$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/bf5e6c0c-9b3c-3c62-989c-6f4fc5e4f81e.roa File: bf5e6c0c-9b3c-3c62-989c-6f4fc5e4f81e.roa (raw, json) Hash identifier: 2jFg3UuhYKJGanZ0aavwOSJihGlx1/3OZjYIICV0BP0= Subject key identifier: 7D:AE:B2:4E:B8:1B:CE:7A:E5:83:95:52:DA:B6:61:BA:D7:1C:16:F1 Certificate issuer: /CN=d88eebee-785b-4505-a5a1-35be5246bc78 Certificate serial: 010D0C9F4328584B2CF6E54A449F0ED4FB2AED80 Authority key identifier: 60:AA:B9:F9:CD:38:6B:0F:00:5F:5F:DB:57:B1:A7:2E:1B:8D:12:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/bf5e6c0c-9b3c-3c62-989c-6f4fc5e4f81e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 35848 IP address blocks: 2602:fab7:f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/d88eebee-785b-4505-a5a1-35be5246bc78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/d88eebee-785b-4505-a5a1-35be5246bc78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e5:4a:44:9f:0e:d4:fb:2a:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d88eebee-785b-4505-a5a1-35be5246bc78 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=d1182f3f-b8a9-4c7d-bf65-ad862a2d827b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:7d:30:98:4e:98:8b:1b:59:f8:e2:89:f6: 6a:88:a6:fe:e1:29:c0:0c:2a:df:e8:d2:df:32:af: ff:cd:37:26:53:0a:b3:d4:3c:87:90:ad:f4:6a:bb: 24:6c:6a:83:59:d5:c3:ad:89:a8:0d:6a:a5:a6:c6: 37:23:da:16:cd:62:b1:b2:be:37:56:07:11:0f:2e: 41:db:bf:28:da:90:b4:22:5d:04:bd:db:28:a5:1a: 01:9a:52:21:aa:09:cd:90:1a:48:37:46:ba:77:35: 23:5e:1e:88:58:ea:48:ee:0c:a4:74:fc:ba:84:bc: bb:30:36:82:ad:52:15:a4:2b:f7:e0:66:4d:92:cb: ce:83:37:60:64:a2:71:cf:8e:08:2f:8b:3c:8f:eb: ea:ec:a4:9f:d8:ae:9e:2b:40:5d:03:99:fd:82:c2: 71:ce:46:78:c6:90:ee:7f:dc:f7:19:24:0b:ce:ca: b3:26:5a:6a:78:5e:89:91:27:f6:d3:fe:22:fc:77: 77:85:27:3a:05:21:7e:34:dd:4b:da:ff:69:85:01: 30:8e:f0:87:c0:67:a2:15:1f:54:41:c9:00:f3:5e: ef:ba:3f:39:d1:8a:5e:19:07:28:31:fd:e1:bc:32: 23:d3:c1:0a:5d:d9:a3:f2:d4:c0:e0:c2:99:14:09: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AE:B2:4E:B8:1B:CE:7A:E5:83:95:52:DA:B6:61:BA:D7:1C:16:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/bf5e6c0c-9b3c-3c62-989c-6f4fc5e4f81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/d88eebee-785b-4505-a5a1-35be5246bc78.crl X509v3 Authority Key Identifier: keyid:60:AA:B9:F9:CD:38:6B:0F:00:5F:5F:DB:57:B1:A7:2E:1B:8D:12:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78.cer sbgp-ipAddrBlock: critical IPv6: 2602:fab7:f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:21:53:b5:9a:07:a7:af:44:c5:e9:cc:19:8c:a0:ed:95:8c: