$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa File: bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa (raw, json) Hash identifier: BLh1Q4DmOmi43NIGjL3fgY1Hs4xScTFM/yYTo/nKtBY= Subject key identifier: C1:93:A7:62:9C:CA:B0:A6:25:DF:A5:76:D5:A4:E2:0D:49:66:E8:20 Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584B127162B0AE270D6DCE240780 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 2602:faca:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:62:b0:ae:27:0d:6d:ce:24:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=c402b281-939a-46e7-9495-c96c9fbf62dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:89:af:90:d4:e1:8b:91:7f:6c:95:64:45: aa:43:69:ce:ef:40:8d:58:88:29:a2:9d:dd:ba:d0: b0:03:36:bd:bc:a2:bc:31:f6:cd:17:9d:c4:c1:84: 65:4f:1f:2e:76:6f:e4:4e:b6:d3:37:a7:27:44:c0: 94:f8:87:71:54:18:79:11:a6:fa:05:62:c6:a2:71: ce:13:6c:6f:8f:1f:f7:77:58:d7:ed:0f:93:c9:c6: 04:3c:0e:83:81:d0:fd:e7:a9:a1:d1:31:7b:d3:89: cf:27:37:eb:03:e5:cc:98:3f:a1:1a:d7:1c:8c:7a: da:e5:19:f7:43:01:1d:82:43:ea:06:a2:03:03:93: 41:c6:3b:1d:3b:c3:40:d6:ec:35:e0:ca:85:b2:f8: 8d:2e:5e:61:84:ab:b0:07:74:71:46:a5:65:85:c3: 89:25:94:b8:c5:c5:a3:77:50:35:fb:a3:d2:8f:65: 11:d2:ca:c7:ca:9d:59:01:b1:ad:a4:2e:1c:9b:a8: c2:df:e9:68:3a:3f:6d:ab:3d:03:43:f4:c6:2a:6c: 0d:0e:b0:2c:31:ca:32:1e:db:de:8b:3f:f7:bc:bf: 22:da:4f:11:08:90:ff:15:5f:9c:f1:ee:8b:c1:96: ef:03:b1:f9:a4:61:3d:18:cb:29:b1:02:4d:58:9b: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:93:A7:62:9C:CA:B0:A6:25:DF:A5:76:D5:A4:E2:0D:49:66:E8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:faca:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f2:8a:fa:a9:57:1b:27:cf:03:7e:6f:9e:5e:18:7d:fb:f4: 92:43:33:b4:0d:15:d9:7d:b4:3b:41:be:d9:64:d0:be:7e:5b: ac:f3:39:61:1d:f5:b5:14:cb:da:cd:5a:88:32:82:92:7f:b7: da:e0:32:72:a1:d8:7a:8e:54:22:65:f5:5e:1f:69:d8:0d:30: 09:cb:79:e8:a1:63:91:e6:7b:2d:63:9a:4a:4d:5d:dc:51:05: 50:36:d4:3c:33:5a:61:d9:18:a2:56:d8:12:9a:71:d5:6c:ac: 17:5b:09:d6:dc:0a:71:71:bd:07:42:94:8c:60:bd:29:9a:f9: e3:32:e2:43:35:c0:eb:9d:8f:c6:90:93:76:99:fa:89:26:f3: 75:56:6a:7c:95:24:87:60:9f:32:14:72:f3:58:34:35:9c:dc: c0:c8:ed:90:c2:3c:65:fd:01:46:52:4b:94:d8:fa:76:88:3d: 8e:94:d5:1a:b0:9a:e1:af:f5:57:fb:2e:c0:07:b2:8f:cb:74: a2:6e:58:ab:84:a9:95:83:4c:b9:29:86:3d:0a:da:3c:82:aa: 1d:be:78:0c:93:bc:2a:50:d2:42:ba:2f:89:bc:18:8f:e4:66: 0a:26:6d:f3:00:fe:32:54:1c:0f:a6:4a:70:25:d1:5d:76:5d: aa:d1:28:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsScWKwricNbc4kB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk YzQwMmIyODEtOTM5YS00NmU3LTk0OTUtYzk2YzlmYmY2MmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU6Jr5DU4YuRf2yVZEWqQ2nO70CNWIgpop3d utCwAza9vKK8MfbNF53EwYRlTx8udm/kTrbTN6cnRMCU+IdxVBh5Eab6BWLGonHO E2xvjx/3d1jX7Q+TycYEPA6DgdD956mh0TF704nPJzfrA+XMmD+hGtccjHra5Rn3 QwEdgkPqBqIDA5NBxjsdO8NA1uw14MqFsviNLl5hhKuwB3RxRqVlhcOJJZS4xcWj d1A1+6PSj2UR0srHyp1ZAbGtpC4cm6jC3+loOj9tqz0DQ/TGKmwNDrAsMcoyHtve iz/3vL8i2k8RCJD/FV+c8e6LwZbvA7H5pGE9GMspsQJNWJsVvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGTp2KcyrCmJd+ldtWk4g1JZuggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvYmYzZDZjMzAtZmEyMy0z ZDZiLTg2OTUtNGQzNTU0MTM2ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ygEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILyivqpVxsnzwN+b55eGH379JJDM7QNFdl9tDtBvtlk0L5+W6zz OWEd9bUUy9rNWogygpJ/t9rgMnKh2HqOVCJl9V4fadgNMAnLeeihY5Hmey1jmkpN XdxRBVA21DwzWmHZGKJW2BKacdVsrBdbCdbcCnFxvQdClIxgvSma+eMy4kM1wOud j8aQk3aZ+okm83VWanyVJIdgnzIUcvNYNDWc3MDI7ZDCPGX9AUZSS5TY+naIPY6U 1RqwmuGv9Vf7LsAHso/LdKJuWKuEqZWDTLkphj0K2jyCqh2+eAyTvCpQ0kK6L4m8 GI/kZgombfMA/jJUHA+mSnAl0V12XarRKFI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:18 2025 by rpki-client