$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/bfde4168-8138-3487-825a-8a7cb30ef530.roa File: bfde4168-8138-3487-825a-8a7cb30ef530.roa (raw, json) Hash identifier: dUei/kzt0HJ8/RowG6dXcOyvhkTUOuEqvtozkvygusE= Subject key identifier: 2E:94:04:92:55:39:3A:CF:86:3D:77:66:19:2F:A9:72:EC:65:39:32 Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Certificate serial: 010D0C9F4328584AFEE6CDB6BF17A66467F74940 Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/bfde4168-8138-3487-825a-8a7cb30ef530.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 62661 IP address blocks: 2602:2d4:1e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:cd:b6:bf:17:a6:64:67:f7:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=2732f9ea-c3e2-4981-bf94-d677f682c84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:30:b3:79:b5:a6:89:ec:3e:d8:f4:cb:ca: e1:9d:aa:1e:dc:59:c7:d9:2e:67:05:96:29:ef:7d: 21:2d:06:01:63:f6:70:08:54:26:49:fb:57:3c:4d: e6:85:32:6c:67:f0:84:d8:0c:7b:c3:dc:60:ca:1e: 9a:91:c8:8d:23:de:de:9a:1f:3a:1d:9f:4f:2b:63: 9f:3a:7f:b5:18:f6:8f:72:a1:b7:d7:54:9f:28:84: 52:53:5c:57:98:2c:93:4d:27:d4:52:d1:a9:bb:0b: de:c9:5c:b5:d8:2d:8f:3f:7f:1e:94:9f:a1:03:e1: 8e:d1:ea:bf:b5:3c:1e:8d:11:56:68:1d:73:4d:a9: 1d:e1:f8:93:f2:97:0a:99:ed:ef:fd:90:95:5f:e5: 80:c6:7c:4e:4d:a6:51:ad:b2:cc:2b:89:88:d9:ca: b3:e8:96:27:4f:09:7c:bb:cd:52:a6:41:cd:e4:ce: 61:9c:48:0e:ce:6c:68:6e:7f:92:ab:85:21:29:e4: 64:75:63:48:ef:dc:0e:67:d3:89:bb:76:02:f1:a7: ef:bd:db:2a:65:a8:f4:9c:8b:a9:8b:9b:fc:ba:7d: 3d:c4:ab:97:96:b1:72:44:4e:f4:f8:e3:20:d2:b5: 63:f8:83:27:c6:23:40:52:6e:3a:73:80:b7:3f:49: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:94:04:92:55:39:3A:CF:86:3D:77:66:19:2F:A9:72:EC:65:39:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/bfde4168-8138-3487-825a-8a7cb30ef530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl X509v3 Authority Key Identifier: keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer sbgp-ipAddrBlock: critical IPv6: 2602:2d4:1e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a6:25:d4:ef:f7:53:4e:db:72:74:0e:77:b1:57:ec:44:ec: f7:57:c7:48:1b:94:e1:62:5b:4a:e2:5b:eb:0f:63:fa:71:0e: 2b:9d:37:8e:fd:5d:73:5d:fa:2f:e5:ee:a6:ca:79:60:61:af: ad:8f:98:7e:83:c1:78:38:00:22:b0:17:b0:02:16:22:c3:11: 76:34:a8:1e:20:9b:5b:a3:c5:24:2a:24:da:90:cc:73:89:73: 2c:b4:0b:67:d3:e4:97:8c:b9:01:f9:b9:1a:56:21:4b:35:77: 92:5e:db:5b:64:73:60:63:78:c5:4c:a8:b7:f4:aa:f1:42:a8: 3c:4f:36:e2:b7:90:dd:3d:44:a3:d0:13:81:51:5c:21:5c:8a: 22:ec:c9:0e:ec:34:14:dd:6d:4c:67:c2:6b:f9:de:3a:85:09: 04:fe:88:93:d6:0c:a8:97:c0:00:19:9c:30:7b:53:07:b9:e2: e6:26:fa:38:bc:bf:9a:f3:f8:fc:78:b3:95:a9:c6:f5:01:5d: 68:70:7e:21:a0:2b:e1:a5:d3:6d:1b:d6:b1:19:97:ec:48:4f: a2:49:b2:85:da:06:4f:2d:78:18:00:c5:79:fb:a4:43:ca:f2: 8d:16:e7:5b:ca:08:94:d0:f3:99:4e:a8:c4:66:79:ed:2b:1a: 84:dc:5f:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr+5s22vxemZGf3SUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5 NzA3MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MjczMmY5ZWEtYzNlMi00OTgxLWJmOTQtZDY3N2Y2ODJjODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Qws3m1ponsPtj0y8rhnaoe3FnH2S5nBZYp 730hLQYBY/ZwCFQmSftXPE3mhTJsZ/CE2Ax7w9xgyh6akciNI97emh86HZ9PK2Of On+1GPaPcqG311SfKIRSU1xXmCyTTSfUUtGpuwveyVy12C2PP38elJ+hA+GO0eq/ tTwejRFWaB1zTakd4fiT8pcKme3v/ZCVX+WAxnxOTaZRrbLMK4mI2cqz6JYnTwl8 u81SpkHN5M5hnEgOzmxobn+Sq4UhKeRkdWNI79wOZ9OJu3YC8afvvdsqZaj0nIup i5v8un09xKuXlrFyRE70+OMg0rVj+IMnxiNAUm46c4C3P0n6mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC6UBJJVOTrPhj13ZhkvqXLsZTkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvYmZkZTQxNjgtODEzOC0z NDg3LTgyNWEtOGE3Y2IzMGVmNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji ZWFjYjk3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIC1AHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSmJdTv91NO23J0DnexV+xE7PdXx0gblOFiW0riW+sPY/pxDiud N479XXNd+i/l7qbKeWBhr62PmH6DwXg4ACKwF7ACFiLDEXY0qB4gm1ujxSQqJNqQ zHOJcyy0C2fT5JeMuQH5uRpWIUs1d5Je21tkc2BjeMVMqLf0qvFCqDxPNuK3kN09 RKPQE4FRXCFciiLsyQ7sNBTdbUxnwmv53jqFCQT+iJPWDKiXwAAZnDB7Uwe54uYm +ji8v5rz+Px4s5WpxvUBXWhwfiGgK+Gl020b1rEZl+xIT6JJsoXaBk8teBgAxXn7 pEPK8o0W51vKCJTQ85lOqMRmee0rGoTcX8U= -----END CERTIFICATE-----Generated at Tue Nov 4 14:50:29 2025 by rpki-client