$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa File: 2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa (raw, json) Hash identifier: t9AAh0bilrOwcy+AyiFUVUUPTS7kgZUddvSTaj1ADKE= Subject key identifier: C5:26:A9:CB:07:CD:35:0E:B2:C0:28:45:57:5A:F5:0F:2F:38:FA:33 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B0746B620754EA7CF7544E780 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 20253 IP address blocks: 2606:bc40:f0b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b6:20:75:4e:a7:cf:75:44:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=c2817f02-4b27-46a0-9754-c13e379690c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:d0:33:df:65:68:43:c8:50:67:a1:d2:15: db:58:49:45:6a:d9:b3:cb:bf:0b:ee:58:d6:05:73: 87:d1:03:3e:38:b4:49:86:e8:c8:8e:4a:be:b5:3c: 59:a0:e9:0f:f8:83:d1:40:f7:b5:84:83:4b:11:95: b8:78:80:f2:d5:ef:db:a1:b6:a8:bf:ec:f0:48:ea: bf:96:19:36:34:84:5c:c7:67:d2:1c:ec:6a:bb:79: 7a:45:65:73:e0:47:63:b0:f7:34:ee:a1:ce:c2:c3: a1:d3:41:e9:a2:04:f1:46:1e:f6:48:95:d6:1b:26: dd:94:29:28:e8:d1:08:b8:16:bd:20:2d:8a:ec:4a: 57:47:ae:b6:1f:0c:9e:33:af:8d:48:c1:7e:6b:da: 97:08:7d:71:df:68:2e:dd:71:60:f3:81:d4:68:bf: f6:59:2d:05:30:0e:63:51:db:75:d4:27:a7:84:9d: 10:ae:7d:da:e3:df:97:e1:bb:d7:5c:dd:a9:68:25: 74:a9:3c:46:b9:5b:76:5b:51:69:25:4e:d0:61:c2: c4:81:3c:6d:49:b8:91:4d:96:0c:c9:28:43:11:87: c0:25:4d:bb:90:a2:59:fb:44:d6:24:35:01:6f:f9: 4e:9e:ec:a7:18:88:ac:25:35:fe:67:39:80:a8:f6: 20:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:26:A9:CB:07:CD:35:0E:B2:C0:28:45:57:5A:F5:0F:2F:38:FA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f0b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e4:ab:9c:47:c7:a5:2b:e1:c5:c2:9e:28:6b:49:5f:00:19: db:c7:6b:8b:60:35:a2:36:1c:41:b9:b5:6d:bd:70:4c:40:7c: 0e:2d:0b:40:2d:08:6c:75:a5:3e:b1:c4:29:97:16:e1:ea:ac: bd:59:ce:4c:4f:a6:29:35:2a:f1:64:59:0f:a8:6f:52:c7:41: bb:a4:35:b0:f2:bb:39:7d:11:c0:b7:4e:af:52:74:09:da:7b: da:a4:7f:bf:82:bb:23:ff:1e:bc:91:7c:13:8e:b4:d0:6f:10: cd:2d:c2:17:48:78:5f:56:3e:f0:0f:e5:66:e5:ee:3c:61:dd: 25:ef:2d:2c:0e:2b:d9:37:51:54:26:f8:d7:eb:03:5a:04:36: af:ee:bd:01:e9:7a:6d:ff:ec:00:44:ac:98:55:80:1d:fc:8f: c4:b1:38:a6:96:2f:1d:a9:1f:d3:ec:55:89:11:9b:65:fc:2c: b4:b5:18:5a:e4:a3:4d:65:df:f1:52:27:cb:83:4a:3f:0b:54: e2:78:3b:55:66:79:a0:f3:a4:d0:f7:22:55:06:78:08:6d:38: 1b:a2:c4:df:37:40:3e:0f:de:bb:3b:04:4d:36:0d:c3:8b:b5: de:46:24:bf:95:6b:d9:a1:be:d3:41:fd:d6:1a:79:5c:81:15: 87:82:8c:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsHRrYgdU6nz3VE54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YzI4MTdmMDItNGIyNy00NmEwLTk3NTQtYzEzZTM3OTY5MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEjQM99laEPIUGeh0hXbWElFatmzy78L7ljW BXOH0QM+OLRJhujIjkq+tTxZoOkP+IPRQPe1hINLEZW4eIDy1e/bobaov+zwSOq/ lhk2NIRcx2fSHOxqu3l6RWVz4EdjsPc07qHOwsOh00HpogTxRh72SJXWGybdlCko 6NEIuBa9IC2K7EpXR662HwyeM6+NSMF+a9qXCH1x32gu3XFg84HUaL/2WS0FMA5j Udt11CenhJ0Qrn3a49+X4bvXXN2paCV0qTxGuVt2W1FpJU7QYcLEgTxtSbiRTZYM yShDEYfAJU27kKJZ+0TWJDUBb/lOnuynGIisJTX+ZzmAqPYgdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUmqcsHzTUOssAoRVda9Q8vOPozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMmNhMTViOGYtZmU1Yi0z NWM5LTk2NmYtN2Y4YTE1YzVmMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8L MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLkq5xHx6Ur4cXCnihrSV8AGdvHa4tgNaI2HEG5tW29cExAfA4t C0AtCGx1pT6xxCmXFuHqrL1ZzkxPpik1KvFkWQ+ob1LHQbukNbDyuzl9EcC3Tq9S dAnae9qkf7+CuyP/HryRfBOOtNBvEM0twhdIeF9WPvAP5Wbl7jxh3SXvLSwOK9k3 UVQm+NfrA1oENq/uvQHpem3/7ABErJhVgB38j8SxOKaWLx2pH9PsVYkRm2X8LLS1 GFrko01l3/FSJ8uDSj8LVOJ4O1VmeaDzpND3IlUGeAhtOBuixN83QD4P3rs7BE02 DcOLtd5GJL+Va9mhvtNB/dYaeVyBFYeCjHE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:35:24 2025 by rpki-client