$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa File: bac42415-fae2-3af2-804e-7915f8309a0d.roa (raw, json) Hash identifier: QjBpNylluLapw1Qc4s61ohp+V+DoAQQ/1J3mK4+KORA= Subject key identifier: 2A:E5:CA:56:62:1F:B9:A4:6D:DC:C3:73:E8:A9:AE:A9:6F:AE:8A:4E Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Certificate serial: 010D0C9F4328584AECC1498A87D02DF8D798B780 Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 1207 IP address blocks: 2001:5e8:ffff:3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:49:8a:87:d0:2d:f8:d7:98:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c47af692-0f61-4487-b3f3-235b8f5a7f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:6b:3b:85:e8:52:05:0f:13:8d:4a:ac:04: 5a:5f:cb:7e:2d:78:87:41:36:73:94:94:d2:7e:9b: 5a:ca:44:86:55:f7:b6:c6:4e:5c:1d:88:53:8a:e0: b2:00:d8:54:9b:49:61:9a:33:db:74:37:8f:71:83: 98:26:49:f7:56:6d:c3:47:1b:e9:e7:5c:3a:71:b4: f3:80:c7:89:bf:c7:0b:77:a3:25:e4:9f:4a:61:f7: 82:3d:05:76:be:00:52:d1:b2:49:8e:f0:d0:0c:59: 05:fb:98:f1:45:d4:c4:b6:a2:8c:38:3f:b1:60:a3: b3:5a:68:83:2e:71:e5:14:b5:82:80:fb:55:33:a4: 8f:9a:46:89:1b:81:bb:1c:48:d3:b7:52:ed:59:d3: b3:4f:f1:a0:66:4a:e8:2e:64:77:c0:44:83:85:77: de:99:4d:67:ad:75:28:c9:fe:d9:b5:56:60:58:d9: c0:e6:39:2b:14:01:3f:e7:fd:2c:66:1c:15:f8:d1: 1e:1b:7d:46:c4:b5:e3:50:ca:d0:f5:34:3e:9e:1b: 60:4d:1b:89:cb:f9:35:fb:34:c1:ec:8a:5a:c6:25: c1:83:46:d2:8a:79:a0:12:b0:66:da:62:b2:c5:a7: 3a:e3:0f:62:4e:d3:9d:6b:fb:1f:b5:bd:17:84:23: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E5:CA:56:62:1F:B9:A4:6D:DC:C3:73:E8:A9:AE:A9:6F:AE:8A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl X509v3 Authority Key Identifier: keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer sbgp-ipAddrBlock: critical IPv6: 2001:5e8:ffff:3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6a:c2:80:57:28:4f:65:d5:1a:44:78:b2:e1:53:f1:7e:88: a2:18:d2:08:8f:30:69:bf:90:8d:9c:3e:8c:ab:90:9c:c0:f5: c2:d9:94:56:ec:f0:2e:ae:13:e3:10:f7:b0:86:9c:2c:dd:2e: 39:1c:86:8c:3f:e5:ce:ea:eb:81:87:dd:a0:ee:0d:74:25:b2: e6:34:39:1a:d2:8c:83:dc:6c:fe:cb:48:62:73:10:77:3a:b0: 13:24:e3:95:ae:57:8b:b5:43:f6:2f:31:3e:99:cb:43:1d:66: 4c:cd:43:f1:71:bb:ab:f0:05:fd:e1:19:3a:ff:62:d9:5a:59: 29:e5:0e:0b:e9:dd:55:39:f4:90:51:2f:4a:e3:3a:b9:a4:2f: 77:ca:95:23:6f:09:84:a4:5f:65:b9:26:e5:8d:c0:61:43:42: 4c:53:5b:2f:83:5b:41:44:0f:a2:7d:a5:a8:ed:8b:78:7c:dd: 07:2e:25:7a:e5:b6:d3:60:e5:7e:8f:69:cc:b9:70:1d:01:5c: 62:35:0c:6c:7d:b0:cf:b0:a4:cd:30:fc:6c:22:22:c5:01:f3: 22:f1:b1:42:1a:81:0d:f6:b9:e1:5b:b3:4e:ff:83:60:a8:2e: 33:d9:99:d1:6a:54:0a:19:69:9e:f1:79:fc:8d:15:17:81:ce: 20:31:72:a1 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWErswUmKh9At+NeYt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj YWY1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzQ3YWY2OTItMGY2MS00NDg3LWIzZjMtMjM1YjhmNWE3ZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDJrO4XoUgUPE41KrARaX8t+LXiHQTZzlJTS fptaykSGVfe2xk5cHYhTiuCyANhUm0lhmjPbdDePcYOYJkn3Vm3DRxvp51w6cbTz gMeJv8cLd6Ml5J9KYfeCPQV2vgBS0bJJjvDQDFkF+5jxRdTEtqKMOD+xYKOzWmiD LnHlFLWCgPtVM6SPmkaJG4G7HEjTt1LtWdOzT/GgZkroLmR3wESDhXfemU1nrXUo yf7ZtVZgWNnA5jkrFAE/5/0sZhwV+NEeG31GxLXjUMrQ9TQ+nhtgTRuJy/k1+zTB 7IpaxiXBg0bSinmgErBm2mKyxac64w9iTtOda/sftb0XhCNI5QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCrlylZiH7mkbdzDc+iprqlvropOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvYmFjNDI0MTUtZmFlMi0z YWYyLTgwNGUtNzkxNWY4MzA5YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4 YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh NjE4YmNhZjUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEF6P// AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEATWrCgFcoT2XVGkR4suFT8X6IohjSCI8wab+QjZw+jKuQnMD1 wtmUVuzwLq4T4xD3sIacLN0uORyGjD/lzurrgYfdoO4NdCWy5jQ5GtKMg9xs/stI YnMQdzqwEyTjla5Xi7VD9i8xPpnLQx1mTM1D8XG7q/AF/eEZOv9i2VpZKeUOC+nd VTn0kFEvSuM6uaQvd8qVI28JhKRfZbkm5Y3AYUNCTFNbL4NbQUQPon2lqO2LeHzd By4leuW202Dlfo9pzLlwHQFcYjUMbH2wz7CkzTD8bCIixQHzIvGxQhqBDfa54Vuz Tv+DYKguM9mZ0WpUChlpnvF5/I0VF4HOIDFyoQ== -----END CERTIFICATE-----Generated at Mon Oct 27 23:09:08 2025 by rpki-client