$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2a3dd8f0-dd98-3fff-ba16-b208c7ac1895.roa File: 2a3dd8f0-dd98-3fff-ba16-b208c7ac1895.roa (raw, json) Hash identifier: +U5PVhdwwfB0bdZRIFPt/tU2V6NLy7n47IpM0LET50Y= Subject key identifier: 68:52:42:12:17:A7:0B:D5:74:59:04:94:B5:A2:C1:5F:B2:20:7D:07 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B33F1A9FDCA7E60E88B65B9C0 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2a3dd8f0-dd98-3fff-ba16-b208c7ac1895.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 20253 IP address blocks: 2606:bc40:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a9:fd:ca:7e:60:e8:8b:65:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=2962b2c9-dcee-407e-b26c-72756ced3423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:65:7f:ea:19:e3:2c:04:64:1c:6d:44:46: ac:57:09:9f:24:b7:49:6d:55:78:58:fe:22:af:55: af:e8:ca:c9:0b:f2:a7:9b:4b:a4:17:4d:53:36:3d: f0:c2:fd:05:b9:2c:71:1d:0b:71:dc:4b:99:88:bd: c4:a6:04:bf:15:4f:b9:4b:87:fd:f3:79:10:bb:f6: 71:3e:3a:63:e5:ec:f4:ab:0b:22:66:79:37:55:fb: 91:ea:93:cd:05:d1:85:55:52:c7:26:e5:9a:fb:f8: 68:06:94:40:fa:c0:2c:81:7b:d0:98:d1:13:fa:36: 62:6b:57:94:ee:2a:63:44:e0:ba:d5:91:d6:a5:fb: 3e:12:7c:ac:49:73:07:99:1b:dd:fd:5d:a5:4c:86: aa:ee:5a:05:11:db:1f:d4:ab:f3:57:0d:61:bf:de: 43:45:ca:13:24:5e:68:1d:fe:4f:de:51:56:8e:70: 3d:df:37:cf:9e:b7:4f:14:4e:ba:de:24:57:84:81: d3:19:f1:9a:b9:2c:02:49:d9:8a:57:b0:56:f5:df: 73:c5:69:48:fa:9a:fa:43:be:dc:33:da:75:ba:47: 01:eb:a3:1a:f2:88:73:dc:3d:66:85:3a:94:71:28: 4d:e5:87:a4:00:34:d6:e5:5f:37:52:e8:0f:c0:58: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:52:42:12:17:A7:0B:D5:74:59:04:94:B5:A2:C1:5F:B2:20:7D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2a3dd8f0-dd98-3fff-ba16-b208c7ac1895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0c:1d:a4:d4:5c:5f:76:e4:38:d6:cd:24:93:b4:15:6c:a7: 07:6f:0c:80:4f:7f:af:b7:fe:10:06:a3:4a:22:40:2b:5b:28: 7d:a4:03:62:72:9d:e9:16:d4:c8:74:3c:c4:4a:95:24:26:54: 2f:31:a7:ad:e2:69:8b:7a:b0:b4:3a:78:e8:c4:f3:8b:a4:05: 9d:0a:1b:5c:81:c0:c6:14:77:3f:69:95:9f:bb:c4:ba:58:e2: 76:78:27:17:31:a2:6d:f1:b6:1a:09:3b:1c:5c:2b:c7:81:45: d8:7d:83:5e:45:2c:e1:84:06:30:da:00:a3:4d:7c:5a:88:d4: e5:69:4e:87:a4:24:84:3c:79:82:c6:b9:d3:b9:2e:cf:22:b6: af:77:47:5b:b8:93:b3:2a:31:f2:3a:50:74:6b:f6:b3:3b:33: c2:4b:27:30:36:0d:5e:a4:24:71:5e:75:ed:ff:1c:0e:e5:e8: 1c:b1:ec:d4:6d:35:85:44:62:5b:eb:d8:f1:f5:7c:60:cf:60: ef:e8:c7:c6:de:c2:7e:d6:8e:d2:3b:e5:65:c2:87:6d:28:71: 70:3e:be:20:00:f6:b2:e8:8c:15:47:97:e5:17:6c:e0:90:d2: 3f:7b:92:f7:74:a0:66:75:d2:ba:6b:54:fb:9a:22:fe:10:cd: 32:bc:50:b4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsz8an9yn5g6ItlucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk Mjk2MmIyYzktZGNlZS00MDdlLWIyNmMtNzI3NTZjZWQzNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLtlf+oZ4ywEZBxtREasVwmfJLdJbVV4WP4i r1Wv6MrJC/Knm0ukF01TNj3wwv0FuSxxHQtx3EuZiL3EpgS/FU+5S4f983kQu/Zx Pjpj5ez0qwsiZnk3VfuR6pPNBdGFVVLHJuWa+/hoBpRA+sAsgXvQmNET+jZia1eU 7ipjROC61ZHWpfs+EnysSXMHmRvd/V2lTIaq7loFEdsf1KvzVw1hv95DRcoTJF5o Hf5P3lFWjnA93zfPnrdPFE663iRXhIHTGfGauSwCSdmKV7BW9d9zxWlI+pr6Q77c M9p1ukcB66Ma8ohz3D1mhTqUcShN5YekADTW5V83UugPwFiEmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGhSQhIXpwvVdFkElLWiwV+yIH0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMmEzZGQ4ZjAtZGQ5OC0z ZmZmLWJhMTYtYjIwOGM3YWMxODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJga8QOAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMwwdpNRcX3bkONbNJJO0FWynB28MgE9/r7f+EAajSiJAK1sofaQD YnKd6RbUyHQ8xEqVJCZULzGnreJpi3qwtDp46MTzi6QFnQobXIHAxhR3P2mVn7vE uljidngnFzGibfG2Ggk7HFwrx4FF2H2DXkUs4YQGMNoAo018WojU5WlOh6QkhDx5 gsa507kuzyK2r3dHW7iTsyox8jpQdGv2szszwksnMDYNXqQkcV517f8cDuXoHLHs 1G01hURiW+vY8fV8YM9g7+jHxt7CftaO0jvlZcKHbShxcD6+IAD2suiMFUeX5Rds 4JDSP3uS93SgZnXSumtU+5oi/hDNMrxQtA== -----END CERTIFICATE-----Generated at Fri Sep 19 12:48:56 2025 by rpki-client