$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa File: dc01c5ca-0ead-3352-878a-4003bf1cc818.roa (raw, json) Hash identifier: Qa47wF22J3pSDUDgeok2g4fVcPZMmXjm5SYlvtFgRMY= Subject key identifier: 3A:90:A2:FA:C0:28:EA:B5:F6:CD:AF:3A:FB:C9:02:A5:4E:5E:D8:83 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584AADF116EF67FD7CC0C26A9480 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 20253 IP address blocks: 2606:bc40:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:16:ef:67:fd:7c:c0:c2:6a:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=6008c001-8a7b-41e9-b234-f53008bc8108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:e7:b5:77:aa:f4:1d:58:cb:c4:05:53:09: 51:bb:35:1e:30:6b:47:70:91:c3:5f:5d:78:d9:18: 2a:d2:9a:19:32:d1:f4:3f:4f:17:91:94:23:e6:05: 31:62:05:1a:81:17:bd:e2:1b:db:3b:bb:31:55:29: 6b:47:6f:5d:d0:21:41:6e:83:e1:c9:85:e0:0c:ca: ef:9f:ac:ba:00:67:32:21:56:3d:43:3b:fa:0a:b9: c9:dd:5b:13:4c:45:5b:38:53:0c:1e:d2:b9:7c:f7: 3b:3e:4d:82:35:8e:f3:8a:de:98:6e:ae:e4:2f:e1: a1:d2:a9:c6:1f:7f:f4:bd:47:d3:83:cc:57:30:5b: 7e:0b:69:47:6f:25:f8:74:71:ab:b6:47:9f:eb:16: 3b:9a:12:65:6f:81:75:ad:a4:17:37:72:40:17:83: 04:73:ee:c0:a5:6d:88:41:ca:21:59:85:55:8d:9a: f4:e5:87:9b:5a:bb:4f:3b:a4:2d:28:1c:28:96:f1: ee:6b:5b:61:b1:9f:e2:9a:0a:fe:78:59:e9:ed:63: ef:8f:99:49:9a:9d:72:75:d4:8e:21:84:fc:3e:b8: 48:26:68:e4:f4:8e:82:04:2e:04:5e:c6:8b:dc:66: cb:09:5d:ce:96:90:3e:d4:9c:2b:d4:f4:81:f7:b2: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:A2:FA:C0:28:EA:B5:F6:CD:AF:3A:FB:C9:02:A5:4E:5E:D8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:61:7f:30:52:2a:1a:68:05:b4:cd:56:80:88:96:fe:91:8c: fa:d9:c0:93:b4:7a:e4:59:01:89:24:44:94:3f:7e:cf:a7:44: 92:e6:7d:bd:1a:f1:ec:aa:45:1e:d2:a3:75:78:48:2a:9a:50: 79:21:90:ef:7c:65:35:74:ed:d6:c6:7a:13:1f:0e:20:ea:31: 2b:9d:0e:7a:80:aa:52:0c:08:12:fe:87:7c:8e:f7:96:f8:24: 70:59:af:33:16:2f:3d:ee:7a:ad:cf:80:33:d6:e8:26:7b:5b: 4d:69:25:45:40:04:ce:22:74:fd:ea:18:f7:f8:39:15:34:bd: 11:a0:90:c4:0f:da:be:c9:e4:3f:2d:08:31:74:2b:73:cf:ce: 81:6c:17:ae:13:22:35:ab:82:5e:b7:c8:9c:2e:6c:a4:a9:dd: ee:cc:ab:44:75:8f:95:c8:f8:8e:83:83:01:84:48:62:c2:4e: da:f3:7b:e1:d9:7d:51:12:3f:e6:aa:79:8d:6c:40:79:87:c9: 93:d3:d6:3f:31:d1:f6:f8:d3:d3:a5:1e:4b:17:43:f3:1a:75: 24:0e:66:b7:78:8c:3a:9d:ed:26:69:ca:ec:e8:ce:4a:6e:c7: 96:65:43:7c:25:3f:59:2c:3d:5f:e5:2a:68:d2:6f:75:92:a2: bc:40:6e:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8RbvZ/18wMJqlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NjAwOGMwMDEtOGE3Yi00MWU5LWIyMzQtZjUzMDA4YmM4MTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiHntXeq9B1Yy8QFUwlRuzUeMGtHcJHDX114 2Rgq0poZMtH0P08XkZQj5gUxYgUagRe94hvbO7sxVSlrR29d0CFBboPhyYXgDMrv n6y6AGcyIVY9Qzv6CrnJ3VsTTEVbOFMMHtK5fPc7Pk2CNY7zit6Ybq7kL+Gh0qnG H3/0vUfTg8xXMFt+C2lHbyX4dHGrtkef6xY7mhJlb4F1raQXN3JAF4MEc+7ApW2I QcohWYVVjZr05YebWrtPO6QtKBwolvHua1thsZ/imgr+eFnp7WPvj5lJmp1yddSO IYT8PrhIJmjk9I6CBC4EXsaL3GbLCV3OlpA+1Jwr1PSB97Is6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqQovrAKOq19s2vOvvJAqVOXtiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGMwMWM1Y2EtMGVhZC0z MzUyLTg3OGEtNDAwM2JmMWNjODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBhfzBSKhpoBbTNVoCIlv6RjPrZwJO0euRZAYkkRJQ/fs+nRJLm fb0a8eyqRR7So3V4SCqaUHkhkO98ZTV07dbGehMfDiDqMSudDnqAqlIMCBL+h3yO 95b4JHBZrzMWLz3ueq3PgDPW6CZ7W01pJUVABM4idP3qGPf4ORU0vRGgkMQP2r7J 5D8tCDF0K3PPzoFsF64TIjWrgl63yJwubKSp3e7Mq0R1j5XI+I6DgwGESGLCTtrz e+HZfVESP+aqeY1sQHmHyZPT1j8x0fb409OlHksXQ/MadSQOZrd4jDqd7SZpyuzo zkpux5ZlQ3wlP1ksPV/lKmjSb3WSorxAbjM= -----END CERTIFICATE-----Generated at Wed Aug 6 04:02:28 2025 by rpki-client