$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa File: ffd1afb2-ad50-3fd7-9185-09d034503219.roa (raw, json) Hash identifier: g6xxT5jG/T6hvEI+VRMufWymCrVyQqHEZ2ylwPHTVwc= Subject key identifier: 4E:79:79:2C:63:6B:EC:5D:81:50:F9:8F:D1:03:F6:D1:FD:00:D8:11 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B8EACEE79C53058C295216B40 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 20253 IP address blocks: 2606:bc40:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ee:79:c5:30:58:c2:95:21:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=c267c9d0-46c3-4507-8236-7a027e987771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:3b:8b:fe:6a:cf:7a:36:00:c0:9e:05:ce: a0:14:13:49:f6:a2:86:f5:2f:a5:1f:d3:dd:ff:fd: c5:fe:83:e8:26:6d:0d:7e:58:a3:f2:28:85:85:b7: cd:30:c0:4b:a0:13:ef:37:99:34:1e:d0:fb:ae:d5: 59:4d:11:f8:ed:a1:ad:f5:94:23:66:de:47:3c:1e: 82:1d:45:e5:69:3f:f2:36:b2:38:46:0a:6b:ad:23: 18:9e:13:c6:39:73:e7:b0:55:d4:49:a3:93:6a:07: fd:27:08:6a:a1:27:ac:54:3b:70:66:6d:a9:ad:8b: 8a:7b:5f:25:69:90:3e:75:80:0e:90:dc:bb:b0:85: e4:f3:ff:6f:ec:06:43:38:51:6a:bc:32:8f:96:0b: 8e:8a:b3:53:95:0d:11:ee:d1:0a:a9:b5:a1:7d:2a: da:33:24:c4:68:dc:e1:85:5a:a5:dd:17:8f:25:08: 32:58:69:ef:f9:85:38:30:8e:1b:ef:33:f4:43:cf: 23:b8:b1:02:4b:12:ae:70:e0:05:a0:75:a5:2c:a4: 33:ad:84:fd:f6:0c:35:20:52:76:7c:3a:4f:06:86: c9:6a:44:6a:b9:cd:82:b2:f6:ff:ba:09:db:9f:fd: 11:b2:f2:a5:09:50:57:07:a6:f2:71:90:f1:d5:b1: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:79:79:2C:63:6B:EC:5D:81:50:F9:8F:D1:03:F6:D1:FD:00:D8:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ffd1afb2-ad50-3fd7-9185-09d034503219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:80:f2:9e:67:f2:d6:c0:bb:15:ca:24:7a:0b:23:13:1c:4a: 83:60:1c:f7:a8:eb:7b:57:98:ac:f2:07:f3:4b:d6:c4:e3:98: fd:bf:a4:cf:95:f8:a3:02:a4:f6:91:1a:51:70:2a:9c:05:c2: 1f:40:0f:9d:28:32:fe:ce:cf:f5:24:e9:1f:63:0e:08:47:7a: bb:13:ad:56:c4:47:ca:ae:06:76:72:a3:bb:d5:ec:a4:e7:40: 80:ca:0a:52:d8:ea:71:87:d9:1a:a3:52:0c:39:90:8b:74:ac: 0a:b8:02:2e:fb:6d:9d:a8:7c:22:ee:09:75:8b:22:1d:e3:15: 91:82:31:1e:7b:a3:dc:51:ef:64:3e:3c:b8:0f:27:0c:68:cd: 69:43:5e:58:87:09:89:d3:02:70:94:fc:2e:bc:63:69:75:da: 6e:2a:4d:ba:93:bd:03:d2:fd:94:c6:40:24:3a:8a:a1:81:7d: 83:75:0e:ac:90:fe:d2:38:2a:27:f1:45:f0:e9:14:f2:11:6b: 1a:4e:74:30:bd:be:66:1f:03:7f:c0:79:28:54:9f:0d:e4:2d: 3c:85:9e:f0:cc:dc:8f:d7:90:7d:ab:3e:2e:fc:00:56:29:1e: b1:9d:fd:7d:fa:13:94:0f:c0:d9:b4:d0:86:f7:42:0d:62:d8: 70:d1:4c:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrO55xTBYwpUha0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YzI2N2M5ZDAtNDZjMy00NTA3LTgyMzYtN2EwMjdlOTg3NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfw7i/5qz3o2AMCeBc6gFBNJ9qKG9S+lH9Pd //3F/oPoJm0Nflij8iiFhbfNMMBLoBPvN5k0HtD7rtVZTRH47aGt9ZQjZt5HPB6C HUXlaT/yNrI4RgprrSMYnhPGOXPnsFXUSaOTagf9JwhqoSesVDtwZm2prYuKe18l aZA+dYAOkNy7sIXk8/9v7AZDOFFqvDKPlguOirNTlQ0R7tEKqbWhfSraMyTEaNzh hVql3RePJQgyWGnv+YU4MI4b7zP0Q88juLECSxKucOAFoHWlLKQzrYT99gw1IFJ2 fDpPBobJakRquc2Csvb/ugnbn/0RsvKlCVBXB6bycZDx1bFBsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE55eSxja+xdgVD5j9ED9tH9ANgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZmZkMWFmYjItYWQ1MC0z ZmQ3LTkxODUtMDlkMDM0NTAzMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASA8p5n8tbAuxXKJHoLIxMcSoNgHPeo63tXmKzyB/NL1sTjmP2/ pM+V+KMCpPaRGlFwKpwFwh9AD50oMv7Oz/Uk6R9jDghHersTrVbER8quBnZyo7vV 7KTnQIDKClLY6nGH2RqjUgw5kIt0rAq4Ai77bZ2ofCLuCXWLIh3jFZGCMR57o9xR 72Q+PLgPJwxozWlDXliHCYnTAnCU/C68Y2l12m4qTbqTvQPS/ZTGQCQ6iqGBfYN1 DqyQ/tI4KifxRfDpFPIRaxpOdDC9vmYfA3/AeShUnw3kLTyFnvDM3I/XkH2rPi78 AFYpHrGd/X36E5QPwNm00Ib3Qg1i2HDRTOE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:59 2025 by rpki-client