$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc2c3007-e170-37d9-aeb8-9b8e34357a13.roa File: dc2c3007-e170-37d9-aeb8-9b8e34357a13.roa (raw, json) Hash identifier: yPCMvELnfBnOouDbTavWJE2u3R7KpxAtr2/Sr9zK9YY= Subject key identifier: 72:79:E6:37:60:00:C4:0D:D8:B8:79:62:95:27:91:F0:F2:20:19:03 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B8EACEEC1E1D7D98D61C05100 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc2c3007-e170-37d9-aeb8-9b8e34357a13.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 20253 IP address blocks: 2606:bc40:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ee:c1:e1:d7:d9:8d:61:c0:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d3f0fe19-44ea-4199-89ac-1ff462840877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:eb:fe:6e:b1:09:7a:dc:22:e3:83:87:ff: 40:94:23:c7:71:7b:d6:55:36:f9:2e:88:00:81:a7: a0:b1:d4:41:28:fc:9b:52:04:69:9d:ee:f1:1d:c6: 0b:00:25:48:9c:ef:c5:01:da:3e:43:d9:ff:f0:e6: cb:42:93:2b:ae:fb:db:72:ff:51:f9:74:84:e5:42: 4b:81:78:7e:9c:88:74:17:c4:97:50:64:40:83:d6: ab:aa:03:7b:8e:33:4d:a5:56:0b:01:e8:23:90:2a: 76:17:7b:0b:4d:92:4a:05:7a:a2:35:d5:e1:c1:cd: 69:4b:65:c7:88:35:08:7a:00:59:14:2d:fe:9a:0a: 63:8d:ec:32:c8:33:8e:eb:99:26:31:3c:5b:81:c0: d1:01:52:90:5d:aa:e6:1e:ae:52:4c:6d:69:6c:16: d9:5d:52:06:30:77:e8:62:c6:61:1e:f7:90:f9:a9: 40:46:60:63:ac:31:a4:b5:91:4f:9e:e7:62:72:9f: 84:35:f5:b0:70:a0:01:51:88:6c:de:a2:9f:a3:a9: ff:61:8f:b1:02:10:8a:6c:12:22:f8:3d:72:4c:5b: 2f:17:dc:57:0b:d9:71:77:a0:88:8a:a1:4d:39:c5: 86:d7:63:85:fe:50:9c:5e:ab:cb:89:4d:19:1a:fa: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:79:E6:37:60:00:C4:0D:D8:B8:79:62:95:27:91:F0:F2:20:19:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc2c3007-e170-37d9-aeb8-9b8e34357a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:19::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a0:17:e1:b2:e9:9a:68:9e:ab:6b:b4:06:97:89:93:65:37: 9e:d4:3d:9f:43:b9:f7:aa:13:a0:4b:00:9a:08:08:4a:b2:74: 56:5a:77:9a:f5:77:33:8c:b6:b8:0e:6c:38:de:fe:f9:81:bc: fe:ec:21:93:a7:76:98:4e:57:27:f7:f3:5d:fb:7d:a3:0a:d6: 52:1d:b4:9d:04:d2:ec:56:fd:fe:3a:d2:33:37:66:b7:e6:44: 4b:34:72:44:c5:09:6a:a5:a3:da:7a:0b:24:2d:6b:73:1c:a2: 5d:84:96:0c:fb:c0:e1:49:0b:7c:a1:b5:0b:8f:54:a4:ae:42: 72:c8:b1:5d:fe:f3:c9:a5:2e:36:97:db:d1:e5:7f:bd:e0:e6: ea:af:a3:57:0f:59:d2:af:bd:d2:eb:1c:c8:88:2a:cc:2a:61: 94:4f:76:32:84:26:58:a0:7e:31:72:c3:ef:ac:d9:61:e7:7a: 2c:a3:b2:1c:c7:bc:8f:40:6a:26:39:19:7f:b8:13:8f:1e:4f: cc:8e:c6:b5:89:5e:ea:cf:60:2c:6a:9f:3e:d7:b8:85:60:4c: 28:e0:1d:86:fd:02:fe:e7:b6:6d:28:81:18:a0:28:dc:31:48: 78:3a:a6:b7:59:f9:3e:d2:6e:4e:59:a9:3e:8f:d8:58:9b:54: 7c:ff:fc:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrO7B4dfZjWHAUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDNmMGZlMTktNDRlYS00MTk5LTg5YWMtMWZmNDYyODQwODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7zr/m6xCXrcIuODh/9AlCPHcXvWVTb5LogA gaegsdRBKPybUgRpne7xHcYLACVInO/FAdo+Q9n/8ObLQpMrrvvbcv9R+XSE5UJL gXh+nIh0F8SXUGRAg9arqgN7jjNNpVYLAegjkCp2F3sLTZJKBXqiNdXhwc1pS2XH iDUIegBZFC3+mgpjjewyyDOO65kmMTxbgcDRAVKQXarmHq5STG1pbBbZXVIGMHfo YsZhHveQ+alARmBjrDGktZFPnudicp+ENfWwcKABUYhs3qKfo6n/YY+xAhCKbBIi +D1yTFsvF9xXC9lxd6CIiqFNOcWG12OF/lCcXqvLiU0ZGvoTGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHJ55jdgAMQN2Lh5YpUnkfDyIBkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGMyYzMwMDctZTE3MC0z N2Q5LWFlYjgtOWI4ZTM0MzU3YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE2gF+Gy6ZponqtrtAaXiZNlN57UPZ9DufeqE6BLAJoICEqydFZa d5r1dzOMtrgObDje/vmBvP7sIZOndphOVyf38137faMK1lIdtJ0E0uxW/f460jM3 ZrfmREs0ckTFCWqlo9p6CyQta3Mcol2Elgz7wOFJC3yhtQuPVKSuQnLIsV3+88ml LjaX29Hlf73g5uqvo1cPWdKvvdLrHMiIKswqYZRPdjKEJligfjFyw++s2WHneiyj shzHvI9AaiY5GX+4E48eT8yOxrWJXurPYCxqnz7XuIVgTCjgHYb9Av7ntm0ogRig KNwxSHg6prdZ+T7Sbk5ZqT6P2FibVHz//Ns= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:55 2025 by rpki-client