$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa File: bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa (raw, json) Hash identifier: JPHYgvQy/3Q8syPtWAHsFszd8oxH5rxCMznh29VrEAg= Subject key identifier: 3C:E9:8B:09:72:5A:01:83:CA:F3:6B:21:8D:71:05:26:A1:B3:32:D0 Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F4328584B3CA6AAA8FDCB4DFBE6A7F480 Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa Signing time: Thu 18 Sep 2025 15:52:01 +0000 ROA not before: Thu 18 Sep 2025 15:52:01 +0000 ROA not after: Wed 17 Dec 2025 16:52:01 +0000 asID: 16509 IP address blocks: 2620:a0:200d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:a6:aa:a8:fd:cb:4d:fb:e6:a7:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Sep 18 15:52:01 2025 GMT Not After : Dec 17 16:52:01 2025 GMT Subject: CN=172a25da-0648-4a77-be63-c891c34e566a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:76:23:f6:8f:01:b3:25:0f:02:14:49:ea: 7e:9e:95:9d:f7:99:43:61:b2:b0:ec:3a:6e:30:21: 29:a6:46:92:9b:9d:89:09:7e:f1:eb:0c:06:ac:ae: 85:b5:bd:6a:80:a6:f8:98:4b:4d:f1:ae:16:43:14: 97:48:66:83:5b:4a:1a:c7:90:56:4f:18:bd:83:d0: 90:68:19:72:ec:20:5c:ea:41:43:fa:05:e5:2e:fc: 1f:b2:19:d1:da:12:d4:be:6b:3b:a2:11:c0:fb:4e: ee:54:32:f6:35:47:1c:c8:6a:93:ea:10:6a:cf:26: 61:24:ca:56:0a:3d:0c:c8:c4:fb:4f:3f:53:72:89: c7:6f:f2:86:84:ba:99:39:79:85:39:40:0b:f7:28: 92:d0:d8:e7:13:ea:1e:a6:8a:dd:18:6c:fd:18:e8: d7:aa:bb:d8:7d:78:91:46:31:9f:8c:ec:14:d0:68: 52:b7:82:43:e9:c0:c4:f1:f0:dc:5c:18:ea:5b:01: c1:01:a9:54:dc:a9:7d:bd:ac:a0:fc:e3:ab:26:2f: e0:dd:a8:3f:7b:33:f6:04:51:8f:79:2f:9d:57:1c: e1:ea:d7:8b:8e:93:7c:a1:96:e8:d2:9a:eb:e5:41: 02:2b:b9:3a:aa:e6:8f:53:c0:3f:6e:c9:80:55:0d: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E9:8B:09:72:5A:01:83:CA:F3:6B:21:8D:71:05:26:A1:B3:32:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv6: 2620:a0:200d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ae:b2:44:92:62:12:df:e1:66:fb:15:e9:51:69:64:78:ce: 61:6a:06:1d:78:c0:63:70:22:63:a2:36:94:0a:e8:7b:20:11: 76:ba:12:a2:26:f1:ef:2e:5c:74:82:50:0d:1e:33:7b:46:8e: a5:ed:8e:7f:e6:a4:02:9c:6b:2a:a0:95:44:48:45:57:0b:3c: a1:b9:aa:53:3d:d4:47:c9:0c:13:50:68:23:53:fb:c4:9b:6b: 98:5e:70:01:42:e1:b0:38:eb:8a:a6:c6:ca:93:fb:82:c7:30: 87:30:39:62:b5:64:76:ec:7e:d3:55:0e:33:59:0e:3b:d5:17: 67:fe:78:db:25:33:d1:fd:e5:23:2b:a0:cc:30:e5:25:e2:b1: 9a:d8:5e:f7:36:14:1e:0b:27:66:63:f2:d2:75:3a:dd:2d:9c: ff:fb:50:c8:ff:1e:8d:7f:3c:e6:3d:9a:85:b0:35:4d:dd:5e: ba:0e:4e:a4:a5:57:38:6a:08:92:7b:70:f0:7d:12:38:2d:20: d9:bb:93:39:8d:73:5f:05:dc:d5:28:4a:a1:f9:8f:22:e4:2b: 97:de:8d:87:61:67:87:28:13:c6:d6:ca:fa:c6:45:b8:ac:5a: a2:b8:e4:c0:74:3d:e3:4f:bd:f3:43:b3:17:d5:ae:82:cc:85: f4:c5:51:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs8pqqo/ctN++an9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI1MDkxODE1NTIwMVoXDTI1MTIxNzE2NTIwMVowLzEtMCsGA1UEAxMk MTcyYTI1ZGEtMDY0OC00YTc3LWJlNjMtYzg5MWMzNGU1NjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdF2I/aPAbMlDwIUSep+npWd95lDYbKw7Dpu MCEppkaSm52JCX7x6wwGrK6Ftb1qgKb4mEtN8a4WQxSXSGaDW0oax5BWTxi9g9CQ aBly7CBc6kFD+gXlLvwfshnR2hLUvms7ohHA+07uVDL2NUccyGqT6hBqzyZhJMpW Cj0MyMT7Tz9TconHb/KGhLqZOXmFOUAL9yiS0NjnE+oepordGGz9GOjXqrvYfXiR RjGfjOwU0GhSt4JD6cDE8fDcXBjqWwHBAalU3Kl9vayg/OOrJi/g3ag/ezP2BFGP eS+dVxzh6teLjpN8oZbo0prr5UECK7k6quaPU8A/bsmAVQ0ORQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzpiwlyWgGDyvNrIY1xBSahszLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvYmY0OWUxMmQtYTJiNi0z ZWU1LTlkMjAtMzU1ZWU4MDVlNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOuskSSYhLf4Wb7FelRaWR4zmFqBh14wGNwImOiNpQK6HsgEXa6 EqIm8e8uXHSCUA0eM3tGjqXtjn/mpAKcayqglURIRVcLPKG5qlM91EfJDBNQaCNT +8Sba5hecAFC4bA464qmxsqT+4LHMIcwOWK1ZHbsftNVDjNZDjvVF2f+eNslM9H9 5SMroMww5SXisZrYXvc2FB4LJ2Zj8tJ1Ot0tnP/7UMj/Ho1/POY9moWwNU3dXroO TqSlVzhqCJJ7cPB9EjgtINm7kzmNc18F3NUoSqH5jyLkK5fejYdhZ4coE8bWyvrG RbisWqK45MB0PeNPvfNDsxfVroLMhfTFUQg= -----END CERTIFICATE-----Generated at Fri Sep 19 08:02:24 2025 by rpki-client