$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa File: 86d17516-6609-38bc-b9c5-1de3645b206a.roa (raw, json) Hash identifier: oUptYqes95gJzCyPMv3oqg0zNM+l+SSAelX3vA0xjck= Subject key identifier: E3:A8:BA:B6:63:58:C6:CC:62:E4:FE:89:EC:01:25:98:48:7B:EB:8D Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B8EACE0773F0D3DEF78A27980 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 20253 IP address blocks: 2606:bc40:202::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e0:77:3f:0d:3d:ef:78:a2:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=6cac14b4-147d-45dd-9065-ad1cf2f74149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:a5:a9:a0:f4:f5:a1:08:ed:3c:3a:67:09: e1:86:b2:4b:fd:34:a2:24:68:cd:55:9c:15:85:e1: 9e:08:39:ce:7b:38:c4:89:5d:f1:f6:eb:1f:2f:41: 2e:43:df:7c:33:25:56:99:f7:f4:5c:c3:79:5c:5e: 19:c2:c0:98:d4:ec:0f:1a:5b:10:75:bd:37:8f:5f: d5:52:c4:34:eb:0f:bc:09:a9:67:10:15:4e:eb:ba: e7:95:a9:b3:3c:d6:0b:6f:3f:1e:b5:15:c3:4a:57: 78:4b:d6:34:33:5c:58:b4:6a:50:cf:4a:55:a9:6b: dd:38:9e:0c:18:1e:33:62:d0:d9:ea:83:63:79:e7: ca:e6:04:fd:b8:0f:cf:6b:a6:0e:13:cd:68:53:33: 95:22:af:0e:77:21:15:06:ff:8c:41:8e:c3:13:80: 13:9f:e6:46:4f:69:b7:9d:cc:81:4f:20:e3:ea:e9: 10:ce:50:7f:4a:c0:0a:76:bd:48:f9:9f:86:9b:30: 08:b9:d9:72:26:6c:57:69:b9:b7:25:2e:83:99:14: e2:88:b4:61:80:ba:2f:39:b5:04:43:07:50:cd:33: cc:cb:57:97:e8:f7:1c:eb:13:0e:69:67:02:e4:90: ff:15:8f:91:3a:85:1a:ff:a6:8a:aa:04:1d:c8:3a: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A8:BA:B6:63:58:C6:CC:62:E4:FE:89:EC:01:25:98:48:7B:EB:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/86d17516-6609-38bc-b9c5-1de3645b206a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:202::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:31:e2:0a:95:9d:f7:92:fb:4b:27:a0:8c:2a:5c:8c:30:61: bb:72:18:10:07:80:44:4d:fa:59:d4:c9:c1:3e:d5:3a:e8:c5: cc:78:8a:07:2b:f2:43:13:5c:e2:c5:f3:80:f9:03:22:0e:73: ce:48:ec:d3:02:67:a5:26:33:ec:b6:53:59:f6:18:30:22:1c: 9a:94:19:c6:de:fd:d2:64:bc:da:8d:bf:4a:ed:31:de:9e:a0: 3a:66:32:dc:d1:ca:a8:1a:e2:13:e9:96:5d:73:08:b7:63:60: 30:02:85:9f:a5:2f:d7:cd:14:68:a1:bf:30:0a:19:80:21:84: ed:09:11:be:14:4e:6b:e7:40:7b:07:70:e7:67:9a:52:46:c3: 01:0b:c4:84:c5:82:46:e7:71:cf:e9:5e:37:5d:6d:db:94:b1: 35:11:83:f5:aa:01:77:8e:c6:94:e6:e3:43:51:a7:6d:4d:73: c0:a0:98:ac:d4:88:3b:e8:00:14:24:d2:bf:96:10:4a:a6:ef: 46:58:3b:82:da:ef:d6:56:67:d4:a5:4f:0a:82:5f:79:71:f8: db:ea:08:5f:d0:51:4d:95:5f:38:ef:98:85:84:15:f0:ed:f6: ca:7d:47:b2:c8:44:14:82:b9:44:62:82:98:17:41:98:44:01: 77:57:08:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrOB3Pw0973iieYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NmNhYzE0YjQtMTQ3ZC00NWRkLTkwNjUtYWQxY2YyZjc0MTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1qlqaD09aEI7Tw6ZwnhhrJL/TSiJGjNVZwV heGeCDnOezjEiV3x9usfL0EuQ998MyVWmff0XMN5XF4ZwsCY1OwPGlsQdb03j1/V UsQ06w+8CalnEBVO67rnlamzPNYLbz8etRXDSld4S9Y0M1xYtGpQz0pVqWvdOJ4M GB4zYtDZ6oNjeefK5gT9uA/Pa6YOE81oUzOVIq8OdyEVBv+MQY7DE4ATn+ZGT2m3 ncyBTyDj6ukQzlB/SsAKdr1I+Z+GmzAIudlyJmxXabm3JS6DmRTiiLRhgLovObUE QwdQzTPMy1eX6Pcc6xMOaWcC5JD/FY+ROoUa/6aKqgQdyDoDcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOOourZjWMbMYuT+iewBJZhIe+uNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODZkMTc1MTYtNjYwOS0z OGJjLWI5YzUtMWRlMzY0NWIyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAIC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAwx4gqVnfeS+0snoIwqXIwwYbtyGBAHgERN+lnUycE+1Troxcx4 igcr8kMTXOLF84D5AyIOc85I7NMCZ6UmM+y2U1n2GDAiHJqUGcbe/dJkvNqNv0rt Md6eoDpmMtzRyqga4hPpll1zCLdjYDAChZ+lL9fNFGihvzAKGYAhhO0JEb4UTmvn QHsHcOdnmlJGwwELxITFgkbncc/pXjddbduUsTURg/WqAXeOxpTm40NRp21Nc8Cg mKzUiDvoABQk0r+WEEqm70ZYO4La79ZWZ9SlTwqCX3lx+NvqCF/QUU2VXzjvmIWE FfDt9sp9R7LIRBSCuURigpgXQZhEAXdXCDc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:21 2025 by rpki-client