:CB:C7:3F:C9:2F:46:F4:AF:5B:1A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/95f84eb9-bf21-3413-a217-d56b009e4492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:4850:f000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:57:d1:15:3a:f5:9b:29:39:e6:c6:40:8a:62:23:db:78:e4: f1:d6:93:1d:87:58:c2:82:27:13:5a:73:9f:e1:6e:00:22:cf: e8:5d:df:c6:07:0b:ee:a8:23:f1:a5:dc:2f:f4:31:54:8b:68: 5f:77:2d:3c:70:82:dc:8c:6f:b5:f6:5b:a2:a9:b5:33:55:ee: 93:9f:e7:ae:c6:2f:ca:e7:84:87:8b:95:59:49:2a:7f:a0:ca: dd:50:1c:37:f5:99:7a:81:59:85:13:fe:0b:c1:01:6d:52:dc: eb:17:67:60:66:83:b0:8f:25:8a:fb:08:92:de:ff:89:c3:00: d9:6a:e2:c1:ed:36:4e:1f:21:57:4f:9d:2a:e0:2c:a4:cd:95: ff:d7:6d:55:11:53:f0:6c:bc:7e:21:9e:2e:36:92:19:e6:8d: 3d:3f:6a:c1:57:e0:f3:52:12:02:b4:3f:f7:ee:47:d6:c8:76: 52:3b:55:0d:22:1f:8c:ad:64:8e:20:00:45:b7:0a:76:1f:22: a7:f2:12:72:4f:38:13:5c:19:8c:85:ad:8f:52:d2:d8:ea:45: a8:9e:26:4d:42:5f:b5:c0:a5:16:8e:e4:e0:b8:1e:30:5c:be: 31:06:37:81:2d:19:c5:38:9a:65:a3:06:98:b4:a2:3a:3a:33: 3a:61:b5:b9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErIdk/6jSlOrqimkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWU3OGE4MTItMWE3MS00YzVlLWJjYWMtYTE1ZjMwODg2Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/vRefylz4fPeFrX0CBSgwSU8ISrqrf1vucT C9os6F/DjxJpPXVpTqReXx5bOvVg/TK+Z5iZ3URK3Jgku/2MmirkoAPS/fORMDRl Qcyg/agEaCCMMzju0+Z3fQsd4hhAM50Cn3BL/UyOhURm2Xz1zGRgnlcPu4ZiYy8G aQOfFQ0pVWBwUs0LfbLazQ8EEnuYi80lug/g20r4TtFctOeXj9hU7nP6LKj1NUuK vEEWwKxFa1qp2DTj7aW1iltd4HCl+TW3vzRe3jYqKki7BgDA3bKA8kTpEuo0f+yF GJZ9NlUpnsxujQAOkSqSIkTxmI5PEifpt2u+II2fCyWZWx0p9QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKknN+0FsMgOaMvHP8kvRvSvWxo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvOTVmODRlYjktYmYyMS0z NDEzLWEyMTctZDU2YjAwOWU0NDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEIAFIUPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVVfRFTr1myk55sZAimIj23jk8daTHYdYwoInE1pzn+FuACLP6F3f xgcL7qgj8aXcL/QxVItoX3ctPHCC3IxvtfZboqm1M1Xuk5/nrsYvyueEh4uVWUkq f6DK3VAcN/WZeoFZhRP+C8EBbVLc6xdnYGaDsI8livsIkt7/icMA2Wriwe02Th8h V0+dKuAspM2V/9dtVRFT8Gy8fiGeLjaSGeaNPT9qwVfg81ISArQ/9+5H1sh2UjtV DSIfjK1kjiAARbcKdh8ip/ISck84E1wZjIWtj1LS2OpFqJ4mTUJftcClFo7k4Lge MFy+MQY3gS0ZxTiaZaMGmLSiOjozOmG1uQ== -----END CERTIFICATE-----Generated at Sat Aug 23 23:25:38 2025 by rpki-client