$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa File: bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa (raw, json) Hash identifier: HeNy67QJSgJCqjzHYstqXrO0FF4L/01Y/TA1i2jf7XU= Subject key identifier: 16:29:C4:A3:74:AB:46:2D:26:BB:C7:BB:46:C5:8D:56:B9:65:CC:7A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C37294D2A1AEA0C8AA6DD00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 2600:1008:b1c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:29:4d:2a:1a:ea:0c:8a:a6:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=ddea0878-325d-4034-85e7-e1f4275b8589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:1d:6c:12:5a:04:4e:d4:4d:1b:f0:48:3a: 9f:b5:c6:68:13:53:f6:6e:27:8c:1d:c4:30:0a:70: 9e:19:b9:00:09:c1:c2:21:db:7e:ee:69:13:6f:9d: 62:8d:7e:66:f1:3f:e5:25:22:f2:56:92:5d:48:ee: 94:78:07:fa:48:49:b9:64:b0:db:82:6d:3f:96:5a: 85:c1:64:7b:bf:34:36:aa:29:74:6d:8a:c1:25:ba: 0e:98:50:92:4d:16:66:a3:e7:21:a5:56:4f:ba:87: 9b:ec:87:d7:7f:ac:14:5a:f5:3b:1f:34:ac:5c:47: 9f:bb:80:b5:13:b8:d9:f6:ff:2d:dc:6d:cc:4a:fe: 1f:76:b3:c6:13:da:31:0b:6c:71:6c:34:65:7f:23: ea:22:fe:9f:18:c5:c1:6d:e5:f8:d3:80:45:d1:1c: f9:fe:62:21:bc:30:da:48:56:b8:30:06:fd:ef:9b: ea:fc:de:77:ac:b1:ee:65:15:e0:10:a2:fa:aa:e4: a5:2e:9f:81:62:33:62:10:3b:67:7f:91:91:52:1c: ef:50:18:0b:43:0f:19:da:20:98:1d:dd:86:75:03: ef:f0:31:79:34:66:67:c7:65:f6:ec:8d:92:cd:8f: 69:6f:23:dc:17:1a:30:41:28:11:e1:83:2d:c5:da: 52:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:29:C4:A3:74:AB:46:2D:26:BB:C7:BB:46:C5:8D:56:B9:65:CC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:b1c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c1:3d:8d:89:40:85:74:0a:98:16:bc:2d:7b:ed:f8:80:af: ec:e0:52:8f:75:70:9d:c5:d2:79:65:01:68:d4:c5:c6:a8:67: 19:ec:b4:e5:3f:89:81:c9:3e:1a:65:ee:08:6d:8a:04:57:6a: 50:ab:27:50:4b:11:33:b9:9b:98:48:64:2a:6e:12:35:65:88: d5:32:0b:f3:12:56:fb:f3:d9:60:90:92:e0:f5:96:f7:aa:06: a0:9c:43:74:59:35:5a:41:a1:94:ca:53:a7:ce:14:95:f1:61: 50:41:53:ff:8a:da:2b:fe:53:11:28:fb:7f:e4:d5:20:dd:bc: 7d:ee:c2:37:d3:58:b0:6c:65:6d:7c:76:5f:e9:b6:dc:d0:ca: e6:7c:35:c2:52:0b:b8:32:1f:20:d0:78:61:bd:c8:47:55:5f: 74:85:d3:07:8a:39:e8:ff:52:ca:f6:fc:c1:0d:5c:10:98:58: ec:42:7b:3f:75:7a:9d:f1:df:43:7d:64:27:7c:ee:26:42:a8: 0d:22:1a:8c:71:d0:5e:65:f2:e9:ca:e0:5c:71:d6:38:bb:c3: 86:91:35:49:f9:a7:85:f8:dc:5b:53:6c:6a:84:22:20:59:c3: 0f:69:83:1a:1f:47:c5:74:fb:03:27:7b:5f:bb:af:8d:6b:51: 11:b5:ed:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNylNKhrqDIqm3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGRlYTA4NzgtMzI1ZC00MDM0LTg1ZTctZTFmNDI3NWI4NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa8dbBJaBE7UTRvwSDqftcZoE1P2bieMHcQw CnCeGbkACcHCIdt+7mkTb51ijX5m8T/lJSLyVpJdSO6UeAf6SEm5ZLDbgm0/llqF wWR7vzQ2qil0bYrBJboOmFCSTRZmo+chpVZPuoeb7IfXf6wUWvU7HzSsXEefu4C1 E7jZ9v8t3G3MSv4fdrPGE9oxC2xxbDRlfyPqIv6fGMXBbeX404BF0Rz5/mIhvDDa SFa4MAb975vq/N53rLHuZRXgEKL6quSlLp+BYjNiEDtnf5GRUhzvUBgLQw8Z2iCY Hd2GdQPv8DF5NGZnx2X27I2SzY9pbyPcFxowQSgR4YMtxdpSLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYpxKN0q0YtJrvHu0bFjVa5Zcx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZhOWE1MDktZTVhNC0z NGNmLWFhYWUtNjk2YTg4NTFhNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCLHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHBPY2JQIV0CpgWvC177fiAr+zgUo91cJ3F0nllAWjUxcaoZxns tOU/iYHJPhpl7ghtigRXalCrJ1BLETO5m5hIZCpuEjVliNUyC/MSVvvz2WCQkuD1 lveqBqCcQ3RZNVpBoZTKU6fOFJXxYVBBU/+K2iv+UxEo+3/k1SDdvH3uwjfTWLBs ZW18dl/pttzQyuZ8NcJSC7gyHyDQeGG9yEdVX3SF0weKOej/Usr2/MENXBCYWOxC ez91ep3x30N9ZCd87iZCqA0iGoxx0F5l8unK4Fxx1ji7w4aRNUn5p4X43FtTbGqE IiBZww9pgxofR8V0+wMne1+7r41rURG17fQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:34 2025 by rpki-client