fb:42:bc:11:f4:e7:dd:4b:c3:0e:fc:cb:4f:a7:7d:11:ed:7b: b9:4d:28:7b:69:64:9f:7f:5b:99:5c:25:e8:79:91:68:f0:b2: 4c:86:68:22:8b:9f:90:53:09:d1:ac:ff:f7:60:24:fb:ee:49: 36:1c:9d:fe:50:a1:fa:df:68:07:86:af:c8:0d:e6:7e:03:3f: 40:c6:40:fe:92:05:de:c0:34:6d:0e:98:41:c0:c7:aa:c3:5b: a5:4e:91:c8:29:35:e9:f1:7b:e3:8a:81:36:88:52:30:01:8a: 3a:75:58:8f:fd:f9:02:ed:5a:96:79:e6:46:f7:be:8c:49:c3: 3d:f3:bb:d1:65:03:e2:a3:41:5c:51:e8:0a:ee:ff:32:3d:2c: dd:fe:47:fe:08:4b:0d:e4:3c:f4:a5:76:86:ff:94:d0:f0:f2: 6f:60:9d:1f:10:e0:2c:a4:dd:a2:99:93:50:90:41:2b:1b:80: 97:cc:89:d2:ef:70:0d:39:03:87:00:1c:c6:cb:17:8c:3d:14: 23:7b:15:21:40:32:26:2d:70:f3:82:09:c8:c4:7a:c3:1d:c0: 1d:11:d7:f8:e9:1f:f0:04:0e:12:39:d1:26:e6:d3:0c:83:00: 1d:dc:7d:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9uVKRJ8O1Psq7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4ZWViZWUtNzg1Yi00NTA1LWE1YTEtMzViZTUyNDZi Yzc4MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDExODJmM2YtYjhhOS00YzdkLWJmNjUtYWQ4NjJhMmQ4MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0V9MJhOmIsbWfjiifZqiKb+4SnADCrf6NLf Mq//zTcmUwqz1DyHkK30arskbGqDWdXDrYmoDWqlpsY3I9oWzWKxsr43VgcRDy5B 278o2pC0Il0EvdsopRoBmlIhqgnNkBpIN0a6dzUjXh6IWOpI7gykdPy6hLy7MDaC rVIVpCv34GZNksvOgzdgZKJxz44IL4s8j+vq7KSf2K6eK0BdA5n9gsJxzkZ4xpDu f9z3GSQLzsqzJlpqeF6JkSf20/4i/Hd3hSc6BSF+NN1L2v9phQEwjvCHwGeiFR9U QckA817vuj850YpeGQcoMf3hvDIj08EKXdmj8tTA4MKZFAkiqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH2usk64G8565YOVUtq2YbrXHBbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kODhl ZWJlZS03ODViLTQ1MDUtYTVhMS0zNWJlNTI0NmJjNzgvYmY1ZTZjMGMtOWIzYy0z YzYyLTk4OWMtNmY0ZmM1ZTRmODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDg4ZWViZWUtNzg1Yi00NTA1LWE1 YTEtMzViZTUyNDZiYzc4L2Q4OGVlYmVlLTc4NWItNDUwNS1hNWExLTM1YmU1MjQ2 YmM3OC5jcmwwHwYDVR0jBBgwFoAUYKq5+c04aw8AX1/bV7GnLhuNEpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kODhlZWJlZS03ODViLTQ1MDUtYTVhMS0zNWJl NTI0NmJjNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6twDw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMhU7WaB6evRMXpzBmMoO2VjPtCvBH0591Lww78y0+nfRHte7lN KHtpZJ9/W5lcJeh5kWjwskyGaCKLn5BTCdGs//dgJPvuSTYcnf5QofrfaAeGr8gN 5n4DP0DGQP6SBd7ANG0OmEHAx6rDW6VOkcgpNenxe+OKgTaIUjABijp1WI/9+QLt WpZ55kb3voxJwz3zu9FlA+KjQVxR6Aru/zI9LN3+R/4ISw3kPPSldob/lNDw8m9g nR8Q4Cyk3aKZk1CQQSsbgJfMidLvcA05A4cAHMbLF4w9FCN7FSFAMiYtcPOCCcjE esMdwB0R1/jpH/AEDhI50Sbm0wyDAB3cfW0= -----END CERTIFICATE-----Generated at Sat Oct 11 09:24:06 2025 by rpki-client