$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa File: bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa (raw, json) Hash identifier: cdSUV/mMkJtovGRAeKM+OY4Gfcul5m+DVvd190FJr5I= Subject key identifier: FE:E6:B3:60:EA:2F:DE:D3:80:13:0E:52:7D:24:B8:B9:C9:1D:99:C7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004C20DD0281FD8927859B40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:5560::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:20:dd:02:81:fd:89:27:85:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=969409ed-a8cc-432c-a289-cc044e7df2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:46:1f:5c:18:5d:85:f0:91:e2:0a:1d:e8: 76:85:d3:b1:75:0e:91:87:50:66:35:af:1f:e5:47: 89:b7:b7:e9:56:6d:9a:74:02:94:9d:a9:ba:51:58: a2:7d:7e:e8:17:10:d9:00:2c:7e:92:f8:fa:a7:cb: 55:7d:10:ad:63:a7:d6:93:65:9d:18:3e:25:6c:73: f2:5e:8d:26:2f:56:2d:30:5e:1e:38:b1:c7:3b:15: d3:2c:0f:e5:55:6b:50:45:e5:4f:4d:de:d4:fc:47: cd:99:e3:b9:55:c9:e5:76:69:af:a6:cb:36:d9:49: 97:ee:aa:db:1e:7a:ec:4c:e3:6f:28:54:ec:fc:c7: 7b:10:bd:1f:34:d1:f2:f6:3a:73:3f:6e:5b:04:28: 50:aa:27:f1:55:f8:12:66:38:20:d2:a3:e7:ac:5d: 34:20:23:43:07:07:ed:64:1f:5c:92:00:c3:f1:9a: 89:c9:30:d3:9d:b5:49:71:aa:99:5e:2e:4f:c8:d3: d8:66:e8:33:f3:0c:84:e5:af:b6:98:71:6f:24:01: 2c:5c:08:17:42:4c:2e:89:e5:87:d8:bb:65:fd:df: 4e:76:b9:19:bf:17:d6:d1:09:1a:ce:c7:e5:39:1c: 16:d0:35:d3:41:2d:f1:25:fe:94:b8:75:5a:e2:d5: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E6:B3:60:EA:2F:DE:D3:80:13:0E:52:7D:24:B8:B9:C9:1D:99:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5560::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:61:1b:30:df:1c:37:0a:56:4d:de:b3:d8:6a:d8:1f:bc:bf: 1b:0f:5a:de:38:2f:a6:d1:98:f6:36:10:05:b8:11:94:9d:7f: 8a:f9:89:43:ee:da:c7:08:26:84:dc:04:66:c8:6d:4a:c7:d6: e0:4a:19:70:62:a4:64:27:4c:0b:ed:b9:49:fe:a2:bb:3a:3c: 4e:6a:31:c0:7a:7c:1c:7c:c9:87:5c:30:0e:55:3c:a0:c1:d0: e2:5e:ce:f0:d0:05:f3:73:e1:50:e3:9a:82:b1:6c:aa:87:5f: 8a:e3:18:89:80:e6:91:97:64:78:5d:f5:85:02:d4:c3:ac:af: ba:cc:34:b6:34:fa:cb:a4:6e:91:66:be:f5:9f:97:5a:a5:48: f2:a6:aa:9b:df:e7:77:15:b8:94:60:90:12:2a:ef:ca:a4:5c: 80:4e:48:b6:a1:e8:d0:f6:34:94:7f:64:0e:f9:37:96:b5:2e: c3:53:35:be:1b:f2:f5:41:7d:b8:55:c7:bc:06:0b:a1:34:e0: 6c:56:82:7b:35:0a:09:6b:f8:03:ae:37:96:75:6a:11:77:26: fd:2f:4a:82:80:32:17:0b:85:92:0f:4d:ed:df:e8:aa:e7:94: a6:82:13:58:8d:97:d0:fc:a2:e8:59:40:52:ca:97:61:fa:28: b3:72:0c:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATCDdAoH9iSeFm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk OTY5NDA5ZWQtYThjYy00MzJjLWEyODktY2MwNDRlN2RmMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIpGH1wYXYXwkeIKHeh2hdOxdQ6Rh1BmNa8f 5UeJt7fpVm2adAKUnam6UViifX7oFxDZACx+kvj6p8tVfRCtY6fWk2WdGD4lbHPy Xo0mL1YtMF4eOLHHOxXTLA/lVWtQReVPTd7U/EfNmeO5Vcnldmmvpss22UmX7qrb HnrsTONvKFTs/Md7EL0fNNHy9jpzP25bBChQqifxVfgSZjgg0qPnrF00ICNDBwft ZB9ckgDD8ZqJyTDTnbVJcaqZXi5PyNPYZugz8wyE5a+2mHFvJAEsXAgXQkwuieWH 2Ltl/d9OdrkZvxfW0QkazsflORwW0DXTQS3xJf6UuHVa4tVzXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP7ms2DqL97TgBMOUn0kuLnJHZnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmZlN2FhZDYtNDVlZS0z NTdhLWIyYzItYTM1NTM1ZmE2OTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFVg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAthGzDfHDcKVk3es9hq2B+8vxsPWt44L6bRmPY2EAW4EZSdf4r5 iUPu2scIJoTcBGbIbUrH1uBKGXBipGQnTAvtuUn+ors6PE5qMcB6fBx8yYdcMA5V PKDB0OJezvDQBfNz4VDjmoKxbKqHX4rjGImA5pGXZHhd9YUC1MOsr7rMNLY0+suk bpFmvvWfl1qlSPKmqpvf53cVuJRgkBIq78qkXIBOSLah6ND2NJR/ZA75N5a1LsNT Nb4b8vVBfbhVx7wGC6E04GxWgns1Cglr+AOuN5Z1ahF3Jv0vSoKAMhcLhZIPTe3f 6KrnlKaCE1iNl9D8ouhZQFLKl2H6KLNyDNs= -----END CERTIFICATE-----Generated at Fri Sep 5 03:40:41 2025 by rpki-client