$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa File: 8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa (raw, json) Hash identifier: dGVhHz5KNqmRb674iqvMk/cvkPQjVp7L8GYZxGsaJX8= Subject key identifier: 40:F3:AA:C0:E8:E2:75:DA:A0:8E:58:1E:E2:7A:D3:B4:C2:02:35:CA Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584B8EACEE67E9321B97A5851800 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 20253 IP address blocks: 2606:bc40:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ee:67:e9:32:1b:97:a5:85:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=878eca53-b7a7-48ba-ac24-1e5a4053b544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:30:c4:83:3c:6c:87:06:12:62:93:e5:4f: 4b:a0:95:1f:a7:9f:02:b8:c0:64:ca:2e:a2:c0:15: d6:f6:05:c6:a9:aa:be:a9:d4:64:d8:a9:dd:94:c2: af:bb:59:78:1d:1b:9d:3e:82:51:bc:a0:5f:0a:7a: 54:6d:cc:97:bf:9f:c5:b3:c8:0d:25:32:91:0d:54: 52:0d:15:00:b1:75:75:5f:35:35:15:e7:27:db:95: 65:d5:40:51:fa:53:7b:c2:59:32:43:22:57:7d:87: 2b:d8:52:ea:8f:56:d2:95:5f:4b:96:16:d6:dd:a2: 04:ff:88:8d:fe:f6:f5:2e:7d:c3:58:f0:96:60:83: 1a:75:a8:8e:dc:02:6c:37:46:f1:ce:1c:91:06:e3: 79:b8:a8:a9:09:a2:25:53:76:a6:4e:d7:3d:a1:fc: 6c:e4:79:43:02:61:66:05:94:14:2a:f8:ef:1c:53: 54:ee:48:f9:77:a7:ff:f1:2a:69:33:a9:a9:8e:e6: a2:a5:a5:f7:8d:3c:79:be:45:0c:dc:00:4e:ad:f7: b8:8c:bf:ff:f8:85:5e:d9:45:c3:f3:81:6c:47:4d: bd:a5:4f:98:42:42:d4:0b:eb:ed:10:2e:1f:6c:54: 57:d9:6c:d2:0f:c3:e2:c7:02:e3:04:02:da:50:18: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F3:AA:C0:E8:E2:75:DA:A0:8E:58:1E:E2:7A:D3:B4:C2:02:35:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ca:dc:a6:b4:48:77:9a:dc:10:73:a0:5c:84:78:00:95:2e: b5:12:d9:f9:c8:60:54:eb:4a:0f:a5:54:ec:72:22:fe:bd:cd: 74:f5:ce:fc:72:08:e6:6c:89:bc:9a:aa:41:4b:1b:0e:94:95: f8:9c:69:f4:8e:fb:a9:57:4e:5f:44:e3:0e:f1:5a:14:c3:d2: 5a:91:1e:f4:60:df:78:f0:44:28:bb:dc:51:bb:97:28:07:5b: ce:bc:56:80:21:8d:05:cf:7c:aa:18:e2:c4:f9:d4:6d:ae:0f: 50:af:1b:6f:b0:dd:1d:55:a2:97:73:fd:84:06:79:a0:4b:a0: 7c:79:88:d1:9b:c7:1d:53:e7:ff:49:78:01:41:51:93:e3:c7: 1d:fa:6a:e8:b0:e7:e6:49:04:d4:56:27:0a:34:0b:b4:b9:59: 4b:b3:0a:22:22:77:38:5a:a4:0a:45:71:ce:d2:3e:a3:d9:aa: d3:cc:7b:30:84:64:b7:aa:2e:a2:61:1d:8c:3a:80:68:1d:a9: 9a:ef:9c:ed:cd:1b:e7:d8:79:96:b0:e3:19:b3:e6:59:dc:bc: a0:2c:d3:26:a6:80:90:e6:77:bc:ef:a5:d1:b2:04:9c:f3:4e: 3e:1e:c7:b4:b9:7f:9c:62:b3:82:13:87:8e:73:0e:03:dc:c6: 04:ce:90:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrO5n6TIbl6WFGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ODc4ZWNhNTMtYjdhNy00OGJhLWFjMjQtMWU1YTQwNTNiNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQQwxIM8bIcGEmKT5U9LoJUfp58CuMBkyi6i wBXW9gXGqaq+qdRk2KndlMKvu1l4HRudPoJRvKBfCnpUbcyXv5/Fs8gNJTKRDVRS DRUAsXV1XzU1Fecn25Vl1UBR+lN7wlkyQyJXfYcr2FLqj1bSlV9LlhbW3aIE/4iN /vb1Ln3DWPCWYIMadaiO3AJsN0bxzhyRBuN5uKipCaIlU3amTtc9ofxs5HlDAmFm BZQUKvjvHFNU7kj5d6f/8SppM6mpjuaipaX3jTx5vkUM3ABOrfe4jL//+IVe2UXD 84FsR029pU+YQkLUC+vtEC4fbFRX2WzSD8PixwLjBALaUBjj2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEDzqsDo4nXaoI5YHuJ607TCAjXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODAyOWNhMDgtOGY1ZS0z OWJiLTk4M2QtOWNkZTFkMGMyYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKvK3Ka0SHea3BBzoFyEeACVLrUS2fnIYFTrSg+lVOxyIv69zXT1 zvxyCOZsibyaqkFLGw6UlficafSO+6lXTl9E4w7xWhTD0lqRHvRg33jwRCi73FG7 lygHW868VoAhjQXPfKoY4sT51G2uD1CvG2+w3R1Vopdz/YQGeaBLoHx5iNGbxx1T 5/9JeAFBUZPjxx36auiw5+ZJBNRWJwo0C7S5WUuzCiIidzhapApFcc7SPqPZqtPM ezCEZLeqLqJhHYw6gGgdqZrvnO3NG+fYeZaw4xmz5lncvKAs0yamgJDmd7zvpdGy BJzzTj4ex7S5f5xis4ITh45zDgPcxgTOkHo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:16 2025 by rpki-client