$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa File: dd906173-242b-3137-a918-86b3c41a58d9.roa (raw, json) Hash identifier: v/IPl5mk0YaJV8YqwU/uQisImC4/fCpuS0vpNNVDM3Q= Subject key identifier: 2D:C3:5E:B4:69:A5:07:90:28:37:70:3A:A7:6E:09:26:D2:5C:51:A1 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584BC2706D408B7813E0CEFF9780 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 20253 IP address blocks: 2606:bc40:f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6d:40:8b:78:13:e0:ce:ff:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=c1cb92b8-e690-437a-baf3-e07b76bfbafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:53:fa:6d:78:8e:2d:81:aa:47:23:00:60:41: 05:d5:b5:c3:41:a9:e9:6e:60:46:ab:78:72:0a:41: a8:b1:87:0f:f2:52:77:5a:a0:7e:3d:36:c5:bb:8b: a8:37:a4:23:8a:58:47:2e:4a:5f:31:14:c9:c9:de: f5:f9:e7:9b:70:f8:3f:f6:c2:8c:fd:9e:c2:37:ad: 4c:43:5f:d4:01:fd:eb:d3:6b:1a:a0:4c:0a:3d:b4: 41:7a:96:1e:e9:1a:a2:f5:45:30:9e:c9:ef:48:00: 9b:62:52:8b:56:db:a6:9e:5b:b9:2f:8d:1d:d3:13: 48:3c:fe:6b:16:97:de:3a:56:eb:93:66:c8:38:f7: 95:a6:51:5e:cf:9e:df:b7:28:86:7b:39:59:d0:5f: 1f:ae:30:b1:c7:6a:a0:7a:17:ff:80:0f:06:99:2c: 62:4f:56:4e:66:1f:b1:90:3b:20:f0:40:cc:49:79: 8a:a7:3a:9c:14:8f:07:5f:ae:63:80:c6:a0:6f:c6: 69:52:b6:3e:e9:30:14:37:0a:d4:8a:17:64:c5:a4: 0d:24:24:ab:15:3a:41:ba:7f:3d:dd:b4:75:c0:43: cd:0d:2c:aa:bc:89:b7:dd:5b:89:be:c9:3e:07:67: 5b:99:b1:0a:15:97:e7:d7:77:3f:d5:84:7f:16:e5: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C3:5E:B4:69:A5:07:90:28:37:70:3A:A7:6E:09:26:D2:5C:51:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c1:1d:2e:e5:f4:0c:07:1a:0a:f0:6e:16:82:f8:c6:c8:cb: 79:2b:bd:71:d7:b6:28:6d:e0:e9:dd:93:a0:8e:3d:4f:c8:84: 0a:1a:34:38:8d:5a:e3:80:13:a3:2a:fc:33:1d:2d:46:80:0c: e1:cc:16:4a:d2:df:6c:ca:0a:7b:3e:cc:f7:d8:fa:f1:76:8d: a7:42:eb:ad:eb:ee:fa:58:60:99:22:f9:b2:31:6f:14:30:c4: ff:ba:27:dd:a4:9c:6f:99:0d:ac:30:87:a1:d1:6f:fd:08:af: 02:6c:d5:b0:59:3d:c9:c7:aa:5f:5d:6c:db:a8:ef:e9:ba:6d: 30:30:86:87:1c:cf:f1:a6:ce:1e:57:d8:31:40:49:81:ac:f4: 3d:85:9d:0a:7f:47:29:eb:15:9c:fa:63:8a:9d:46:2c:6c:7e: f9:9a:c6:0b:66:af:92:10:73:e8:56:69:41:4f:e9:58:67:3b: ca:f4:56:ff:f3:bd:b0:62:b8:61:b2:8f:9e:46:5d:0d:1b:62: 0c:6e:e7:70:5f:b5:8a:4c:95:91:ff:cf:1b:93:b5:14:95:62: af:50:74:f5:ea:92:da:37:74:ea:34:69:5d:fb:ea:1d:d9:1c: b3:dd:0e:f4:07:31:1a:47:45:58:d7:de:8f:c6:dc:6c:63:af: 72:d8:e2:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvCcG1Ai3gT4M7/l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk YzFjYjkyYjgtZTY5MC00MzdhLWJhZjMtZTA3Yjc2YmZiYWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71P6bXiOLYGqRyMAYEEF1bXDQanpbmBGq3hy CkGosYcP8lJ3WqB+PTbFu4uoN6QjilhHLkpfMRTJyd71+eebcPg/9sKM/Z7CN61M Q1/UAf3r02saoEwKPbRBepYe6Rqi9UUwnsnvSACbYlKLVtumnlu5L40d0xNIPP5r FpfeOlbrk2bIOPeVplFez57ftyiGezlZ0F8frjCxx2qgehf/gA8GmSxiT1ZOZh+x kDsg8EDMSXmKpzqcFI8HX65jgMagb8ZpUrY+6TAUNwrUihdkxaQNJCSrFTpBun89 3bR1wEPNDSyqvIm33VuJvsk+B2dbmbEKFZfn13c/1YR/FuVeNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC3DXrRppQeQKDdwOqduCSbSXFGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGQ5MDYxNzMtMjQyYi0z MTM3LWE5MTgtODZiM2M0MWE1OGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB7BHS7l9AwHGgrwbhaC+MbIy3krvXHXtiht4Ondk6COPU/IhAoa NDiNWuOAE6Mq/DMdLUaADOHMFkrS32zKCns+zPfY+vF2jadC663r7vpYYJki+bIx bxQwxP+6J92knG+ZDawwh6HRb/0IrwJs1bBZPcnHql9dbNuo7+m6bTAwhoccz/Gm zh5X2DFASYGs9D2FnQp/RynrFZz6Y4qdRixsfvmaxgtmr5IQc+hWaUFP6VhnO8r0 Vv/zvbBiuGGyj55GXQ0bYgxu53BftYpMlZH/zxuTtRSVYq9QdPXqkto3dOo0aV37 6h3ZHLPdDvQHMRpHRVjX3o/G3Gxjr3LY4vg= -----END CERTIFICATE-----Generated at Tue Nov 11 19:38:54 2025 by rpki-client