$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa File: de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa (raw, json) Hash identifier: 3YnyeZpibW7dC4IFHTLAivNdVEBf9N0wVxqC+FdsAlE= Subject key identifier: 8E:66:C4:3F:DA:56:EC:A0:57:AA:74:E0:DC:2D:D7:5B:44:17:34:ED Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B0B76B4485B4E627A48D0A300 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 400618 IP address blocks: 2607:8140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b4:48:5b:4e:62:7a:48:d0:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=e7dad781-42be-44ad-87f5-a050148df4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:c1:0f:90:7d:99:23:cb:57:48:11:c0:a8: 17:18:c7:e1:45:8f:c7:65:18:b8:97:fb:1c:f9:48: 5d:b4:34:ce:50:a1:11:ba:92:e9:25:92:62:4e:2e: 04:96:56:b6:ec:6e:9f:0b:66:e6:f2:a4:b0:4f:00: 50:26:44:91:a3:b5:56:d4:d7:86:8e:00:dc:63:3d: 06:e8:e9:9d:2d:43:4c:87:8f:0c:94:11:69:83:b4: e1:71:e7:fc:bb:f5:73:42:c4:05:35:94:92:d3:1e: ca:9d:cc:00:7e:31:77:ea:98:a3:27:30:48:20:97: eb:6d:b7:56:bc:af:0a:9e:fa:d5:56:9b:b0:b6:47: 27:b7:5c:65:df:2f:f7:a9:29:5d:f7:ec:31:6e:38: 98:38:79:4d:4d:05:d0:f8:54:e7:31:df:ef:04:e5: 7c:86:57:7d:83:f3:94:1a:bc:01:4d:8f:5d:59:00: e7:fd:78:65:a6:d8:0b:aa:66:f1:88:4f:9f:e0:ae: 6d:13:9b:63:ac:f9:b3:ad:6e:35:00:98:b4:80:ad: 4a:72:93:79:04:62:f7:7a:1a:53:d9:66:c1:7f:ce: cf:93:f3:f6:d6:1d:41:4a:be:eb:d3:e9:62:de:cc: ae:b4:a4:d6:4c:54:4c:24:e9:f7:a8:21:2f:5c:fd: 5b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:66:C4:3F:DA:56:EC:A0:57:AA:74:E0:DC:2D:D7:5B:44:17:34:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/de3bf3d7-b3eb-32d0-a539-c3cd1d677f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv6: 2607:8140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d9:ef:97:df:95:e4:03:3d:a2:d1:8e:d0:9b:24:08:f3:fd: 90:2e:ef:5d:9c:56:b5:27:54:8c:a9:47:e1:75:d2:22:7f:d0: d5:c7:60:79:0b:49:ec:bc:8c:d2:43:2d:ca:09:af:82:ab:7e: 2b:13:72:a2:41:d5:af:a1:2b:5d:04:7c:c3:57:1c:cb:f0:b3: 4f:6f:7c:01:6b:a2:8b:81:61:c7:80:63:0a:07:88:27:f1:e2: cf:8d:ac:1c:5e:25:55:e5:0a:78:1d:bd:a3:fe:57:a6:4e:e8: 97:82:7f:47:3b:dd:59:72:24:7a:c1:93:bf:97:a5:8f:eb:2c: c4:31:9f:3a:bd:5d:33:ab:66:ba:63:1e:96:7f:00:b1:ad:9c: 5c:87:e1:3c:47:20:54:6f:5e:37:d8:cc:d4:0c:f7:cd:0d:0a: 03:41:d6:eb:28:36:98:42:a2:cd:e2:17:3b:fa:06:21:a3:2c: c0:42:99:76:ad:73:df:d9:71:59:26:2a:e8:40:65:79:3c:57: ba:e0:75:68:32:e4:0f:9e:75:ff:68:62:d3:62:61:d8:dc:9e: 3e:76:b9:cf:7f:6f:22:4b:21:5d:22:4c:fd:12:8c:17:f7:b9: cd:cd:35:53:a8:28:aa:00:64:bb:80:cf:eb:7b:5e:81:e6:e3: 41:46:e5:28 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdrRIW05iekjQowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTdkYWQ3ODEtNDJiZS00NGFkLTg3ZjUtYTA1MDE0OGRmNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjfBD5B9mSPLV0gRwKgXGMfhRY/HZRi4l/sc +UhdtDTOUKERupLpJZJiTi4Ella27G6fC2bm8qSwTwBQJkSRo7VW1NeGjgDcYz0G 6OmdLUNMh48MlBFpg7Thcef8u/VzQsQFNZSS0x7KncwAfjF36pijJzBIIJfrbbdW vK8KnvrVVpuwtkcnt1xl3y/3qSld9+wxbjiYOHlNTQXQ+FTnMd/vBOV8hld9g/OU GrwBTY9dWQDn/XhlptgLqmbxiE+f4K5tE5tjrPmzrW41AJi0gK1KcpN5BGL3ehpT 2WbBf87Pk/P21h1BSr7r0+li3syutKTWTFRMJOn3qCEvXP1bPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI5mxD/aVuygV6p04Nwt11tEFzTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvZGUzYmYzZDctYjNlYi0z MmQwLWE1MzktYzNjZDFkNjc3ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeBQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA52e+X35XkAz2i0Y7QmyQI8/2QLu9dnFa1J1SMqUfhddIif9DVx2B5 C0nsvIzSQy3KCa+Cq34rE3KiQdWvoStdBHzDVxzL8LNPb3wBa6KLgWHHgGMKB4gn 8eLPjawcXiVV5Qp4Hb2j/lemTuiXgn9HO91ZciR6wZO/l6WP6yzEMZ86vV0zq2a6 Yx6WfwCxrZxch+E8RyBUb1432MzUDPfNDQoDQdbrKDaYQqLN4hc7+gYhoyzAQpl2 rXPf2XFZJiroQGV5PFe64HVoMuQPnnX/aGLTYmHY3J4+drnPf28iSyFdIkz9EowX 97nNzTVTqCiqAGS7gM/re16B5uNBRuUo -----END CERTIFICATE-----Generated at Sat Sep 6 07:35:47 2025 by rpki-client