$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa File: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (raw, json) Hash identifier: 6uSXlbcYc03Q1iqM98Y0EuHA3+TxbxzYKde/35s+qys= Subject key identifier: 96:A2:F1:4D:2D:01:DE:73:85:40:7A:6F:A4:59:BF:1C:BF:09:69:EE Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584ADECBC0AB78E907F0741F0E00 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 40867 IP address blocks: 2605:3240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c0:ab:78:e9:07:f0:74:1f:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=c6fb3d9a-7005-4714-949d-5e48cc76497b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:c4:59:a5:ff:34:0c:51:0c:e8:17:e6:1f: b8:67:5e:ed:00:a1:57:e1:7c:c5:b0:bc:88:c4:94: 37:18:bb:70:a0:da:62:fb:02:97:0c:63:ef:f2:c3: 97:fe:d3:a5:6c:00:69:20:76:aa:68:b3:2c:68:cb: 26:d8:60:c3:7e:ea:21:2d:83:fc:ad:b8:43:18:a5: ef:9e:3d:28:34:9d:24:79:97:d5:85:0d:71:55:e9: 6f:3d:8f:98:28:49:3a:ce:71:b8:71:fd:d6:44:55: 68:9a:24:c8:51:48:b1:fa:7a:fa:75:50:8f:94:76: 35:03:2a:57:8b:78:25:a0:a1:66:a4:24:8e:79:1b: 12:e7:cf:b8:ad:a2:69:22:b3:56:db:0a:00:2e:5e: 8e:8d:ad:b4:a8:6a:3d:8c:d6:f9:1e:6d:6e:b0:cd: 22:2a:5e:f1:d1:13:91:99:3a:0d:14:21:53:b3:03: 70:ea:e7:2c:03:8e:a1:46:bb:18:c3:dd:70:3a:ad: 3c:35:50:0c:3d:24:3a:b0:d6:45:c3:64:ad:27:7d: 20:d6:9f:a6:da:a7:8e:18:a7:24:c3:db:dd:a7:2f: b9:8c:8a:c8:97:0a:d2:8a:3d:86:b3:d4:2a:7c:a5: ac:1d:93:2b:3b:6f:61:4d:77:62:bf:79:ab:40:12: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A2:F1:4D:2D:01:DE:73:85:40:7A:6F:A4:59:BF:1C:BF:09:69:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv6: 2605:3240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7f:d8:0b:76:f1:7c:02:01:6d:d7:5f:57:ec:00:10:c6:72: 88:60:87:ac:51:82:7f:1c:71:b5:4b:aa:90:a7:24:a2:6a:13: 5b:d5:fa:49:c9:13:dd:66:1c:27:74:6e:cd:6e:b6:db:49:17: 58:7f:86:c2:a3:3c:f4:a0:67:aa:2a:3e:45:69:69:79:8b:ce: 9c:42:d4:93:ac:c5:ad:a3:b0:14:36:50:35:bd:b1:b2:d6:37: d6:b9:b2:3a:42:40:1f:45:c6:ad:49:64:7b:07:c6:84:77:8e: 04:49:4a:9e:f7:dd:f5:99:52:aa:42:89:3c:11:22:d1:e2:03: 21:a5:d9:be:8d:e6:5a:c4:ac:5e:2d:e8:e1:5c:50:cd:09:cb: e9:e7:c1:92:9b:bc:cf:99:38:e2:30:3a:8c:a4:02:b8:53:8a: 5d:79:2e:f7:1c:2e:3c:a1:d9:1d:16:2e:11:6b:fe:70:d5:9f: cf:d9:09:ca:aa:d0:30:81:74:65:8a:be:0c:f0:7a:4e:58:9f: 4b:3e:31:ce:2a:b9:bb:8d:d1:2d:72:48:f6:6d:df:4e:df:de: d0:b4:91:f4:ad:23:85:0a:fc:87:66:ae:37:ad:78:27:2a:8c: 57:3b:b6:db:c2:37:8b:8c:e0:be:e7:b2:38:87:53:88:b8:30: 70:29:cb:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErey8CreOkH8HQfDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YzZmYjNkOWEtNzAwNS00NzE0LTk0OWQtNWU0OGNjNzY0OTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva7EWaX/NAxRDOgX5h+4Z17tAKFX4XzFsLyI xJQ3GLtwoNpi+wKXDGPv8sOX/tOlbABpIHaqaLMsaMsm2GDDfuohLYP8rbhDGKXv nj0oNJ0keZfVhQ1xVelvPY+YKEk6znG4cf3WRFVomiTIUUix+nr6dVCPlHY1AypX i3gloKFmpCSOeRsS58+4raJpIrNW2woALl6Oja20qGo9jNb5Hm1usM0iKl7x0ROR mToNFCFTswNw6ucsA46hRrsYw91wOq08NVAMPSQ6sNZFw2StJ30g1p+m2qeOGKck w9vdpy+5jIrIlwrSij2Gs9QqfKWsHZMrO29hTXdiv3mrQBKlXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJai8U0tAd5zhUB6b6RZvxy/CWnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmI3NjBlZmYtNWQ1MC0z NDhmLTgwOWMtMGRjMWExYzI1M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUyQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARf9gLdvF8AgFt119X7AAQxnKIYIesUYJ/HHG1S6qQpySiahNb1fpJ yRPdZhwndG7NbrbbSRdYf4bCozz0oGeqKj5FaWl5i86cQtSTrMWto7AUNlA1vbGy 1jfWubI6QkAfRcatSWR7B8aEd44ESUqe9931mVKqQok8ESLR4gMhpdm+jeZaxKxe LejhXFDNCcvp58GSm7zPmTjiMDqMpAK4U4pdeS73HC48odkdFi4Ra/5w1Z/P2QnK qtAwgXRlir4M8HpOWJ9LPjHOKrm7jdEtckj2bd9O397QtJH0rSOFCvyHZq43rXgn KoxXO7bbwjeLjOC+57I4h1OIuDBwKcs1 -----END CERTIFICATE-----Generated at Thu Aug 21 01:29:57 2025 by rpki-client