$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa File: bb9123bb-240f-3b53-a541-2ad27fca5e81.roa (raw, json) Hash identifier: 8gvFHjpXzndbe2C3irxTIMUk/gq4QRFWQl/6O1Dh480= Subject key identifier: 14:49:0F:92:BE:E2:DE:8E:7A:D7:EB:4A:19:CD:48:25:61:04:85:3F Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584B3126F0648E50C62AF2060600 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 397391 IP address blocks: 2604:7580:7f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f0:64:8e:50:c6:2a:f2:06:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=715a9366-2244-4925-94f4-8e8d95b9bfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:7e:17:01:c9:82:86:7f:53:7c:5f:17:20: 42:bb:40:e5:fa:c7:14:ed:eb:28:9d:db:13:8e:58: 01:b6:99:ff:9f:74:9e:d2:1e:44:ef:a9:ec:ef:bb: 26:41:96:68:a3:e3:b2:1c:86:76:e5:f7:e7:02:e6: c0:32:7e:68:74:3f:bd:1c:a6:06:be:d9:4b:45:bf: 15:f3:b0:74:18:ba:b3:ee:6a:fa:06:87:c1:fc:e9: 42:7a:01:d3:14:75:51:ba:60:50:2e:df:59:07:a6: 35:51:ad:b2:09:a6:42:df:81:33:58:d3:18:67:b5: 80:0d:d3:e2:8e:59:c7:b4:ec:06:5a:85:77:9d:24: f7:9d:af:3d:01:c5:61:10:36:5f:ab:f1:dc:93:84: d9:61:5d:d4:2c:f8:9f:75:64:ab:92:b8:cd:45:b7: f4:00:98:70:b4:e1:00:0e:39:cd:2f:8f:a4:d1:dd: 6e:b9:02:26:6f:d8:85:ab:c6:63:44:ee:83:c3:b1: ed:ff:d1:e3:36:dd:a8:ee:af:d5:e3:b1:e8:0f:ba: 31:ba:9c:73:e0:91:c0:5a:be:31:35:ba:30:d7:7e: 35:81:c1:48:fc:84:52:92:72:8b:a0:79:14:49:60: d1:d4:dc:74:89:6c:4a:5a:45:50:f4:09:c7:63:a8: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:49:0F:92:BE:E2:DE:8E:7A:D7:EB:4A:19:CD:48:25:61:04:85:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:7580:7f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:47:4a:7c:ca:ac:a7:c7:25:23:78:0e:68:c6:df:9e:84:8a: ed:7d:bf:7b:7a:ab:fb:d3:ac:b1:6a:9b:73:d2:6a:17:fe:6e: b7:dd:ce:c1:43:bf:40:7f:d3:94:84:22:f0:0d:c0:77:2b:1d: 79:85:17:cc:0c:5f:7c:42:b3:bc:82:1b:87:d3:5a:c2:be:76: b5:58:c3:e7:5c:a9:bb:ad:98:b2:c4:c2:75:1a:51:db:a3:0c: 29:e1:40:9b:70:9f:49:c2:1b:95:24:01:e8:c2:5d:76:c1:ff: 0a:fa:10:91:af:a9:7b:b7:3b:d2:b9:da:a2:f7:2b:97:f9:1e: ff:d1:46:3f:4b:ff:5a:ca:d2:08:c4:34:fa:6f:6b:a4:a1:25: 8b:43:f1:46:79:5d:7f:45:d4:1f:c9:54:4c:de:fa:44:f2:2f: 07:cb:c4:06:89:b4:da:a9:5a:b1:a9:ab:b4:15:6c:38:57:f2: f4:41:af:db:86:77:fe:4d:28:81:5e:cd:2b:bc:45:c2:53:b5: 68:50:b7:34:35:d9:ad:41:07:f8:1a:60:10:27:5a:46:aa:d1: a7:22:ab:36:02:85:6f:f7:a8:c0:4b:bd:15:c8:51:b3:06:da: 82:ee:4a:d2:b3:00:f9:ad:ac:53:5e:26:53:2c:a5:97:11:15: ab:b8:62:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsxJvBkjlDGKvIGBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk NzE1YTkzNjYtMjI0NC00OTI1LTk0ZjQtOGU4ZDk1YjliZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kt+FwHJgoZ/U3xfFyBCu0Dl+scU7esondsT jlgBtpn/n3Se0h5E76ns77smQZZoo+OyHIZ25ffnAubAMn5odD+9HKYGvtlLRb8V 87B0GLqz7mr6BofB/OlCegHTFHVRumBQLt9ZB6Y1Ua2yCaZC34EzWNMYZ7WADdPi jlnHtOwGWoV3nST3na89AcVhEDZfq/Hck4TZYV3ULPifdWSrkrjNRbf0AJhwtOEA DjnNL4+k0d1uuQImb9iFq8ZjRO6Dw7Ht/9HjNt2o7q/V47HoD7oxupxz4JHAWr4x Nbow1341gcFI/IRSknKLoHkUSWDR1Nx0iWxKWkVQ9AnHY6h23QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRJD5K+4t6OetfrShnNSCVhBIU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYmI5MTIzYmItMjQwZi0z YjUzLWE1NDEtMmFkMjdmY2E1ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR1gAB/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1HSnzKrKfHJSN4DmjG356Eiu19v3t6q/vTrLFqm3PSahf+brfd zsFDv0B/05SEIvANwHcrHXmFF8wMX3xCs7yCG4fTWsK+drVYw+dcqbutmLLEwnUa UdujDCnhQJtwn0nCG5UkAejCXXbB/wr6EJGvqXu3O9K52qL3K5f5Hv/RRj9L/1rK 0gjENPpva6ShJYtD8UZ5XX9F1B/JVEze+kTyLwfLxAaJtNqpWrGpq7QVbDhX8vRB r9uGd/5NKIFezSu8RcJTtWhQtzQ12a1BB/gaYBAnWkaq0aciqzYChW/3qMBLvRXI UbMG2oLuStKzAPmtrFNeJlMspZcRFau4Yn4= -----END CERTIFICATE-----Generated at Sat Oct 11 17:39:24 2025 by rpki-client