$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/fb09d72b-00b3-3d66-80ba-11207add3752.roa File: fb09d72b-00b3-3d66-80ba-11207add3752.roa (raw, json) Hash identifier: bLiJBF6+2ndzaNJFC77llJwfM/Ccb4uoSMUHHSV4sa4= Subject key identifier: 5C:88:8A:9A:02:CC:F6:4A:69:FD:DA:0A:44:52:A8:4B:F0:2E:6E:03 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584BA6679E727E3D920106D82180 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/fb09d72b-00b3-3d66-80ba-11207add3752.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 397610 IP address blocks: 2605:4bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9e:72:7e:3d:92:01:06:d8:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=2fd34a45-5670-495f-a6b9-7367eb8b7da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:16:7b:17:6a:ca:aa:ba:a1:34:13:d2:ba: 72:d6:20:ac:ac:1c:36:9a:dc:d1:5c:0a:fe:dc:2b: d3:36:31:21:2c:1c:d9:eb:ca:ba:0c:15:d8:39:d6: 14:12:45:cf:0b:c8:b8:56:9a:1f:70:ff:86:75:00: 24:b2:fe:18:1d:c7:ce:3a:c7:72:ce:74:7b:e5:71: 73:4f:61:7a:8f:a2:f7:3a:12:0b:9b:4a:7a:1a:25: 9e:d7:02:47:9c:ed:bd:fc:2d:0a:7e:f1:78:ed:dc: 6c:06:60:96:5a:2f:07:6e:4d:00:1b:d2:3c:35:0c: 5e:4d:3f:7b:10:0e:24:b6:bb:0a:a5:3b:bc:cd:46: d8:aa:d3:14:e9:93:54:86:9b:f1:6a:cd:e2:fe:fd: 16:75:e9:37:5b:31:e5:a5:b1:c8:4f:69:b6:f3:73: 8f:6e:cf:a2:0c:e8:28:73:6b:a9:14:44:77:a5:46: d5:42:48:6b:82:1b:33:ef:65:b0:cc:57:b9:93:79: e6:28:08:0d:cd:04:0e:73:e5:ac:c1:d3:41:31:3a: a7:d4:04:f0:b6:21:85:17:fc:59:c3:fc:08:02:06: a2:e8:5b:c2:53:88:46:7b:dd:09:1f:7a:5f:5b:70: b0:32:c4:0a:a3:ac:da:e8:d1:45:22:03:de:fb:2e: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:8A:9A:02:CC:F6:4A:69:FD:DA:0A:44:52:A8:4B:F0:2E:6E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/fb09d72b-00b3-3d66-80ba-11207add3752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv6: 2605:4bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a3:47:66:ca:a6:05:2a:1a:4e:c4:00:1b:29:5e:88:7f:35: 64:cf:3b:3d:53:dc:4a:62:c8:17:94:1c:7c:5b:5e:9e:ba:a9: 6a:78:53:90:4b:ab:c0:97:49:ab:75:36:4d:aa:07:38:51:6a: 8a:5e:e3:81:50:c0:68:3d:1d:65:bf:1e:21:7d:47:7b:9d:1d: 8b:80:72:f5:6d:b4:0e:c6:26:eb:86:2a:2e:52:6c:37:ea:45: f3:0c:a9:58:1f:56:f5:59:f8:bd:77:9e:66:ae:b8:76:a4:ad: c7:3e:a8:1e:1b:51:e9:ef:e3:36:f7:f0:24:d1:95:c7:f9:6b: 27:04:05:37:0c:9c:b0:70:ad:0c:0e:ba:72:36:d7:aa:b5:bc: b3:4c:40:6d:02:5e:79:3a:fb:c1:5d:8b:00:95:a1:5d:0a:5e: d5:99:88:92:31:49:c4:2a:d6:1a:47:c7:d4:7f:16:66:64:a3: 9f:1a:3a:68:34:77:73:07:51:b1:7d:15:93:cb:2e:a9:7d:04: 2f:4b:fd:27:10:28:b6:3b:9b:df:31:1e:80:84:d8:85:73:20: 17:04:3e:12:1d:9f:ea:04:48:5c:c8:4b:8d:52:14:b0:8e:24: 28:7d:30:80:1f:37:04:1d:60:d6:93:80:fc:11:f9:9f:9e:1a: 61:71:eb:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEumZ55yfj2SAQbYIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MmZkMzRhNDUtNTY3MC00OTVmLWE2YjktNzM2N2ViOGI3ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf0Wexdqyqq6oTQT0rpy1iCsrBw2mtzRXAr+ 3CvTNjEhLBzZ68q6DBXYOdYUEkXPC8i4VpofcP+GdQAksv4YHcfOOsdyznR75XFz T2F6j6L3OhILm0p6GiWe1wJHnO29/C0KfvF47dxsBmCWWi8Hbk0AG9I8NQxeTT97 EA4ktrsKpTu8zUbYqtMU6ZNUhpvxas3i/v0Wdek3WzHlpbHIT2m283OPbs+iDOgo c2upFER3pUbVQkhrghsz72WwzFe5k3nmKAgNzQQOc+WswdNBMTqn1ATwtiGFF/xZ w/wIAgai6FvCU4hGe90JH3pfW3CwMsQKo6za6NFFIgPe+y6JxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFyIipoCzPZKaf3aCkRSqEvwLm4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZmIwOWQ3MmItMDBiMy0z ZDY2LTgwYmEtMTEyMDdhZGQzNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVLwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYo0dmyqYFKhpOxAAbKV6IfzVkzzs9U9xKYsgXlBx8W16euqlqeFOQ S6vAl0mrdTZNqgc4UWqKXuOBUMBoPR1lvx4hfUd7nR2LgHL1bbQOxibrhiouUmw3 6kXzDKlYH1b1Wfi9d55mrrh2pK3HPqgeG1Hp7+M29/Ak0ZXH+WsnBAU3DJywcK0M DrpyNteqtbyzTEBtAl55OvvBXYsAlaFdCl7VmYiSMUnEKtYaR8fUfxZmZKOfGjpo NHdzB1GxfRWTyy6pfQQvS/0nECi2O5vfMR6AhNiFcyAXBD4SHZ/qBEhcyEuNUhSw jiQofTCAHzcEHWDWk4D8Efmfnhphcesp -----END CERTIFICATE-----Generated at Wed Nov 5 13:25:02 2025 by rpki-client