$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/bd793d5f-13cf-3c59-9d69-1314a34e86d2.roa File: bd793d5f-13cf-3c59-9d69-1314a34e86d2.roa (raw, json) Hash identifier: S+OM7s0hlL5OAmqNvYLsUn9Le+Yp+aaicnFE8zDf3Hk= Subject key identifier: C1:DB:1F:D3:BF:B5:C7:1A:99:21:59:B4:13:43:67:A3:96:EE:26:BD Certificate issuer: /CN=1bc07705-3b80-4dc4-8b09-9e4fb2f314a3 Certificate serial: 010D0C9F4328584B2A5DBE5F82BDEE6BD06B0440 Authority key identifier: E1:B6:70:2B:1F:C6:BA:36:94:7C:87:DA:65:6A:FD:C4:89:77:10:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/bd793d5f-13cf-3c59-9d69-1314a34e86d2.roa Signing time: Fri 12 Sep 2025 02:40:32 +0000 ROA not before: Fri 12 Sep 2025 02:40:32 +0000 ROA not after: Thu 11 Dec 2025 03:40:32 +0000 asID: 401970 IP address blocks: 2602:f569::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:5d:be:5f:82:bd:ee:6b:d0:6b:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bc07705-3b80-4dc4-8b09-9e4fb2f314a3 Validity Not Before: Sep 12 02:40:32 2025 GMT Not After : Dec 11 03:40:32 2025 GMT Subject: CN=f0bfd95f-e588-4e20-93dd-a16a29d02bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:e6:41:54:74:27:bd:8b:0a:8e:77:7c:5d: 68:0a:9b:1d:62:85:da:ee:0e:da:81:0f:11:cf:12: ad:9a:1b:a6:bc:cf:17:a4:93:d5:9d:c3:fe:3b:d7: 88:4e:bb:f6:6e:a0:25:3f:96:f6:85:36:69:f4:ed: 5b:17:4a:c3:69:8f:66:aa:cf:fe:4f:1e:47:ee:97: 23:93:ad:40:2d:2d:37:11:91:55:84:d1:a4:5b:42: be:bc:89:69:70:23:5b:bb:94:af:dd:25:29:5f:3a: 8c:5b:e8:00:b1:c1:48:e4:db:8c:99:8f:e1:46:bf: bd:44:3a:b1:1a:ca:da:f7:86:d3:a0:dc:0c:6a:20: ec:f9:44:e0:34:a5:36:dd:0f:18:8b:22:de:f5:8a: 5a:54:ea:ad:8d:c1:28:7b:3d:e9:bf:08:e7:50:0b: cf:25:ac:1c:b6:de:b3:95:2b:df:85:cd:65:82:70: d6:5c:2c:53:03:65:cc:6a:b5:0a:e4:6a:e8:13:37: 4c:a6:d4:f6:ba:91:ad:2c:a6:18:5f:8c:8b:cb:d2: 5c:5e:30:f3:ad:6d:7e:c7:6e:e1:5e:f0:b6:cc:22: 25:10:e0:0f:0c:37:a8:8a:40:6d:1c:4b:b2:30:bf: 21:6d:2e:92:67:38:c2:cc:59:f6:d5:40:86:9a:61: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DB:1F:D3:BF:B5:C7:1A:99:21:59:B4:13:43:67:A3:96:EE:26:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/bd793d5f-13cf-3c59-9d69-1314a34e86d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.crl X509v3 Authority Key Identifier: keyid:E1:B6:70:2B:1F:C6:BA:36:94:7C:87:DA:65:6A:FD:C4:89:77:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f569::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:fc:4e:13:19:5b:1e:0e:3d:17:2c:c4:2a:fb:47:70:2e:10: 