$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa File: ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa (raw, json) Hash identifier: mVmeTe4Wg/4oHkfR13i63ZI2Yhg2VST7vyRtynqPgOM= Subject key identifier: 07:0C:BA:47:96:1F:04:02:8E:C9:EE:E1:83:99:C9:0B:B5:A8:EF:B6 Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F4328584B67974663B37A110EBC4C3700 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 16509 IP address blocks: 2607:6bc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:46:63:b3:7a:11:0e:bc:4c:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=5ad29ce5-96fc-45fd-ada0-53679a705b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:ed:07:40:5c:63:49:f0:49:62:a8:2e:f3: 09:f5:2d:5f:21:4f:7b:54:70:b8:16:c4:08:22:b8: 29:16:1a:7a:f9:02:bd:88:df:7b:81:37:a2:6e:62: f8:2e:01:77:36:21:5e:00:c8:f6:76:d9:5f:d4:00: 64:11:e3:40:14:da:3b:76:2c:79:58:54:4d:aa:ce: 16:3f:d5:fd:0b:32:d5:9d:b1:ed:5a:a4:f5:91:35: ad:17:c1:e8:86:40:54:85:91:c2:b3:2a:40:e9:a1: a2:6e:aa:95:b4:61:99:7e:c8:28:3c:7b:93:7a:ba: f8:f5:c4:30:31:6e:b9:bf:cf:52:5c:63:eb:91:61: ee:c6:76:ec:c0:9f:a1:e0:d4:84:ec:cf:0a:ee:9e: 23:f7:06:8b:55:09:d0:9a:86:58:5e:23:bf:ad:f4: 65:12:c3:38:20:59:90:3a:30:11:f1:08:ba:b4:0c: 5a:a2:ad:0f:04:3a:e6:db:51:a0:26:c8:6d:21:60: 36:64:14:f0:a7:12:4d:aa:3c:54:69:be:50:5e:89: d2:09:b1:ee:90:63:19:47:79:14:7c:ed:2c:88:6a: e8:33:ef:a8:6d:4d:c1:ff:e8:43:62:e7:10:c1:ce: 54:c6:66:47:1b:06:2e:49:48:ad:78:c8:5f:cf:2b: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0C:BA:47:96:1F:04:02:8E:C9:EE:E1:83:99:C9:0B:B5:A8:EF:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/ba9a810b-7813-37e1-af36-bff0ee61d4a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cb:01:7b:fd:c0:91:4e:20:d4:17:ad:5b:28:e7:78:7d:63: 0d:e3:7c:42:63:f0:4a:f5:02:83:d8:9f:fe:72:7f:e5:f3:ab: c2:2e:65:96:32:70:a3:2d:c3:be:e3:61:92:f4:22:01:f0:ed: 7c:5f:4a:2c:65:1e:72:02:20:a5:a1:39:55:e8:7c:49:de:b5: 11:1a:be:c9:91:64:13:6e:85:99:44:63:d2:65:d5:2f:ce:40: 46:50:75:ca:cf:7c:66:ac:19:82:da:62:44:3b:9b:83:a3:62: 7e:6a:ff:d9:8c:10:aa:76:b5:ba:1b:9b:4f:5c:a9:d0:dd:99: c2:79:b5:de:7d:20:fa:12:19:95:73:20:fd:d5:98:50:8c:b5: 51:5f:d5:8f:d7:2a:32:45:84:72:1d:aa:c9:0d:95:b2:c7:14: 2d:51:b4:74:5b:92:c1:21:b1:0b:94:9f:74:6b:04:ae:43:2a: 62:58:94:8a:c7:89:97:63:eb:d7:99:ce:c3:53:8e:5b:63:2d: 82:54:c0:68:6a:d6:00:d8:95:e3:a6:a4:dc:a1:b7:99:0b:22: e3:5e:20:bb:ff:80:89:34:44:49:05:8e:51:c8:80:8f:63:e9: ed:eb:41:17:f4:77:f7:f1:57:c6:29:56:64:89:db:1d:de:d8: da:70:93:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtnl0Zjs3oRDrxMNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NWFkMjljZTUtOTZmYy00NWZkLWFkYTAtNTM2NzlhNzA1YjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7tB0BcY0nwSWKoLvMJ9S1fIU97VHC4FsQI IrgpFhp6+QK9iN97gTeibmL4LgF3NiFeAMj2dtlf1ABkEeNAFNo7dix5WFRNqs4W P9X9CzLVnbHtWqT1kTWtF8HohkBUhZHCsypA6aGibqqVtGGZfsgoPHuTerr49cQw MW65v89SXGPrkWHuxnbswJ+h4NSE7M8K7p4j9waLVQnQmoZYXiO/rfRlEsM4IFmQ OjAR8Qi6tAxaoq0PBDrm21GgJshtIWA2ZBTwpxJNqjxUab5QXonSCbHukGMZR3kU fO0siGroM++obU3B/+hDYucQwc5UxmZHGwYuSUiteMhfzyvEZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAcMukeWHwQCjsnu4YOZyQu1qO+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvYmE5YTgxMGItNzgxMy0z N2UxLWFmMzYtYmZmMGVlNjFkNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFywF7/cCRTiDUF61bKOd4fWMN43xCY/BK9QKD2J/+cn/l86vCLmWW MnCjLcO+42GS9CIB8O18X0osZR5yAiCloTlV6HxJ3rURGr7JkWQTboWZRGPSZdUv zkBGUHXKz3xmrBmC2mJEO5uDo2J+av/ZjBCqdrW6G5tPXKnQ3ZnCebXefSD6EhmV cyD91ZhQjLVRX9WP1yoyRYRyHarJDZWyxxQtUbR0W5LBIbELlJ90awSuQypiWJSK x4mXY+vXmc7DU45bYy2CVMBoatYA2JXjpqTcobeZCyLjXiC7/4CJNERJBY5RyICP Y+nt60EX9Hf38VfGKVZkidsd3tjacJPI -----END CERTIFICATE-----Generated at Mon Oct 20 15:08:32 2025 by rpki-client