$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa File: 2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa (raw, json) Hash identifier: dOciUw0UA821YT2DrLUfT/+s0eapj19c2vshh/pJPeU= Subject key identifier: 39:88:F6:BF:8C:50:D0:96:90:39:24:11:FC:6D:13:38:BB:84:01:08 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B8EACEEA2FAFA2A3570B4BCC0 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 20253 IP address blocks: 2606:bc40:201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ee:a2:fa:fa:2a:35:70:b4:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=684c68c3-64d2-4602-bd2a-4d274dcade4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:28:b3:10:0d:99:59:87:02:70:f1:d7:63: f7:18:81:e2:74:c9:d1:e1:25:3a:78:b4:f4:d5:ad: 9a:83:9d:1f:81:14:2e:59:42:ca:1c:19:da:a0:b6: fe:1e:38:df:df:3f:6f:8d:ff:4d:d4:b5:c9:86:80: db:fe:c5:3a:83:35:e9:50:c3:05:a1:23:4b:0b:ff: fb:1c:56:2a:5b:0a:f0:71:e0:30:c3:45:f3:82:f4: 7b:ad:8c:9c:45:c7:af:db:60:46:bf:04:b9:a3:31: b9:66:0d:0a:79:80:8c:e5:ef:e8:6d:ff:77:ef:32: f2:fa:46:e2:ba:f0:70:dd:9e:d8:f8:24:7c:c7:c8: 0d:5b:59:f2:17:63:7f:e6:4c:78:7c:fb:3f:04:11: 76:27:23:03:cf:38:cf:b1:f6:bf:6c:78:49:c1:64: 62:ba:99:f9:63:b7:01:04:9e:93:e2:33:c7:a8:f4: fb:6c:27:09:6d:14:e1:09:53:9a:43:4e:62:94:63: 59:6e:e9:2a:6f:3f:24:35:98:69:5c:39:84:9f:c3: 39:db:05:bf:97:4b:b7:72:80:22:5a:fc:e0:54:38: 09:07:c7:1d:1f:75:ff:09:15:ee:f5:a4:2f:b5:38: 18:70:e2:75:d2:97:ae:77:02:c4:48:20:bc:5d:c6: 7c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:88:F6:BF:8C:50:D0:96:90:39:24:11:FC:6D:13:38:BB:84:01:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:201::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:49:9c:d0:d9:e0:bf:e1:17:66:8d:3c:ca:67:af:00:c5:9d: a4:68:fa:7d:87:7c:7e:65:98:c6:36:aa:05:fe:f4:1d:c4:9c: 02:8b:31:4a:49:0d:fa:d8:4e:26:78:28:4b:1e:91:25:aa:d2: ad:0b:81:7d:e5:26:57:05:cc:d5:ff:1e:95:0b:57:01:7f:69: 01:71:3e:2c:a3:fd:84:72:65:dd:84:dc:07:66:22:cc:ee:12: 80:49:e1:97:45:89:fc:79:61:1a:bc:af:e8:84:c3:d4:29:14: 01:f2:65:d2:75:9f:68:ae:24:d9:ae:b2:75:d3:18:c8:99:8d: 95:f3:d9:a7:b9:f1:16:fd:5e:41:bb:83:05:61:5e:91:9f:7f: 12:2c:88:29:bc:bf:55:92:4e:b6:e4:13:71:3c:96:dd:45:98: 27:be:ae:13:ba:f4:64:51:e7:ed:ac:96:08:7f:ae:4c:b8:6e: e9:d0:5d:6a:f9:fd:84:5e:b8:07:74:f8:94:da:45:49:9a:f4: 33:ca:95:90:9a:e3:86:3d:46:b2:7b:97:30:06:aa:08:7c:96: 7c:ec:90:bf:64:d5:71:1f:a5:be:81:d4:6b:20:56:aa:08:da: 1f:4a:47:be:a5:71:af:8b:c8:2a:69:d8:39:47:2e:f6:39:82: ff:20:48:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrO6i+voqNXC0vMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk Njg0YzY4YzMtNjRkMi00NjAyLWJkMmEtNGQyNzRkY2FkZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAQosxANmVmHAnDx12P3GIHidMnR4SU6eLT0 1a2ag50fgRQuWULKHBnaoLb+Hjjf3z9vjf9N1LXJhoDb/sU6gzXpUMMFoSNLC//7 HFYqWwrwceAww0XzgvR7rYycRcev22BGvwS5ozG5Zg0KeYCM5e/obf937zLy+kbi uvBw3Z7Y+CR8x8gNW1nyF2N/5kx4fPs/BBF2JyMDzzjPsfa/bHhJwWRiupn5Y7cB BJ6T4jPHqPT7bCcJbRThCVOaQ05ilGNZbukqbz8kNZhpXDmEn8M52wW/l0u3coAi WvzgVDgJB8cdH3X/CRXu9aQvtTgYcOJ10peudwLESCC8XcZ81wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDmI9r+MUNCWkDkkEfxtEzi7hAEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMmQ0YzBmODgtYjU4OS0z ZTAwLWFhOWQtM2NkNmY1MmZlNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAIB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpJnNDZ4L/hF2aNPMpnrwDFnaRo+n2HfH5lmMY2qgX+9B3EnAKL MUpJDfrYTiZ4KEsekSWq0q0LgX3lJlcFzNX/HpULVwF/aQFxPiyj/YRyZd2E3Adm IszuEoBJ4ZdFifx5YRq8r+iEw9QpFAHyZdJ1n2iuJNmusnXTGMiZjZXz2ae58Rb9 XkG7gwVhXpGffxIsiCm8v1WSTrbkE3E8lt1FmCe+rhO69GRR5+2slgh/rky4bunQ XWr5/YReuAd0+JTaRUma9DPKlZCa44Y9RrJ7lzAGqgh8lnzskL9k1XEfpb6B1Gsg VqoI2h9KR76lca+LyCpp2DlHLvY5gv8gSOE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:55 2025 by rpki-client