$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa File: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (raw, json) Hash identifier: 6oN149rfqmVJyg5l71NHm4E+JVKL8GqOka5GEbk+oMg= Subject key identifier: DD:80:06:FF:70:2F:75:F4:D1:4D:1D:31:3B:B9:34:13:C3:E0:37:61 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584B583C826C193282CC3F207600 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 400679 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:82:6c:19:32:82:cc:3f:20:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=77c4170b-1cab-4c4a-b9ed-b113950233b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:f9:e1:e7:90:14:d3:98:61:1d:cd:e1:b0: ac:2a:92:d1:a2:64:7a:b0:14:ec:a0:7f:81:da:49: 95:ea:60:a9:c4:b4:88:50:f0:0e:b2:30:2b:7f:df: 78:cc:d0:7b:43:07:a0:fa:a8:e7:2e:5b:11:cc:f7: ff:fa:e5:30:8e:c3:44:9b:7c:bc:88:e6:21:fd:91: 10:9e:72:7a:14:b7:37:63:18:9e:2b:0b:f8:34:f7: 1c:7c:59:a7:4c:8b:c5:ef:59:94:6e:b1:0f:84:40: 9f:34:66:9b:d9:c1:6f:84:dd:13:23:10:52:ca:24: bc:4d:a9:75:2e:0b:1f:ac:4c:aa:90:47:2a:86:bc: 0a:7d:d4:a7:22:80:d1:ef:fe:30:d2:03:0b:bc:ac: 39:92:c8:50:b4:23:a5:21:bd:3f:6d:10:17:6e:1f: 43:ee:df:e2:c0:eb:1f:c3:b0:b9:88:37:ca:65:a0: db:34:18:b4:8c:b1:62:f1:96:1e:db:97:59:3f:44: 3f:9a:b7:19:82:db:d2:b4:ad:d9:a7:1d:54:9e:06: 9f:73:5a:2d:3e:47:81:56:bf:13:2e:91:ae:ee:55: b8:dd:b9:bc:de:fa:de:50:9b:fa:8d:8d:08:30:d0: bc:87:57:d2:c4:6d:ab:df:82:fa:01:c9:82:d7:93: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:80:06:FF:70:2F:75:F4:D1:4D:1D:31:3B:B9:34:13:C3:E0:37:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:18:5a:a5:a2:87:4d:56:f4:cb:ef:3b:bd:7f:88:58:5c:ee: fb:fe:f7:25:b7:36:32:24:86:3b:2b:84:c3:6a:21:52:2a:56: e8:48:f5:9e:f1:75:f3:53:c2:a3:da:f2:f2:6e:ee:c5:55:8a: 63:94:64:c9:b3:3e:e4:d1:38:6d:88:60:cc:30:22:fe:3b:a7: 8a:3b:71:26:19:94:c0:d4:59:ca:e9:21:c6:2c:ee:0d:f3:0f: 88:2b:01:2b:73:b4:e9:3e:41:7c:77:b9:6c:bc:7e:d2:fc:fd: 07:24:6f:aa:ae:27:82:f3:c3:e8:a3:55:1e:61:1e:e7:22:df: f4:36:f1:d5:6d:56:20:44:68:62:b5:1c:c6:ac:89:a1:8e:e7: bb:3d:cd:9c:60:f6:05:e7:be:72:33:89:c4:6c:cc:ab:72:03: 84:80:b6:01:cc:51:74:01:74:40:b1:19:4c:22:c2:30:63:06: 68:31:0f:dd:7e:1a:8d:ef:10:3f:74:38:88:8c:93:eb:c0:5e: 00:1c:f9:13:3b:a9:ba:e2:f9:9c:79:e8:90:a1:23:cd:35:33: d7:0f:79:65:40:81:39:a3:c0:c0:e1:e7:3d:9c:6c:4d:8e:05: b3:6b:7a:38:ff:0d:98:49:51:a8:fa:c4:41:19:70:a2:6e:76: 21:78:41:8d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtYPIJsGTKCzD8gdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NzdjNDE3MGItMWNhYi00YzRhLWI5ZWQtYjExMzk1MDIzM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhr54eeQFNOYYR3N4bCsKpLRomR6sBTsoH+B 2kmV6mCpxLSIUPAOsjArf994zNB7Qweg+qjnLlsRzPf/+uUwjsNEm3y8iOYh/ZEQ nnJ6FLc3YxieKwv4NPccfFmnTIvF71mUbrEPhECfNGab2cFvhN0TIxBSyiS8Tal1 LgsfrEyqkEcqhrwKfdSnIoDR7/4w0gMLvKw5kshQtCOlIb0/bRAXbh9D7t/iwOsf w7C5iDfKZaDbNBi0jLFi8ZYe25dZP0Q/mrcZgtvStK3Zpx1Ungafc1otPkeBVr8T LpGu7lW43bm83vreUJv6jY0IMNC8h1fSxG2r34L6AcmC15PZuwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFN2ABv9wL3X00U0dMTu5NBPD4DdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmYxZWEwZDAtYzZjMy0z YmRmLWEyMGMtYThhOTM5NTUxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPGFqloodNVvTL7zu9f4hYXO77/vcltzYy JIY7K4TDaiFSKlboSPWe8XXzU8Kj2vLybu7FVYpjlGTJsz7k0ThtiGDMMCL+O6eK O3EmGZTA1FnK6SHGLO4N8w+IKwErc7TpPkF8d7lsvH7S/P0HJG+qrieC88Poo1Ue YR7nIt/0NvHVbVYgRGhitRzGrImhjue7Pc2cYPYF575yM4nEbMyrcgOEgLYBzFF0 AXRAsRlMIsIwYwZoMQ/dfhqN7xA/dDiIjJPrwF4AHPkTO6m64vmceeiQoSPNNTPX D3llQIE5o8DA4ec9nGxNjgWza3o4/w2YSVGo+sRBGXCibnYheEGN -----END CERTIFICATE-----Generated at Sat Oct 11 11:32:23 2025 by rpki-client