$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa File: afcf11f7-4d27-3593-9511-7b35e311c3cf.roa (raw, json) Hash identifier: 4N6xdZSdiDYZ9qLE0sHZq9JNWiJtwbNgOqKes4Io7Bg= Subject key identifier: 20:BB:23:DF:5B:4C:66:16:03:2F:CB:AF:86:D7:91:F4:F2:71:5A:93 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF7EBDC9670231EE2EA122FA0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 36511 IP address blocks: 2606:2480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:dc:96:70:23:1e:e2:ea:12:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=20312f7c-2a06-4af9-ac1a-6fbcd49697d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:38:41:9a:84:5c:8f:0d:49:8f:00:22:92: d0:be:04:55:3d:26:62:91:06:87:bd:94:76:58:1e: 0f:52:d0:46:e6:c4:f5:52:c0:c9:1e:ec:e8:23:d8: 51:4b:53:b5:0d:b5:92:5c:a2:fd:60:69:a7:6a:27: ed:06:78:b0:1f:3a:d2:ee:2e:bc:b6:55:3c:1f:fe: a0:73:6d:b2:26:0f:73:61:07:c6:1e:51:0f:28:50: e1:da:22:44:e9:5b:2f:d8:b7:09:5f:e2:57:17:c6: 81:8f:a9:d1:d3:08:a5:d6:b6:8f:5f:5b:5a:d0:03: 7c:9d:08:23:4d:90:b7:9f:99:96:2a:bb:d6:d2:76: 03:08:b0:19:02:07:f9:2b:2b:e9:ab:2d:73:94:c4: 49:17:7a:df:2f:73:78:5a:5b:83:de:7d:52:21:b9: 28:f1:ed:ac:cf:b1:b1:f2:da:3a:dc:19:de:d5:fc: ac:31:e3:0c:65:9e:c3:85:a8:aa:7d:9f:e0:5a:b5: 60:e9:5b:99:26:f6:35:c4:f1:54:38:54:2f:9d:72: bf:8d:17:b7:ce:cd:44:9d:e5:22:c4:04:7b:10:67: e4:13:9c:81:c2:15:83:4a:b2:10:5e:f8:24:e8:f3: aa:e7:6f:22:72:f4:ba:c8:3a:bb:95:fa:1f:3c:af: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BB:23:DF:5B:4C:66:16:03:2F:CB:AF:86:D7:91:F4:F2:71:5A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv6: 2606:2480::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b8:f3:30:a3:3d:9e:17:df:36:96:ae:df:50:ea:14:43:bd: 60:e8:7e:7e:51:f8:19:c7:13:78:88:4d:62:c5:2f:e4:cc:4d: 5c:33:4d:13:a9:c1:dd:bc:e5:9f:94:ff:11:fd:8c:9f:4b:8c: 40:42:e3:2f:65:23:f5:ac:61:ec:09:a0:7e:22:1d:9c:d6:50: 59:a4:f3:73:c0:d7:46:c8:9f:9a:fc:0f:5d:48:24:d6:f4:03: 2a:dc:2c:4d:5d:f7:c2:59:4c:9b:2c:eb:3b:9e:cf:96:d9:c4: 36:13:c3:1c:68:7d:c3:cd:b8:c6:93:8f:cc:f4:e6:0d:df:72: 2f:cb:7d:13:b9:73:29:55:6f:a9:0f:e8:22:9d:27:e2:01:f2: 7f:9c:eb:e4:9d:24:e9:f0:8e:0d:28:e2:e6:6c:f5:79:bd:ba: e5:ba:14:25:e5:eb:5f:d3:5d:06:82:cd:5b:42:f9:6e:37:64: 05:10:99:a3:c7:f8:99:a1:61:ff:3c:0a:c4:6c:4c:6e:03:dd: e9:bf:49:38:e3:07:61:9f:56:85:1a:b3:36:e8:40:f1:a6:a3: 51:2d:61:4a:c4:56:e8:95:b9:bd:84:92:1b:d4:67:ca:d9:4d: c2:cb:8c:24:b6:67:f1:39:03:63:49:30:bd:e1:56:56:ba:c7: c3:9d:4f:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr369yWcCMe4uoSL6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MjAzMTJmN2MtMmEwNi00YWY5LWFjMWEtNmZiY2Q0OTY5N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh84QZqEXI8NSY8AIpLQvgRVPSZikQaHvZR2 WB4PUtBG5sT1UsDJHuzoI9hRS1O1DbWSXKL9YGmnaiftBniwHzrS7i68tlU8H/6g c22yJg9zYQfGHlEPKFDh2iJE6Vsv2LcJX+JXF8aBj6nR0wil1raPX1ta0AN8nQgj TZC3n5mWKrvW0nYDCLAZAgf5Kyvpqy1zlMRJF3rfL3N4WluD3n1SIbko8e2sz7Gx 8to63Bne1fysMeMMZZ7DhaiqfZ/gWrVg6VuZJvY1xPFUOFQvnXK/jRe3zs1EneUi xAR7EGfkE5yBwhWDSrIQXvgk6POq528icvS6yDq7lfofPK/H6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCC7I99bTGYWAy/Lr4bXkfTycVqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWZjZjExZjctNGQyNy0z NTkzLTk1MTEtN2IzNWUzMTFjM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYkgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIuPMwoz2eF982lq7fUOoUQ71g6H5+UfgZxxN4iE1ixS/kzE1cM00T qcHdvOWflP8R/YyfS4xAQuMvZSP1rGHsCaB+Ih2c1lBZpPNzwNdGyJ+a/A9dSCTW 9AMq3CxNXffCWUybLOs7ns+W2cQ2E8McaH3DzbjGk4/M9OYN33Ivy30TuXMpVW+p D+ginSfiAfJ/nOvknSTp8I4NKOLmbPV5vbrluhQl5etf010Ggs1bQvluN2QFEJmj x/iZoWH/PArEbExuA93pv0k44wdhn1aFGrM26EDxpqNRLWFKxFbolbm9hJIb1GfK 2U3Cy4wktmfxOQNjSTC94VZWusfDnU8A -----END CERTIFICATE-----Generated at Fri Sep 19 05:05:19 2025 by rpki-client