$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa File: bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa (raw, json) Hash identifier: p1S8xA+EHit4bBJhoEOPSYozTZZYR6kOCGTY1m1jupo= Subject key identifier: 02:9C:30:F2:6B:37:E8:83:A5:28:58:3A:AC:6F:09:C5:3C:81:A1:E0 Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F4328584B2CF6E86C036902D7A6EFFF80 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 31972 IP address blocks: 2607:8680::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e8:6c:03:69:02:d7:a6:ef:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=fd2b37a5-482e-42c5-a8bd-76a72d8d8546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:2e:89:68:27:ac:90:6b:62:6d:a5:02:68: 80:29:e0:ef:e3:f5:6e:fd:d3:5d:82:38:0f:96:e8: f3:24:d4:2c:2e:25:4d:d9:dd:ca:e6:00:2f:aa:e3: fa:0d:69:78:08:1a:d7:00:78:ba:2d:a4:be:5a:83: 49:55:0e:f6:49:3f:5c:b7:d3:e4:62:c3:2f:bb:63: 33:f9:59:41:1d:74:24:23:3f:bb:d5:6f:26:91:f5: 9d:91:71:04:33:45:4a:5d:e5:72:42:b7:15:9f:cf: 70:eb:23:1d:2b:6c:7b:f9:c9:dc:b9:5c:16:e2:68: da:88:c9:24:84:25:d5:42:21:29:5d:ca:7f:ff:56: 9d:06:5c:75:18:85:de:81:f1:1b:9d:57:ae:1e:04: 15:23:50:37:6f:b4:b0:94:59:e0:94:36:cf:bf:d1: 47:b6:03:2d:4b:25:c7:90:6e:fb:2f:be:5c:a3:78: 39:c7:c4:2e:d6:74:f4:e3:83:b8:fd:62:46:9f:3c: 79:10:96:e7:0f:f0:a1:e7:a3:ba:08:77:9f:05:96: 9d:3f:9f:78:0a:ee:2e:bc:d0:48:e0:49:a5:8a:b1: 9e:72:83:49:10:96:7e:aa:db:43:23:69:27:6d:cf: ed:4f:02:16:e4:39:38:37:1f:22:f7:12:3e:8c:6d: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9C:30:F2:6B:37:E8:83:A5:28:58:3A:AC:6F:09:C5:3C:81:A1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv6: 2607:8680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c8:44:ef:03:ea:a7:82:78:37:e9:c4:8c:91:0f:80:7f:1f: 06:e0:86:d6:25:b0:0c:68:d3:eb:42:9e:c4:62:c5:98:29:c2: 89:d9:49:e0:b5:ff:94:8e:1e:84:20:43:ba:6a:cd:22:0a:64: 2a:9d:81:bc:1d:96:fd:ac:7d:06:3c:43:0b:54:ae:6c:41:cb: c7:23:56:81:b9:08:0a:fa:0a:2b:68:1e:a1:0e:05:f5:9f:5b: 6e:ab:7c:74:67:eb:f9:65:6e:14:06:61:b4:d6:ed:73:61:69: d6:54:63:5f:0a:8a:a2:6c:9c:d0:a4:18:3c:61:f0:17:c1:a9: 02:59:3f:7b:30:b4:f7:dd:62:af:b0:c3:52:be:ce:e8:d8:02: 18:5a:c3:ec:b5:54:30:8c:b7:f5:90:71:04:62:0c:f9:39:ac: c9:f7:ff:78:9e:df:69:aa:17:07:a4:07:d3:9a:29:10:32:8f: 42:de:40:30:69:2a:ff:b2:95:89:f1:65:f2:4f:60:b6:42:c0: d4:1d:8d:1b:8a:7e:ff:f2:81:7b:dc:0d:b6:6a:d3:37:85:92: 6c:60:01:62:4b:84:30:49:27:17:38:44:2a:90:56:0b:76:ac: 8e:1f:4d:2f:e0:c0:03:47:b9:a7:c7:d5:94:4f:ff:60:5a:ba: 3f:cc:64:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEss9uhsA2kC16bv/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmQyYjM3YTUtNDgyZS00MmM1LWE4YmQtNzZhNzJkOGQ4NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOsuiWgnrJBrYm2lAmiAKeDv4/Vu/dNdgjgP lujzJNQsLiVN2d3K5gAvquP6DWl4CBrXAHi6LaS+WoNJVQ72ST9ct9PkYsMvu2Mz +VlBHXQkIz+71W8mkfWdkXEEM0VKXeVyQrcVn89w6yMdK2x7+cncuVwW4mjaiMkk hCXVQiEpXcp//1adBlx1GIXegfEbnVeuHgQVI1A3b7SwlFnglDbPv9FHtgMtSyXH kG77L75co3g5x8Qu1nT044O4/WJGnzx5EJbnD/Ch56O6CHefBZadP594Cu4uvNBI 4EmlirGecoNJEJZ+qttDI2knbc/tTwIW5Dk4Nx8i9xI+jG3v5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAKcMPJrN+iDpShYOqxvCcU8gaHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvYmQ4YmVjNmYtMWE3MC0z Mzc4LTkxYjUtY2IyMWM1NTMzZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeGgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZyETvA+qngng36cSMkQ+Afx8G4IbWJbAMaNPrQp7EYsWYKcKJ2Ung tf+Ujh6EIEO6as0iCmQqnYG8HZb9rH0GPEMLVK5sQcvHI1aBuQgK+goraB6hDgX1 n1tuq3x0Z+v5ZW4UBmG01u1zYWnWVGNfCoqibJzQpBg8YfAXwakCWT97MLT33WKv sMNSvs7o2AIYWsPstVQwjLf1kHEEYgz5OazJ9/94nt9pqhcHpAfTmikQMo9C3kAw aSr/spWJ8WXyT2C2QsDUHY0bin7/8oF73A22atM3hZJsYAFiS4QwSScXOEQqkFYL dqyOH00v4MADR7mnx9WUT/9gWro/zGSV -----END CERTIFICATE-----Generated at Fri Oct 10 21:36:54 2025 by rpki-client