$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa File: bfc793ce-a993-3340-a83b-f59fc42e0a54.roa (raw, json) Hash identifier: L6QZd/vMo2uLzWwcLFUe1d2/YqRStG3tHX6DZHJJS2I= Subject key identifier: E0:89:9D:41:91:61:85:FE:CC:C3:57:96:4B:96:CD:89:CD:71:34:A5 Certificate issuer: /CN=206b65c6-b880-42a7-b728-a37b15fc236d Certificate serial: 010D0C9F4328584B8EACC7C6E4F282998B4AFC00 Authority key identifier: 29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 35889 IP address blocks: 2604:8ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c7:c6:e4:f2:82:99:8b:4a:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206b65c6-b880-42a7-b728-a37b15fc236d Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=4f9ce877-a61b-450b-87ee-ed53d2e11ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:7e:a5:2f:45:6b:d2:eb:5a:f9:db:06:80: ce:e0:66:d1:e4:f8:c2:1f:7f:62:89:8f:11:5e:84: 91:a7:7b:24:98:c5:ac:29:0b:d1:4a:94:e6:7b:ae: 9d:1c:ef:c3:c6:55:97:b8:7f:c6:02:4a:79:0b:93: df:16:37:c2:cd:c4:f2:ac:0b:eb:1d:9a:dd:cc:c5: 82:da:b9:50:1b:5b:0e:14:5b:ca:60:1c:1c:39:b6: 2d:2e:74:f0:54:bb:3b:2c:2c:d2:95:6f:b3:b4:25: a3:f5:a7:31:c7:67:0d:12:c3:9b:e6:7d:24:4f:89: 8b:33:93:e1:54:41:96:e2:c1:e4:f9:c5:fa:19:21: 94:21:0b:4d:a9:7e:96:7a:44:73:33:00:a8:0c:63: c0:b9:a7:4a:70:ed:89:e5:df:80:f8:d5:7e:e9:17: 3d:8b:2a:85:f7:a2:c2:f3:89:4e:76:54:2c:4c:5d: 32:1c:9b:c0:b0:d9:2e:5f:d1:86:32:5e:78:ac:94: f0:32:b2:1e:1e:a2:32:58:74:68:11:7c:93:63:be: 4b:12:64:03:37:f1:a6:81:68:53:c6:4d:ed:2f:ac: 77:03:39:04:56:9a:ba:5c:e0:ad:78:f9:6d:95:7e: 16:1d:cd:99:87:e4:75:7c:fa:5c:7a:39:cc:01:34: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:9D:41:91:61:85:FE:CC:C3:57:96:4B:96:CD:89:CD:71:34:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/bfc793ce-a993-3340-a83b-f59fc42e0a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl X509v3 Authority Key Identifier: keyid:29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer sbgp-ipAddrBlock: critical IPv6: 2604:8ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a3:ad:e9:45:b6:a1:64:3c:b6:31:c3:59:f7:70:2a:9a:a5: 51:03:81:2c:cf:1a:83:02:07:36:33:06:2a:50:a9:2d:e7:15: 81:5c:4c:2b:c5:2a:c6:8c:15:e1:f4:d8:73:e2:a7:70:2f:6c: aa:c1:36:d2:4c:7e:cf:22:57:2f:d6:0e:c8:20:45:74:11:d3: c8:60:4e:c9:0a:16:d9:f5:b1:e8:4d:4f:82:b6:e5:07:86:3c: 0c:26:24:d0:81:8a:ef:ca:fe:80:59:1e:58:aa:51:bb:26:42: 6a:87:d9:03:b2:54:6d:01:c9:7e:b2:6d:43:96:b8:27:13:51: 10:f4:0b:9c:7a:de:89:b7:5f:2e:4b:70:fc:5a:1c:71:26:f4: 36:50:c9:80:3d:43:3e:62:9f:5a:d3:0f:58:29:5e:3a:76:65: 5c:d4:dc:f3:6f:03:90:5f:40:18:aa:9a:4a:32:2e:48:a6:17: 4c:17:74:99:10:91:a2:be:87:e8:0f:9c:d7:f4:dc:80:fe:2a: 63:04:b5:1a:70:e4:a8:f0:f7:83:f2:0f:4e:b4:41:1a:35:2d: 13:04:b7:5a:43:43:3c:9b:49:b3:dc:f4:ae:67:0c:1a:f7:20: 46:8d:3f:95:10:da:3b:a8:a8:8a:9a:fe:56:5f:5c:61:98:44: aa:37:0b:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuOrMfG5PKCmYtK/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA2YjY1YzYtYjg4MC00MmE3LWI3MjgtYTM3YjE1ZmMy MzZkMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NGY5Y2U4NzctYTYxYi00NTBiLTg3ZWUtZWQ1M2QyZTExY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrp+pS9Fa9LrWvnbBoDO4GbR5PjCH39iiY8R XoSRp3skmMWsKQvRSpTme66dHO/DxlWXuH/GAkp5C5PfFjfCzcTyrAvrHZrdzMWC 2rlQG1sOFFvKYBwcObYtLnTwVLs7LCzSlW+ztCWj9acxx2cNEsOb5n0kT4mLM5Ph VEGW4sHk+cX6GSGUIQtNqX6WekRzMwCoDGPAuadKcO2J5d+A+NV+6Rc9iyqF96LC 84lOdlQsTF0yHJvAsNkuX9GGMl54rJTwMrIeHqIyWHRoEXyTY75LEmQDN/GmgWhT xk3tL6x3AzkEVpq6XOCtePltlX4WHc2Zh+R1fPpcejnMATSdjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOCJnUGRYYX+zMNXlkuWzYnNcTSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDZi NjVjNi1iODgwLTQyYTctYjcyOC1hMzdiMTVmYzIzNmQvYmZjNzkzY2UtYTk5My0z MzQwLWE4M2ItZjU5ZmM0MmUwYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA2YjY1YzYtYjg4MC00MmE3LWI3 MjgtYTM3YjE1ZmMyMzZkLzIwNmI2NWM2LWI4ODAtNDJhNy1iNzI4LWEzN2IxNWZj MjM2ZC5jcmwwHwYDVR0jBBgwFoAUKVV8DO6NGLE/hbyF1yM2h+MfMwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDZiNjVjNi1iODgwLTQyYTctYjcyOC1hMzdi MTVmYzIzNmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSKwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCdo63pRbahZDy2McNZ93AqmqVRA4EszxqDAgc2MwYqUKkt5xWBXEwr xSrGjBXh9Nhz4qdwL2yqwTbSTH7PIlcv1g7IIEV0EdPIYE7JChbZ9bHoTU+CtuUH hjwMJiTQgYrvyv6AWR5YqlG7JkJqh9kDslRtAcl+sm1DlrgnE1EQ9Aucet6Jt18u S3D8WhxxJvQ2UMmAPUM+Yp9a0w9YKV46dmVc1NzzbwOQX0AYqppKMi5IphdMF3SZ EJGivofoD5zX9NyA/ipjBLUacOSo8PeD8g9OtEEaNS0TBLdaQ0M8m0mz3PSuZwwa 9yBGjT+VENo7qKiKmv5WX1xhmESqNwvh -----END CERTIFICATE-----Generated at Tue Oct 21 00:48:00 2025 by rpki-client