$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa File: 3167000e-cb0e-3c02-8954-911a60c2a9da.roa (raw, json) Hash identifier: dIbnphlXBdQU/9pzeQHkJcAh8tjOnVqq5zeNQMOqD0Q= Subject key identifier: CA:A0:94:6C:D5:37:C1:9E:94:24:60:E6:7E:47:43:74:74:AB:65:2F Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F4328584B6E91F3D1060A757483C2B260 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 16698 IP address blocks: 2604:f500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f3:d1:06:0a:75:74:83:c2:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=353e8960-4770-483a-954f-3dcc8af3ccfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:19:44:37:8e:81:70:e2:68:40:4c:fd:ec:7e: 79:01:83:22:51:60:ee:eb:2f:af:01:d7:45:88:8a: df:ed:55:8f:c4:a2:ce:5c:1c:a5:f1:68:31:39:06: da:0c:d0:bb:34:c4:7a:19:0f:1e:56:18:c9:a8:4b: a6:b4:25:dc:1d:bf:bd:e9:73:3a:61:b8:d3:7d:31: 05:ac:25:8d:ba:ec:d9:8f:59:58:41:e9:39:19:61: 3b:65:e5:79:d9:f7:e9:ba:ae:99:2f:fd:1b:1e:b4: e9:ea:59:89:0e:54:f3:3e:88:6a:07:a7:98:bb:e7: 2e:c2:b8:c2:ca:fa:ba:b8:15:cb:9c:9b:07:54:8c: d6:91:0b:b5:2d:17:11:a4:1a:de:c4:27:88:e0:67: 46:00:f5:bd:e8:33:a1:68:b4:d7:ba:ab:aa:97:8d: 0b:f8:18:67:1d:f6:25:ea:b4:47:6d:f0:17:b8:dc: b8:95:c5:82:46:0d:47:39:6b:60:a3:d8:18:d5:25: 9c:ed:ee:1c:2b:08:9e:8a:58:a4:00:a0:6e:12:58: 7b:a3:aa:86:f0:f5:5e:8d:6d:25:26:ae:cf:39:44: 1b:fe:12:e8:dd:59:ef:2c:a1:da:ed:18:b8:86:83: 94:7e:96:7f:83:50:79:bd:ca:b9:ef:63:f5:b3:12: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A0:94:6C:D5:37:C1:9E:94:24:60:E6:7E:47:43:74:74:AB:65:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv6: 2604:f500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:05:07:6f:57:26:84:27:81:33:49:e7:6f:73:06:fe:36:57: 69:89:75:50:c8:b9:fa:d7:23:95:28:1e:8a:de:a9:36:7d:55: a2:be:82:69:54:cf:7e:6a:6d:51:01:21:63:eb:a9:9a:d6:bf: 02:93:68:bf:0c:4d:9b:5f:52:6c:34:3d:7f:f2:d6:32:7a:4d: 75:32:a1:68:85:b6:0d:c8:80:fa:74:54:2f:ab:94:bd:c2:b0: d1:e1:85:db:25:80:84:83:d1:8f:a0:8a:aa:a8:0d:ea:01:07: b1:f3:9a:57:48:fb:a4:5e:7d:58:b2:6c:50:9a:c3:a0:17:3c: 7d:a6:01:97:40:5d:1d:da:b7:66:dc:e1:67:22:af:ae:6d:8a: 02:9c:23:1f:e9:d6:36:25:f9:f7:cc:44:39:e0:d0:62:12:02: 50:ba:04:ed:7f:3c:cf:c7:37:37:da:32:77:20:15:4e:f4:56: bb:09:f6:39:3b:69:db:c6:42:e6:3e:e1:08:79:95:3b:35:5d: e5:6c:50:41:d8:ec:15:01:b4:e0:28:32:9c:2d:c9:3e:49:74: ba:6f:3d:b0:18:c3:ae:45:8c:a1:2a:c3:f3:de:08:3e:ca:39: 0f:1f:b0:80:5b:d1:57:41:91:28:d3:05:c2:92:3b:2d:89:7a: 9c:65:4c:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtukfPRBgp1dIPCsmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzUzZTg5NjAtNDc3MC00ODNhLTk1NGYtM2RjYzhhZjNjY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBlEN46BcOJoQEz97H55AYMiUWDu6y+vAddF iIrf7VWPxKLOXByl8WgxOQbaDNC7NMR6GQ8eVhjJqEumtCXcHb+96XM6YbjTfTEF rCWNuuzZj1lYQek5GWE7ZeV52ffpuq6ZL/0bHrTp6lmJDlTzPohqB6eYu+cuwrjC yvq6uBXLnJsHVIzWkQu1LRcRpBrexCeI4GdGAPW96DOhaLTXuquql40L+BhnHfYl 6rRHbfAXuNy4lcWCRg1HOWtgo9gY1SWc7e4cKwieilikAKBuElh7o6qG8PVejW0l Jq7POUQb/hLo3VnvLKHa7Ri4hoOUfpZ/g1B5vcq572P1sxJCywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMqglGzVN8GelCRg5n5HQ3R0q2UvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvMzE2NzAwMGUtY2IwZS0z YzAyLTg5NTQtOTExYTYwYzJhOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDQBQdvVyaEJ4EzSedvcwb+NldpiXVQyLn61yOVKB6K3qk2fVWivoJp VM9+am1RASFj66ma1r8Ck2i/DE2bX1JsND1/8tYyek11MqFohbYNyID6dFQvq5S9 wrDR4YXbJYCEg9GPoIqqqA3qAQex85pXSPukXn1YsmxQmsOgFzx9pgGXQF0d2rdm 3OFnIq+ubYoCnCMf6dY2Jfn3zEQ54NBiEgJQugTtfzzPxzc32jJ3IBVO9Fa7CfY5 O2nbxkLmPuEIeZU7NV3lbFBB2OwVAbTgKDKcLck+SXS6bz2wGMOuRYyhKsPz3gg+ yjkPH7CAW9FXQZEo0wXCkjstiXqcZUwc -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:07 2025 by rpki-client