$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfb9e97f-ba55-3e9b-9da5-1e681f48f4d4.roa File: bfb9e97f-ba55-3e9b-9da5-1e681f48f4d4.roa (raw, json) Hash identifier: iGqiJdHMi5s83nlFfBkxj5INk1JIwscrerVIAkxqKAw= Subject key identifier: 11:A2:09:DE:5F:65:D2:63:55:54:05:0F:3B:5C:9C:D1:6F:D0:C3:1F Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004C09C9C441196D480E7D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfb9e97f-ba55-3e9b-9da5-1e681f48f4d4.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:5000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:09:c9:c4:41:19:6d:48:0e:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=fae74ed7-36b0-4a10-ba1a-2d5574741a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:98:7c:4f:80:47:ef:9e:35:52:b3:98:45:2a: b5:d5:74:d2:b4:a3:f9:e6:18:af:bc:10:f3:eb:6d: 5f:73:41:a6:75:c6:0d:f7:be:d1:58:a9:6d:56:69: 4e:1d:26:70:88:ab:da:21:03:49:dc:7c:e8:1e:ae: fa:60:ff:80:d9:30:c8:48:7c:e5:f6:47:cd:d2:8b: 2c:81:25:c5:59:e1:15:89:86:0a:b2:ed:d6:14:84: b8:1b:64:cb:d5:40:53:4b:b8:9b:d7:db:45:61:e7: 08:4a:36:8f:e0:03:89:e2:be:6f:83:14:91:aa:25: 37:be:07:f1:04:c1:20:cb:3f:aa:7a:c9:43:53:77: 07:05:a6:0c:78:3f:be:5d:18:16:5e:dc:34:e1:ce: 43:34:fc:82:ac:cf:80:3a:aa:d4:33:4a:d8:c8:fd: 03:4a:85:ca:ba:3a:b2:a1:a4:bd:c6:e6:57:3d:a3: 95:19:c5:d4:cd:9c:52:ef:9e:c2:78:00:c6:52:f2: f8:32:db:84:7e:c1:1d:6a:45:4e:fe:12:3d:f3:bb: 87:23:b0:73:47:5b:a3:96:63:a4:5d:f5:45:ce:cd: cd:2c:f0:cf:df:52:2c:0e:bb:79:b1:69:1d:2c:e8: 2c:9a:20:fc:94:e0:ee:45:c6:d0:72:1c:e8:99:28: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A2:09:DE:5F:65:D2:63:55:54:05:0F:3B:5C:9C:D1:6F:D0:C3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfb9e97f-ba55-3e9b-9da5-1e681f48f4d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:96:0c:4d:98:58:01:43:14:f9:49:10:dc:27:f9:d6:db:5c: b1:df:71:fd:e7:57:fb:c7:df:72:0a:38:74:b8:18:8a:0d:82: 89:45:f2:54:d6:5c:ce:a8:7c:fe:70:68:81:3b:5b:13:76:22: 5a:b7:5d:0c:bd:05:e0:90:dd:ff:9e:e1:c3:4b:1c:c6:7d:c7: ce:2c:56:0f:c5:d6:7f:8f:98:77:21:f6:3f:75:db:0f:77:3a: 0f:33:9c:ad:0c:c8:7e:60:5c:56:70:e0:d5:80:60:95:c9:0b: c8:f4:18:77:4c:42:3d:92:f9:55:ba:ec:da:1d:22:04:95:ba: f3:68:a7:dc:d9:1c:44:76:a1:0d:46:38:56:dd:75:43:c6:56: 38:5f:85:b0:22:4e:8c:5b:ae:53:18:8d:dd:87:d8:df:90:24: 64:05:a7:59:bd:b2:de:28:03:e8:e3:fd:4a:86:e4:9f:17:7e: 02:b2:63:ac:8e:da:9a:ef:19:a4:a1:68:a1:73:a8:18:42:c0: ba:f3:d8:70:2d:f6:88:fa:88:04:30:9d:40:35:ad:9d:ca:ec: 61:6f:21:f5:4b:48:45:cc:c7:ce:9a:b9:8c:b9:d2:56:0b:e6: b8:d9:f3:18:ab:5b:ce:b8:ce:a9:03:2f:51:cb:5a:5c:97:8b: cb:a5:91:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATAnJxEEZbUgOfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmFlNzRlZDctMzZiMC00YTEwLWJhMWEtMmQ1NTc0NzQxYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5h8T4BH7541UrOYRSq11XTStKP55hivvBDz 621fc0GmdcYN977RWKltVmlOHSZwiKvaIQNJ3HzoHq76YP+A2TDISHzl9kfN0oss gSXFWeEViYYKsu3WFIS4G2TL1UBTS7ib19tFYecISjaP4AOJ4r5vgxSRqiU3vgfx BMEgyz+qeslDU3cHBaYMeD++XRgWXtw04c5DNPyCrM+AOqrUM0rYyP0DSoXKujqy oaS9xuZXPaOVGcXUzZxS757CeADGUvL4MtuEfsEdakVO/hI987uHI7BzR1ujlmOk XfVFzs3NLPDP31IsDrt5sWkdLOgsmiD8lODuRcbQchzomSjM8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBGiCd5fZdJjVVQFDztcnNFv0MMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmZiOWU5N2YtYmE1NS0z ZTliLTlkYTUtMWU2ODFmNDhmNGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqWDE2YWAFDFPlJENwn+dbbXLHfcf3nV/vH33IKOHS4GIoNgolF 8lTWXM6ofP5waIE7WxN2Ilq3XQy9BeCQ3f+e4cNLHMZ9x84sVg/F1n+PmHch9j91 2w93Og8znK0MyH5gXFZw4NWAYJXJC8j0GHdMQj2S+VW67NodIgSVuvNop9zZHER2 oQ1GOFbddUPGVjhfhbAiToxbrlMYjd2H2N+QJGQFp1m9st4oA+jj/UqG5J8XfgKy Y6yO2prvGaShaKFzqBhCwLrz2HAt9oj6iAQwnUA1rZ3K7GFvIfVLSEXMx86auYy5 0lYL5rjZ8xirW864zqkDL1HLWlyXi8ulkWk= -----END CERTIFICATE-----Generated at Fri Sep 5 03:38:38 2025 by rpki-client