$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa File: 2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa (raw, json) Hash identifier: tg0XjWOiujwPfMcAxBmWrCxLeN7YWIx+2aXiZSzcXiI= Subject key identifier: E8:AD:3A:BF:9C:CE:C2:DE:BD:1B:CB:2F:38:AE:32:00:E4:DC:3E:4D Certificate issuer: /CN=bc061f95-a504-48f1-88f1-fae53628511e Certificate serial: 010D0C9F4328584B583C8825F48D69AE16A61D00 Authority key identifier: 14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 398885 IP address blocks: 2607:b940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:88:25:f4:8d:69:ae:16:a6:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc061f95-a504-48f1-88f1-fae53628511e Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=e7d36303-f67e-4bc4-b6f9-68a51cb0464e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:6d:16:e3:e0:b1:77:8a:f6:79:64:13:a5: 23:0d:a0:2f:8e:e6:8a:86:f5:6c:1c:21:60:57:33: 15:e6:5d:e5:71:15:7f:e0:98:58:21:8b:27:25:d6: 64:e0:b6:16:2a:60:00:0b:6f:28:0c:03:75:cf:33: 0c:75:ec:95:e1:a1:9c:68:0b:a5:9a:a1:24:90:bc: 7f:0d:90:08:e9:f2:2c:5b:66:da:43:73:ff:aa:e4: 36:66:01:02:d1:94:26:67:87:60:6f:97:dd:a8:32: ea:8d:a7:d0:eb:96:38:2d:71:2d:3c:97:9a:d2:63: 71:a5:8c:8f:4c:e2:70:db:1c:9b:d5:f2:e0:08:37: fd:31:06:29:4a:c4:94:2a:9b:a6:b3:da:5b:32:85: 88:a4:6e:1a:b9:ea:53:96:41:36:d9:17:2f:af:ae: 25:6a:db:4d:30:5f:ee:4c:ac:df:8c:19:80:e1:5c: 39:c7:7e:3d:5a:da:bd:be:d2:76:1f:c2:d1:43:4d: 84:c7:ff:a2:e5:5b:ab:86:34:22:ab:3b:9e:1a:52: d8:1b:22:66:94:d9:5c:70:51:64:33:64:94:86:ad: 59:dd:61:bb:fb:58:e4:c9:4f:3b:40:0b:02:08:44: 80:a8:ae:b6:61:58:24:b5:e3:6b:dc:e9:13:a8:f9: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:3A:BF:9C:CE:C2:DE:BD:1B:CB:2F:38:AE:32:00:E4:DC:3E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/2102d3b5-5c47-3181-bcb5-1cd7600fa6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl X509v3 Authority Key Identifier: keyid:14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer sbgp-ipAddrBlock: critical IPv6: 2607:b940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9e:f9:bd:d4:dc:ad:6b:a7:55:46:62:ac:d7:bc:ca:33:0d: 70:83:c6:e2:d1:9c:6d:c3:8c:6a:c0:39:4b:05:90:ec:7e:b8: 29:36:5f:c0:55:54:f5:93:00:e9:98:68:95:ef:e2:a1:7d:2d: 46:1d:68:48:ee:db:d2:f7:da:e2:63:e3:25:b4:45:a4:26:31: 84:cc:0a:22:fd:32:dd:ff:94:3a:02:eb:e1:b9:d2:19:be:4b: 9d:38:a1:f4:4a:23:47:f1:fe:d6:10:15:c4:28:3e:82:4e:42: 0f:b2:fa:80:61:fd:4c:c1:2f:10:56:8a:aa:3f:5d:68:b9:2d: 33:02:d8:61:3e:66:96:d3:f5:d8:62:fc:9e:1c:45:e4:1d:32: 0e:9c:98:58:ca:2d:bf:89:ec:6f:a6:71:38:5a:2e:4d:7d:51: 8f:f1:91:85:ec:e1:ac:00:79:14:a1:06:7b:64:44:28:fb:89: fa:bd:5c:e9:16:99:3b:33:0f:cc:fe:a6:11:48:03:47:d9:dd: ee:1b:b2:25:8f:3f:d9:4d:50:b0:29:61:a1:e8:4b:a3:ca:28: 1a:9a:b1:5c:38:12:5f:09:26:6b:23:42:78:2f:c9:64:ec:6b: e6:1b:67:c2:63:36:7d:c7:a5:09:7f:4b:a8:0d:4f:d0:32:a8: b1:b9:ad:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtYPIgl9I1prhamHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMwNjFmOTUtYTUwNC00OGYxLTg4ZjEtZmFlNTM2Mjg1 MTFlMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTdkMzYzMDMtZjY3ZS00YmM0LWI2ZjktNjhhNTFjYjA0NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ptFuPgsXeK9nlkE6UjDaAvjuaKhvVsHCFg VzMV5l3lcRV/4JhYIYsnJdZk4LYWKmAAC28oDAN1zzMMdeyV4aGcaAulmqEkkLx/ DZAI6fIsW2baQ3P/quQ2ZgEC0ZQmZ4dgb5fdqDLqjafQ65Y4LXEtPJea0mNxpYyP TOJw2xyb1fLgCDf9MQYpSsSUKpums9pbMoWIpG4auepTlkE22Rcvr64lattNMF/u TKzfjBmA4Vw5x349Wtq9vtJ2H8LRQ02Ex/+i5VurhjQiqzueGlLYGyJmlNlccFFk M2SUhq1Z3WG7+1jkyU87QAsCCESAqK62YVgkteNr3OkTqPno3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOitOr+czsLevRvLLziuMgDk3D5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2 MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1MzYyODUxMWUvMjEwMmQzYjUtNWM0Ny0z MTgxLWJjYjUtMWNkNzYwMGZhNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMwNjFmOTUtYTUwNC00OGYxLTg4 ZjEtZmFlNTM2Mjg1MTFlL2JjMDYxZjk1LWE1MDQtNDhmMS04OGYxLWZhZTUzNjI4 NTExZS5jcmwwHwYDVR0jBBgwFoAUFFAVosutB3c4zIGLkq2jLlFK84EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1 MzYyODUxMWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge5QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxnvm91Nyta6dVRmKs17zKMw1wg8bi0Zxtw4xqwDlLBZDsfrgpNl/A VVT1kwDpmGiV7+KhfS1GHWhI7tvS99riY+MltEWkJjGEzAoi/TLd/5Q6AuvhudIZ vkudOKH0SiNH8f7WEBXEKD6CTkIPsvqAYf1MwS8QVoqqP11ouS0zAthhPmaW0/XY YvyeHEXkHTIOnJhYyi2/iexvpnE4Wi5NfVGP8ZGF7OGsAHkUoQZ7ZEQo+4n6vVzp Fpk7Mw/M/qYRSANH2d3uG7Iljz/ZTVCwKWGh6EujyigamrFcOBJfCSZrI0J4L8lk 7GvmG2fCYzZ9x6UJf0uoDU/QMqixua0n -----END CERTIFICATE-----Generated at Mon Oct 20 02:48:12 2025 by rpki-client