$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa File: bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa (raw, json) Hash identifier: Vi16Dp8IMqM4Ep/FE6Rc+xSKef0Deg7f1SRdGh//TdU= Subject key identifier: CC:CA:36:70:F3:4D:E0:9D:B1:16:B3:D2:C0:DC:E9:43:E9:9A:2A:62 Certificate issuer: /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348 Certificate serial: 010D0C9F4328584B68FC9E3070FE2511E6B62E00 Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 36221 IP address blocks: 2607:f7c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9e:30:70:fe:25:11:e6:b6:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=fe445c03-62b4-4c00-a8bd-bb4ae875cd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bc:49:c4:ad:83:34:41:ce:ac:ce:ec:e4:4d: 92:86:f6:1b:d3:4c:94:5a:2b:84:cb:d8:2b:17:68: 2e:d1:c3:e2:9b:c3:e1:54:d9:ee:d2:87:af:d7:97: ca:31:17:d9:7e:89:fb:6d:19:27:52:be:06:96:af: 2e:df:ba:6e:69:71:33:4a:12:b5:91:5f:db:87:45: b5:27:b4:be:d9:2d:a7:aa:de:42:22:c1:75:98:2d: 1d:84:05:0a:20:56:49:e0:8b:d2:6d:9b:09:ad:81: 6f:c2:c1:e1:5a:a6:70:4d:97:3f:b1:87:94:bd:b9: a9:db:33:9a:31:67:0b:ae:9a:ef:36:1d:dd:96:ee: 05:26:a1:3d:f7:6b:29:99:da:8a:6a:c7:f7:4a:cb: f1:e6:22:21:f8:2d:1c:7d:35:e3:1f:c7:74:ec:2a: 29:ff:25:27:8e:f8:0e:67:60:08:a3:a7:37:57:bd: c7:29:c3:b5:71:93:9c:d0:bf:32:57:2c:bc:5b:ec: 21:c6:b0:9b:f1:0d:0b:a2:10:9f:a1:fb:d3:5b:56: 8b:93:f7:0e:86:3d:85:89:8e:18:0c:c7:73:d9:73: 1a:6a:ce:b0:15:54:d1:f5:86:8a:7f:15:90:7c:95: 56:40:94:1c:df:87:94:93:22:91:29:70:08:d3:0f: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CA:36:70:F3:4D:E0:9D:B1:16:B3:D2:C0:DC:E9:43:E9:9A:2A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl X509v3 Authority Key Identifier: keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer sbgp-ipAddrBlock: critical IPv6: 2607:f7c8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:29:df:9d:30:77:aa:67:07:ab:d4:4e:e9:f7:23:28:17:50: c5:49:0e:68:a9:46:8a:f0:43:4d:41:ed:04:02:86:47:85:2e: 5b:84:a2:9c:33:0b:23:f0:24:e0:3d:01:1f:6b:8b:44:e8:34: 8a:df:07:f9:7e:1b:d2:38:89:c2:de:ea:73:61:8f:48:7e:6d: ef:b6:a5:6a:6e:a3:6b:c9:36:a6:87:0c:a0:68:37:d6:d8:f9: 4d:97:ea:5a:34:3a:c8:1c:f5:42:99:b9:59:ad:d8:6b:a5:5a: 17:37:92:40:47:58:a8:0f:41:3f:26:14:eb:51:ff:0c:c0:3e: 66:b3:de:05:73:a2:82:4e:d8:1c:f6:c0:6d:50:e2:24:8b:bd: 9f:20:a7:81:c0:59:57:12:cf:42:a1:ab:d7:c1:2c:63:c4:e2: 62:5c:6c:ad:2c:0d:5f:bb:58:9a:75:78:fb:63:1d:e0:ae:31: 0c:b8:cc:3b:59:e6:d6:4b:f3:64:c0:65:63:4a:07:2e:60:64: ca:1d:fd:c2:ca:aa:af:c0:08:ff:1f:3e:80:00:8b:a0:08:66: 2e:8f:67:6e:f5:ae:d4:da:c4:ba:6c:ad:92:93:ba:7b:df:30: ac:9e:8f:c3:fe:ab:e8:a0:71:08:d5:af:07:3f:4c:8f:ba:bb: c5:4d:74:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEto/J4wcP4lEea2LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJjOTIyZjUtZDJmZS00NGUzLTk1NDEtODRjNDZjN2Q4 MzQ4MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZmU0NDVjMDMtNjJiNC00YzAwLWE4YmQtYmI0YWU4NzVjZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLxJxK2DNEHOrM7s5E2ShvYb00yUWiuEy9gr F2gu0cPim8PhVNnu0oev15fKMRfZfon7bRknUr4Glq8u37puaXEzShK1kV/bh0W1 J7S+2S2nqt5CIsF1mC0dhAUKIFZJ4IvSbZsJrYFvwsHhWqZwTZc/sYeUvbmp2zOa MWcLrprvNh3dlu4FJqE992spmdqKasf3Ssvx5iIh+C0cfTXjH8d07Cop/yUnjvgO Z2AIo6c3V73HKcO1cZOc0L8yVyy8W+whxrCb8Q0LohCfofvTW1aLk/cOhj2FiY4Y DMdz2XMaas6wFVTR9YaKfxWQfJVWQJQc34eUkyKRKXAI0w8aOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMzKNnDzTeCdsRaz0sDc6UPpmipiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMmM5 MjJmNS1kMmZlLTQ0ZTMtOTU0MS04NGM0NmM3ZDgzNDgvYmJmODJjOGYtZDk3ZC0z MWI1LTg3MTktNzBhN2NkMGRjMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTJjOTIyZjUtZDJmZS00NGUzLTk1 NDEtODRjNDZjN2Q4MzQ4LzEyYzkyMmY1LWQyZmUtNDRlMy05NTQxLTg0YzQ2Yzdk ODM0OC5jcmwwHwYDVR0jBBgwFoAU/gzZERlPbkSIaK/Z4atNjEZ3QrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMmM5MjJmNS1kMmZlLTQ0ZTMtOTU0MS04NGM0 NmM3ZDgzNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf3yDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0Kd+dMHeqZwer1E7p9yMoF1DFSQ5oqUaK8ENNQe0EAoZHhS5bhKKc Mwsj8CTgPQEfa4tE6DSK3wf5fhvSOInC3upzYY9Ifm3vtqVqbqNryTamhwygaDfW 2PlNl+paNDrIHPVCmblZrdhrpVoXN5JAR1ioD0E/JhTrUf8MwD5ms94Fc6KCTtgc 9sBtUOIki72fIKeBwFlXEs9CoavXwSxjxOJiXGytLA1fu1iadXj7Yx3grjEMuMw7 WebWS/NkwGVjSgcuYGTKHf3CyqqvwAj/Hz6AAIugCGYuj2du9a7U2sS6bK2Sk7p7 3zCsno/D/qvooHEI1a8HP0yPurvFTXSX -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:01 2025 by rpki-client