$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8a48e58a-0d02-39c4-aca4-75e38fdea28b.roa File: 8a48e58a-0d02-39c4-aca4-75e38fdea28b.roa (raw, json) Hash identifier: xPqXZ+rbU/ntjbp/GZxTXFTZ1PHt4lpiEyDoDfP0yMw= Subject key identifier: BD:73:1D:F9:95:B4:68:F6:68:7F:66:01:3B:B1:2D:7E:F1:39:84:BE Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B13D6B8B9D04DB933C192FF00 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8a48e58a-0d02-39c4-aca4-75e38fdea28b.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 20253 IP address blocks: 2606:bc40:f00d::/48 maxlen: 48 2606:bc40:f00e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b8:b9:d0:4d:b9:33:c1:92:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=d8c71f94-4b0a-4c83-bc82-e9ffc98eb5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:67:d7:15:17:f9:da:7f:48:88:b6:b5:b4:d0: f1:3e:61:86:2c:39:9a:b4:c9:49:66:4b:61:cd:c7: ee:83:95:32:8b:e4:0e:9d:79:14:3c:ad:ec:32:93: 4c:da:21:5e:ea:7c:b4:80:de:85:a5:b8:03:ec:50: d8:78:63:d6:5a:4c:32:ad:1c:19:f5:25:f3:8a:1d: ab:6e:0d:33:2e:b9:bf:50:76:1c:92:c0:ef:d0:de: 9f:80:a7:9d:77:8b:22:c6:95:04:09:4e:f7:0f:d4: 5e:b3:ff:e3:db:79:c9:5a:92:9d:29:46:07:96:4b: a9:1f:02:86:e1:28:29:8a:98:e8:fb:8f:a8:fe:05: 9a:14:cb:12:84:a7:38:1a:89:26:49:b2:e0:1c:25: 7a:14:71:a0:13:59:ed:f3:04:31:8d:78:9f:f0:10: 2e:27:3e:b6:74:1a:d0:97:64:d9:36:a5:e1:8c:70: ba:57:29:eb:92:55:bd:ec:b8:df:6f:26:6a:0a:97: 99:71:f5:02:e3:ca:2a:52:b6:04:1c:b8:a4:99:37: dd:7f:4e:52:31:55:10:d6:0d:b7:8e:f8:ee:d6:79: 09:7a:6c:cf:4f:b5:84:9f:ba:99:1d:f5:5f:0d:87: 83:eb:cc:ce:72:f7:13:31:6f:e2:2f:15:ea:56:1f: 1f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:73:1D:F9:95:B4:68:F6:68:7F:66:01:3B:B1:2D:7E:F1:39:84:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8a48e58a-0d02-39c4-aca4-75e38fdea28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f00d::-2606:bc40:f00e:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:03:84:8c:bc:6d:70:1f:76:a5:84:ec:ba:e7:a7:a1:01:26: 0a:a4:a4:1b:41:a3:f2:c3:d0:ec:5b:57:2b:c4:a5:24:b1:a8: 53:ae:ec:a4:a1:ab:06:d5:5f:43:bb:c2:b3:f9:8d:f9:3c:0f: d2:44:82:f3:59:59:99:16:c5:a6:fd:66:15:1d:45:f9:4d:f4: 9b:2b:84:cf:25:11:56:1a:e3:35:e6:2f:46:57:c3:ea:ff:20: b4:3b:b6:2e:42:70:c5:7b:94:bc:43:cf:51:c7:c6:c0:eb:6f: 6b:a2:ff:5b:c2:44:51:06:57:de:4f:35:16:9c:3c:56:1c:98: 3d:bb:de:1a:2a:43:76:50:8f:e0:ec:53:d6:eb:1f:ec:cf:7a: 8d:3f:c8:30:5e:f5:86:d9:c7:a6:4e:1c:cf:ce:b2:65:71:fc: a6:8f:07:93:4d:f1:20:ff:5e:e2:84:f8:63:c8:50:90:a9:1d: 31:3d:0e:e0:09:ee:8a:39:e0:19:ea:fb:66:4f:2a:56:00:01: 7c:5e:a4:d4:6c:18:05:58:d3:76:23:c2:1e:2b:db:92:3f:35: 41:d6:09:42:58:09:9b:aa:1b:77:74:9d:f9:de:cd:47:3e:79: 9c:e0:96:50:7c:71:5e:f3:fc:48:4f:96:b4:5d:08:47:45:af: bc:36:f6:be -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEsT1ri50E25M8GS/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZDhjNzFmOTQtNGIwYS00YzgzLWJjODItZTlmZmM5OGViNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WfXFRf52n9IiLa1tNDxPmGGLDmatMlJZkth zcfug5Uyi+QOnXkUPK3sMpNM2iFe6ny0gN6FpbgD7FDYeGPWWkwyrRwZ9SXzih2r bg0zLrm/UHYcksDv0N6fgKedd4sixpUECU73D9Res//j23nJWpKdKUYHlkupHwKG 4Sgpipjo+4+o/gWaFMsShKc4GokmSbLgHCV6FHGgE1nt8wQxjXif8BAuJz62dBrQ l2TZNqXhjHC6VynrklW97LjfbyZqCpeZcfUC48oqUrYEHLikmTfdf05SMVUQ1g23 jvju1nkJemzPT7WEn7qZHfVfDYeD68zOcvcTMW/iLxXqVh8fawIDAQABo4IDYzCC A18wHQYDVR0OBBYEFL1zHfmVtGj2aH9mATuxLX7xOYS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvOGE0OGU1OGEtMGQwMi0z OWM0LWFjYTQtNzVlMzhmZGVhMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBrxA 8A0DBwAmBrxA8A4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAjwOEjLxtcB92pYTsuuenoQEmCqSkG0Gj8sPQ 7FtXK8SlJLGoU67spKGrBtVfQ7vCs/mN+TwP0kSC81lZmRbFpv1mFR1F+U30myuE zyURVhrjNeYvRlfD6v8gtDu2LkJwxXuUvEPPUcfGwOtva6L/W8JEUQZX3k81Fpw8 VhyYPbveGipDdlCP4OxT1usf7M96jT/IMF71htnHpk4cz86yZXH8po8Hk03xIP9e 4oT4Y8hQkKkdMT0O4AnuijngGer7Zk8qVgABfF6k1GwYBVjTdiPCHivbkj81QdYJ QlgJm6obd3Sd+d7NRz55nOCWUHxxXvP8SE+WtF0IR0WvvDb2vg== -----END CERTIFICATE-----Generated at Mon Oct 20 20:34:57 2025 by rpki-client