$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa File: 0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa (raw, json) Hash identifier: 0uDuaMvNwBouOAq2H4FqWmhMXc1/ODw01JH/46CMFq4= Subject key identifier: 32:C1:CD:29:FA:21:36:61:98:BA:48:F0:01:FE:F2:BB:39:EE:A7:59 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B1F0176016124A1BFBC1E8720 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 20253 IP address blocks: 2606:bc40:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:76:01:61:24:a1:bf:bc:1e:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=870db992-cf08-4a57-b138-d286c2fd466b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f9:09:c4:0e:e8:f6:af:de:a3:55:17:75:99: 20:4b:3e:bd:22:c2:b5:97:f5:dc:9b:c0:88:b6:13: 54:43:6a:aa:e4:ae:05:c7:b4:f5:e3:3d:d3:2d:89: e5:8d:ed:a7:8c:e2:3a:71:64:48:44:93:41:6e:5d: 5a:40:12:85:81:85:98:bc:20:48:be:38:94:b7:7e: d2:d1:68:45:9b:28:4d:9f:00:f6:bc:b7:b0:f8:2e: 1d:74:a2:0a:54:14:71:03:c0:ec:20:c2:f9:6d:95: 60:87:86:4e:21:9e:72:b1:58:39:c0:43:e9:28:d7: a2:17:1c:e2:5e:84:24:39:22:8e:86:80:3d:48:c7: b3:07:b0:98:f3:e3:d0:c9:f5:16:04:8b:be:71:48: ca:b8:83:ff:08:dd:40:f0:e8:3d:a2:2c:cb:c4:44: ee:10:65:b3:1a:e2:22:92:2d:e2:d6:60:59:7e:af: 27:b0:48:51:60:dc:78:1e:e2:a4:d5:e4:b7:ff:c7: 39:6c:7f:88:a9:59:29:cd:f8:d7:a5:2e:4d:0a:b5: 6b:8a:5a:af:ab:a3:54:91:df:35:c8:c8:2b:73:f3: 50:62:bd:ec:8f:ac:57:21:7d:10:36:7e:a2:f3:76: 6a:13:f2:63:1f:62:d2:f2:43:41:0c:05:0c:5d:22: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C1:CD:29:FA:21:36:61:98:BA:48:F0:01:FE:F2:BB:39:EE:A7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fb:95:45:1a:93:e1:42:ad:fb:45:b8:26:ba:f5:78:a7:c6: 86:8b:ad:36:ff:d6:4f:56:15:3f:6a:5e:96:cd:bc:fc:74:6a: c1:8c:5a:ae:b1:22:da:fa:eb:03:11:77:e8:43:43:92:5c:31: ee:3e:d3:15:d7:c2:cb:d2:77:f0:87:b6:c5:b4:d3:30:5a:9a: d5:2a:a1:bc:4f:d1:13:75:07:10:66:06:c1:2a:70:fc:46:6e: 61:ee:e8:49:4e:c1:dc:a7:87:b1:dc:bc:c9:2d:3a:57:02:46: 66:f9:af:03:7f:b1:28:f2:19:c7:9c:8f:ff:3a:af:7b:8f:1c: a7:6d:e3:21:49:f4:87:77:48:f1:9f:ae:83:54:2b:ee:99:4c: d1:89:81:23:a2:c6:81:7e:49:8e:fb:e0:38:88:8d:fb:7b:63: 24:be:c1:b0:2a:17:ec:da:ba:db:e0:7b:2c:f9:14:f3:63:52: de:22:42:77:61:29:2a:3f:30:06:f0:53:43:52:7f:93:d7:49: 55:cf:48:91:72:18:f6:94:d0:68:2d:08:be:f1:7b:50:f5:a9: e6:f7:f7:1f:7e:db:aa:f5:37:53:01:cb:f7:14:2a:b3:05:86: ac:e7:44:90:37:28:5e:a7:f1:85:ac:88:18:2d:de:32:97:1d: c4:33:b4:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAXYBYSShv7wehyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODcwZGI5OTItY2YwOC00YTU3LWIxMzgtZDI4NmMyZmQ0NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/kJxA7o9q/eo1UXdZkgSz69IsK1l/Xcm8CI thNUQ2qq5K4Fx7T14z3TLYnlje2njOI6cWRIRJNBbl1aQBKFgYWYvCBIvjiUt37S 0WhFmyhNnwD2vLew+C4ddKIKVBRxA8DsIML5bZVgh4ZOIZ5ysVg5wEPpKNeiFxzi XoQkOSKOhoA9SMezB7CY8+PQyfUWBIu+cUjKuIP/CN1A8Og9oizLxETuEGWzGuIi ki3i1mBZfq8nsEhRYNx4HuKk1eS3/8c5bH+IqVkpzfjXpS5NCrVrilqvq6NUkd81 yMgrc/NQYr3sj6xXIX0QNn6i83ZqE/JjH2LS8kNBDAUMXSL/mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDLBzSn6ITZhmLpI8AH+8rs57qdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMDgxN2Q0N2ItMWI3NC0z ZWI5LThmZTEtMjBkY2IxNzNkNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB37lUUak+FCrftFuCa69XinxoaLrTb/1k9WFT9qXpbNvPx0asGM Wq6xItr66wMRd+hDQ5JcMe4+0xXXwsvSd/CHtsW00zBamtUqobxP0RN1BxBmBsEq cPxGbmHu6ElOwdynh7HcvMktOlcCRmb5rwN/sSjyGcecj/86r3uPHKdt4yFJ9Id3 SPGfroNUK+6ZTNGJgSOixoF+SY774DiIjft7YyS+wbAqF+zautvgeyz5FPNjUt4i QndhKSo/MAbwU0NSf5PXSVXPSJFyGPaU0GgtCL7xe1D1qeb39x9+26r1N1MBy/cU KrMFhqznRJA3KF6n8YWsiBgt3jKXHcQztE4= -----END CERTIFICATE-----Generated at Fri Sep 19 12:47:03 2025 by rpki-client