$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa File: a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa (raw, json) Hash identifier: xZtKrwR3+M85aiibQiuGh4RV/QMMM+Cvq5FMvdFGlvU= Subject key identifier: 61:4D:AA:CD:BD:B2:90:27:7C:D3:93:3D:04:92:35:8E:83:1E:37:22 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584BC2706D2F26D725CDE2A85D70 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 20253 IP address blocks: 2606:bc40:f1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6d:2f:26:d7:25:cd:e2:a8:5d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=11391b4c-195a-4c14-b32b-834b02eb65a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:b4:88:67:48:69:98:c4:42:9f:4f:84:cb: f1:d1:64:57:49:d6:76:34:0f:76:36:3a:e3:7a:01: bb:5b:7f:f3:c3:6d:71:3b:74:2d:02:42:85:5d:e9: fd:31:52:df:a6:5a:b4:83:ae:31:bb:9c:04:e8:b5: 99:51:47:5a:8a:d2:c0:6e:4b:a2:4d:c6:e2:35:3c: 76:d8:e7:d8:3a:24:68:70:2e:e6:26:27:d6:f8:0f: 02:bd:5c:2b:3c:74:89:e8:9f:ed:07:8a:a0:b0:7c: 19:45:c4:75:2c:4a:47:2c:44:6a:18:16:2c:00:29: 79:c0:12:50:11:f2:bf:35:26:76:9a:0b:de:a7:08: 33:69:b5:db:c6:cb:e9:57:ba:0b:d6:f6:58:4a:c4: ec:c7:49:42:f8:3b:99:bb:8e:d1:42:d7:05:5d:d6: d3:c3:96:9f:6a:87:1d:91:58:d9:37:cd:bc:22:1e: 9c:53:f3:be:2c:f5:a4:c0:87:a7:be:96:96:e7:81: 88:b4:66:a4:4a:0d:3d:2c:59:fe:7d:de:b8:d6:7e: 42:a6:bd:c0:fa:e3:19:5a:c0:4a:cf:eb:2f:72:a0: d9:46:0c:da:32:5d:fe:f8:c8:61:89:88:d7:3f:3e: 12:ea:7c:68:09:b0:16:d2:fb:ed:f1:e6:e3:56:85: 77:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4D:AA:CD:BD:B2:90:27:7C:D3:93:3D:04:92:35:8E:83:1E:37:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a44fde3e-86c2-3504-b914-bc44a7eac7bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e3:98:32:c4:05:6d:1c:87:7b:8c:72:81:c8:78:b6:e6:aa: 2f:8a:97:1b:ca:da:24:25:26:6f:40:79:70:ff:07:c6:36:98: 48:c9:2d:13:19:f7:e7:fb:77:d0:56:ad:e9:79:67:12:cc:8e: 86:09:03:b1:b0:09:11:50:7d:52:3b:ed:a3:02:90:1c:d2:9d: 44:44:5e:ee:23:f2:d5:04:e2:1d:c1:96:67:33:55:9e:66:fe: 66:68:36:e0:0b:92:3e:6f:33:9d:48:a7:9f:95:87:0f:1a:70: b1:a7:b5:47:bf:1b:7f:e1:ab:40:d6:f3:c6:31:39:6b:6e:02: 22:3f:1b:10:5d:b2:11:0e:76:95:23:c6:11:42:90:07:26:34: 8c:90:de:b4:2d:0c:a3:91:e0:c4:bd:86:df:76:6b:2b:87:4b: 95:67:0f:60:a4:12:ee:2a:33:99:a7:78:63:aa:67:9d:1f:a7: 71:13:7e:12:e5:d2:32:7e:6f:2c:eb:e6:df:9e:83:1a:94:e7: 6a:a2:b4:6b:41:77:65:6d:00:f4:f1:3d:b4:08:34:74:86:73: b0:2a:ce:ef:a6:63:c8:20:b3:0a:55:47:b6:70:f1:94:90:94: 50:bc:0e:e8:b7:68:d0:76:af:2b:f1:b2:4b:5d:80:d5:61:ce: b0:c2:3c:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvCcG0vJtclzeKoXXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MTEzOTFiNGMtMTk1YS00YzE0LWIzMmItODM0YjAyZWI2NWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidm0iGdIaZjEQp9PhMvx0WRXSdZ2NA92Njrj egG7W3/zw21xO3QtAkKFXen9MVLfplq0g64xu5wE6LWZUUdaitLAbkuiTcbiNTx2 2OfYOiRocC7mJifW+A8CvVwrPHSJ6J/tB4qgsHwZRcR1LEpHLERqGBYsACl5wBJQ EfK/NSZ2mgvepwgzabXbxsvpV7oL1vZYSsTsx0lC+DuZu47RQtcFXdbTw5afaocd kVjZN828Ih6cU/O+LPWkwIenvpaW54GItGakSg09LFn+fd641n5Cpr3A+uMZWsBK z+svcqDZRgzaMl3++MhhiYjXPz4S6nxoCbAW0vvt8ebjVoV3LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGFNqs29spAnfNOTPQSSNY6DHjciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvYTQ0ZmRlM2UtODZjMi0z NTA0LWI5MTQtYmM0NGE3ZWFjN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8f MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH7jmDLEBW0ch3uMcoHIeLbmqi+KlxvK2iQlJm9AeXD/B8Y2mEjJ LRMZ9+f7d9BWrel5ZxLMjoYJA7GwCRFQfVI77aMCkBzSnUREXu4j8tUE4h3Blmcz VZ5m/mZoNuALkj5vM51Ip5+Vhw8acLGntUe/G3/hq0DW88YxOWtuAiI/GxBdshEO dpUjxhFCkAcmNIyQ3rQtDKOR4MS9ht92ayuHS5VnD2CkEu4qM5mneGOqZ50fp3ET fhLl0jJ+byzr5t+egxqU52qitGtBd2VtAPTxPbQINHSGc7Aqzu+mY8ggswpVR7Zw 8ZSQlFC8Dui3aNB2ryvxsktdgNVhzrDCPKQ= -----END CERTIFICATE-----Generated at Tue Nov 11 19:38:36 2025 by rpki-client