68:8a:a2:62:bd:20:47:b8:a3:f2:e2:6a:02:d4:ee:e9:48:cb: a4:9e:7b:d2:67:76:a9:88:73:aa:28:c5:f8:ff:07:84:d5:c8: ad:4c:f9:69:de:fe:f8:b6:34:b6:c2:2f:83:62:10:26:11:4a: 51:50:ed:fa:d8:c6:6e:32:0c:34:fe:0b:bb:0e:b1:81:92:99: b1:7a:cf:d8:62:05:11:be:69:0c:de:9d:9a:5c:a9:dd:b8:2f: 3e:80:35:c8:82:ba:6d:fd:f9:08:ef:a8:83:8c:ce:df:96:09: a4:a7:39:9a:50:36:8e:28:1b:8e:fd:fe:e4:ca:2f:f6:cf:57: 26:0b:f5:f0:45:ec:73:05:23:3e:13:fb:41:42:4f:97:b3:51: 91:f8:9f:61:67:73:48:5d:8d:51:eb:2f:7d:75:3c:fb:05:1b: 47:25:4d:6b:ea:cf:53:1b:4e:40:3c:f4:c3:c9:07:bc:2f:2a: 12:9e:1e:bb:be:e9:5e:2e:6f:00:55:1d:4d:bc:35:67:b7:57: 18:50:7b:23:31:43:71:7d:7e:cb:16:a9:cb:94:6a:1b:19:2c: 8f:f5:1e:47:8c:71:76:3e:fe:1d:f9:ac:3c:f0:97:cd:64:c0: 75:fb:15:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsqXb5fgr3ua9BrBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJjMDc3MDUtM2I4MC00ZGM0LThiMDktOWU0ZmIyZjMx NGEzMB4XDTI1MDkxMjAyNDAzMloXDTI1MTIxMTAzNDAzMlowLzEtMCsGA1UEAxMk ZjBiZmQ5NWYtZTU4OC00ZTIwLTkzZGQtYTE2YTI5ZDAyYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLvmQVR0J72LCo53fF1oCpsdYoXa7g7agQ8R zxKtmhumvM8XpJPVncP+O9eITrv2bqAlP5b2hTZp9O1bF0rDaY9mqs/+Tx5H7pcj k61ALS03EZFVhNGkW0K+vIlpcCNbu5Sv3SUpXzqMW+gAscFI5NuMmY/hRr+9RDqx Gsra94bToNwMaiDs+UTgNKU23Q8YiyLe9YpaVOqtjcEoez3pvwjnUAvPJawctt6z lSvfhc1lgnDWXCxTA2XMarUK5GroEzdMptT2upGtLKYYX4yLy9JcXjDzrW1+x27h XvC2zCIlEOAPDDeoikBtHEuyML8hbS6SZzjCzFn21UCGmmHG3QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMHbH9O/tccamSFZtBNDZ6OW7ia9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYmMw NzcwNS0zYjgwLTRkYzQtOGIwOS05ZTRmYjJmMzE0YTMvYmQ3OTNkNWYtMTNjZi0z YzU5LTlkNjktMTMxNGEzNGU4NmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWJjMDc3MDUtM2I4MC00ZGM0LThi MDktOWU0ZmIyZjMxNGEzLzFiYzA3NzA1LTNiODAtNGRjNC04YjA5LTllNGZiMmYz MTRhMy5jcmwwHwYDVR0jBBgwFoAU4bZwKx/GujaUfIfaZWr9xIl3EF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYmMwNzcwNS0zYjgwLTRkYzQtOGIwOS05ZTRm YjJmMzE0YTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1aQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW/xOExlbHg49FyzEKvtHcC4QaIqiYr0gR7ij8uJqAtTu6UjLpJ57 0md2qYhzqijF+P8HhNXIrUz5ad7++LY0tsIvg2IQJhFKUVDt+tjGbjIMNP4Luw6x gZKZsXrP2GIFEb5pDN6dmlyp3bgvPoA1yIK6bf35CO+og4zO35YJpKc5mlA2jigb jv3+5Mov9s9XJgv18EXscwUjPhP7QUJPl7NRkfifYWdzSF2NUesvfXU8+wUbRyVN a+rPUxtOQDz0w8kHvC8qEp4eu77pXi5vAFUdTbw1Z7dXGFB7IzFDcX1+yxapy5Rq Gxksj/UeR4xxdj7+HfmsPPCXzWTAdfsVoA== -----END CERTIFICATE-----Generated at Wed Oct 8 20:57:24 2025 by rpki-client