$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa File: 7af8c9c8-844f-3da2-9b51-762505ecd85d.roa (raw, json) Hash identifier: vvbqcp+uw8FI8mRs+9+Rxp1yCVzwbIMQrr6KwouX3go= Subject key identifier: AA:AD:2A:82:82:4A:5E:93:4E:9C:A1:80:34:CE:50:65:69:43:02:59 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584BAD624CFD8222BA26EBE76300 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 20253 IP address blocks: 2606:bc40:f103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4c:fd:82:22:ba:26:eb:e7:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=7755d656-69fb-49dd-892e-61fc4bb47f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:ac:2b:5c:01:a9:d3:c5:88:2c:60:c3:d1: e1:b7:95:dd:51:3a:8e:16:7d:fa:e1:89:b7:8f:93: 6d:34:02:85:0d:aa:43:05:90:6c:c6:bb:2c:0a:74: 9e:41:64:a9:75:31:52:c5:c2:65:c1:27:29:35:a8: 38:e8:9c:3f:21:5f:ce:79:f1:50:5e:fb:96:2a:9c: 26:b5:64:ed:21:ea:ba:2e:2e:6c:c8:d3:3c:1e:3d: 70:e6:ad:39:9d:84:35:12:d1:45:9a:17:e9:81:23: b3:f3:46:1e:87:f6:1d:71:09:ad:ed:81:bd:86:e3: d0:10:2c:d9:ed:a8:40:fa:89:95:1c:f7:db:4c:43: 98:ae:cb:f6:db:c8:8f:e5:ef:15:b1:53:f9:f3:20: 04:1c:27:13:d7:f1:87:5c:fe:c8:44:3c:aa:53:33: 2f:43:54:a2:84:d4:2e:6a:28:a8:25:f6:83:e8:8b: e4:d2:16:37:b0:3a:94:34:a3:54:83:8b:e6:30:3c: 11:59:c4:e4:fd:ef:57:3f:48:5b:81:ce:cc:ff:c9: e2:08:56:7f:9e:c5:ed:02:6c:1d:6c:47:d6:62:23: bb:3f:8f:d4:6c:3a:c0:98:40:8d:d3:10:8c:72:73: cd:fa:6a:b2:b9:fe:7d:d4:b9:7a:24:29:6e:79:f3: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AD:2A:82:82:4A:5E:93:4E:9C:A1:80:34:CE:50:65:69:43:02:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f103::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ab:3f:c9:20:46:14:6b:8e:f7:e0:f3:85:9b:39:77:9f:0e: 20:3f:c6:90:af:fa:7d:b7:a4:74:57:c3:4a:16:ee:10:02:7a: ba:54:5d:ea:e3:3e:72:35:91:fa:67:d8:19:5f:b6:fd:48:67: 87:55:94:94:01:6a:ed:02:61:82:ef:ae:3b:c6:b8:51:67:3e: a2:d6:c4:0f:31:f0:5f:cd:e0:eb:ac:ef:04:0d:92:d0:4a:94: ac:53:a6:9e:39:45:21:91:49:eb:2b:f4:38:55:37:2c:8f:43: ff:e7:ed:13:eb:41:35:70:7d:ce:ee:a7:c9:3d:8f:d6:ff:a3: 5a:32:3b:49:e6:f6:5c:69:65:ad:91:d8:d6:29:96:ab:a5:29: bf:4b:22:b3:f3:6a:ff:07:3a:5c:f0:10:5c:db:22:ba:42:7a: 45:6f:a4:88:e8:11:90:7b:4d:1e:39:82:67:0f:5d:20:e4:95: d2:fc:60:a1:24:f6:a6:4d:d0:48:d8:a2:5f:21:cd:9e:33:21: 1c:d0:ce:fa:04:05:5d:f6:2c:7c:3a:73:d5:90:98:0b:a0:8d: 9a:90:a5:8e:39:19:91:b9:d0:04:15:57:6f:65:b5:f3:39:ce: 06:49:21:c4:06:2f:01:7e:bf:8e:6e:29:06:dc:52:e1:0b:44: d3:c6:8e:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYkz9giK6JuvnYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk Nzc1NWQ2NTYtNjlmYi00OWRkLTg5MmUtNjFmYzRiYjQ3ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwSsK1wBqdPFiCxgw9Hht5XdUTqOFn364Ym3 j5NtNAKFDapDBZBsxrssCnSeQWSpdTFSxcJlwScpNag46Jw/IV/OefFQXvuWKpwm tWTtIeq6Li5syNM8Hj1w5q05nYQ1EtFFmhfpgSOz80Yeh/YdcQmt7YG9huPQECzZ 7ahA+omVHPfbTEOYrsv228iP5e8VsVP58yAEHCcT1/GHXP7IRDyqUzMvQ1SihNQu aiioJfaD6Ivk0hY3sDqUNKNUg4vmMDwRWcTk/e9XP0hbgc7M/8niCFZ/nsXtAmwd bEfWYiO7P4/UbDrAmECN0xCMcnPN+mqyuf591Ll6JCluefOMrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKqtKoKCSl6TTpyhgDTOUGVpQwJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvN2FmOGM5YzgtODQ0Zi0z ZGEyLTliNTEtNzYyNTA1ZWNkODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QPED MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABmrP8kgRhRrjvfg84WbOXefDiA/xpCv+n23pHRXw0oW7hACerpU XerjPnI1kfpn2Blftv1IZ4dVlJQBau0CYYLvrjvGuFFnPqLWxA8x8F/N4Ous7wQN ktBKlKxTpp45RSGRSesr9DhVNyyPQ//n7RPrQTVwfc7up8k9j9b/o1oyO0nm9lxp Za2R2NYplqulKb9LIrPzav8HOlzwEFzbIrpCekVvpIjoEZB7TR45gmcPXSDkldL8 YKEk9qZN0EjYol8hzZ4zIRzQzvoEBV32LHw6c9WQmAugjZqQpY45GZG50AQVV29l tfM5zgZJIcQGLwF+v45uKQbcUuELRNPGjo8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:51 2025 by rpki-client