$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa File: a7013767-de4a-3bb7-8745-c92717794f3e.roa (raw, json) Hash identifier: DHH6W1oArGif41f5bHObWniNHmJKbbr6YSM5W39v658= Subject key identifier: 87:1A:DE:44:F5:97:80:57:48:A5:23:EA:8B:E3:12:4A:81:58:5D:48 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584AB4EB74F01C4EE984909C75A0 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 20253 IP address blocks: 2606:bc40:f1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:74:f0:1c:4e:e9:84:90:9c:75:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=5b1603d6-41bf-487a-84ba-8c14f8154cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:34:47:6b:42:fd:02:7a:20:b1:d4:91:54: f0:b6:20:e4:74:fc:f2:49:c2:26:b3:bf:b9:90:eb: c5:c7:43:82:a9:0f:d3:70:d8:67:49:dc:ca:a8:93: 3b:f7:70:d4:44:74:9f:9e:bf:2a:45:28:36:3c:2c: ab:12:c0:48:f1:a5:9b:fb:4c:c9:f2:03:15:7c:96: 89:85:55:ee:bb:3d:aa:6d:8d:53:b9:5c:f9:22:05: 91:e6:d1:d4:84:00:c5:55:01:a6:c0:57:df:8f:4e: d0:e2:53:75:ac:8b:50:8f:e8:37:c0:b5:ab:87:12: 50:98:0d:ba:59:28:b2:cf:97:85:54:8f:a3:e6:01: ad:28:f9:ae:cd:91:62:5b:f2:b3:5e:7e:b2:58:bd: 54:62:c7:87:ab:85:ac:a3:07:55:fa:6f:f6:e5:78: 34:f2:b4:a1:43:58:1b:5a:ab:eb:32:a1:92:3b:fe: 3e:29:46:23:b8:33:31:a3:29:06:22:e7:dc:6b:a6: 79:da:5f:10:7b:a4:11:86:70:47:c7:a0:b4:9c:bd: 30:7c:31:25:40:a7:37:ed:a4:d2:a8:c3:b2:01:55: 0c:6e:50:a9:44:75:2a:26:96:86:27:be:75:da:57: 42:67:29:1c:78:a2:b9:5e:86:ab:53:e0:61:3c:1b: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1A:DE:44:F5:97:80:57:48:A5:23:EA:8B:E3:12:4A:81:58:5D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:01:fe:73:b3:9a:1e:57:f3:ca:2f:dc:e0:52:d4:86:e8:bb: 8a:73:67:a3:3b:61:72:e0:59:b7:fb:76:ed:ac:a1:db:a9:7c: f7:03:53:a6:e6:89:3a:93:3f:ed:15:31:a5:9b:60:8d:bd:64: e9:e8:0b:81:81:35:b9:d1:b8:b5:07:7e:14:b8:e6:56:b0:97: c0:c8:b7:8f:f0:86:15:45:fb:d3:50:d2:cb:5d:6a:3c:17:cd: 6b:58:7a:ad:a5:f4:31:93:7d:94:9f:d0:52:b7:ba:dc:59:84: 21:11:ca:3f:05:fe:cb:da:f0:2a:18:01:b5:11:2c:35:dc:bc: 33:ae:84:05:dd:7c:c9:c8:7f:0c:4c:d5:05:ce:3d:ea:30:a9: 66:97:02:1f:ad:e1:a2:8d:f5:ba:0e:4f:ee:28:c2:0f:76:e9: ab:bc:27:e8:89:24:53:60:00:ba:81:56:3c:42:5d:97:96:10: f3:a1:0e:af:12:5b:01:85:99:7e:bc:57:04:34:3b:d3:ca:64: 75:d1:5a:45:bb:ab:6f:1b:dc:a1:57:47:99:d9:bb:f3:8a:92: be:67:77:44:2e:8e:7a:15:78:2c:e5:1a:eb:c1:3a:ed:af:39: 55:c7:14:7e:54:10:52:e2:f6:a7:f9:a3:98:8c:57:8e:e2:65: cd:5f:ac:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq063TwHE7phJCcdaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NWIxNjAzZDYtNDFiZi00ODdhLTg0YmEtOGMxNGY4MTU0Y2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVk0R2tC/QJ6ILHUkVTwtiDkdPzyScIms7+5 kOvFx0OCqQ/TcNhnSdzKqJM793DURHSfnr8qRSg2PCyrEsBI8aWb+0zJ8gMVfJaJ hVXuuz2qbY1TuVz5IgWR5tHUhADFVQGmwFffj07Q4lN1rItQj+g3wLWrhxJQmA26 WSiyz5eFVI+j5gGtKPmuzZFiW/KzXn6yWL1UYseHq4WsowdV+m/25Xg08rShQ1gb WqvrMqGSO/4+KUYjuDMxoykGIufca6Z52l8Qe6QRhnBHx6C0nL0wfDElQKc37aTS qMOyAVUMblCpRHUqJpaGJ7512ldCZykceKK5XoarU+BhPBtHSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIca3kT1l4BXSKUj6ovjEkqBWF1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvYTcwMTM3NjctZGU0YS0z YmI3LTg3NDUtYzkyNzE3Nzk0ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8d MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALsB/nOzmh5X88ov3OBS1Ibou4pzZ6M7YXLgWbf7du2sodupfPcD U6bmiTqTP+0VMaWbYI29ZOnoC4GBNbnRuLUHfhS45lawl8DIt4/whhVF+9NQ0std ajwXzWtYeq2l9DGTfZSf0FK3utxZhCERyj8F/sva8CoYAbURLDXcvDOuhAXdfMnI fwxM1QXOPeowqWaXAh+t4aKN9boOT+4owg926au8J+iJJFNgALqBVjxCXZeWEPOh Dq8SWwGFmX68VwQ0O9PKZHXRWkW7q28b3KFXR5nZu/OKkr5nd0QujnoVeCzlGuvB Ou2vOVXHFH5UEFLi9qf5o5iMV47iZc1frEM= -----END CERTIFICATE-----Generated at Tue Aug 5 08:22:01 2025 by rpki-client