$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa File: 81f40de9-e302-3803-82c7-d50a229618c2.roa (raw, json) Hash identifier: 7sNrU4YWPhRF38dVSvrJqnTxshqwGJXF/5GZR2To6gQ= Subject key identifier: 9E:A8:8E:04:0C:29:3A:B3:29:E9:6B:E6:F9:24:22:60:53:9F:63:5C Certificate issuer: /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa Certificate serial: 010D0C9F4328584AF5214CB49F157DE549B67D80 Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399989 IP address blocks: 2604:3540::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4c:b4:9f:15:7d:e5:49:b6:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=3b1af85b-ad15-47b5-b8e9-5ba93099bf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2c:c2:d6:86:ca:7b:e8:e3:fa:07:e6:5f:b4: c6:fc:6b:4f:ee:92:e2:36:9c:0a:d5:c1:5d:6c:96: c8:ff:50:98:78:ed:9f:01:0c:b5:e7:80:1b:6b:d4: 76:f1:15:14:9e:73:ab:b5:9b:68:96:ba:fd:cf:70: ee:c7:c9:39:2e:df:48:07:6d:d4:fd:92:28:81:18: d9:86:de:e6:81:e9:4b:17:be:90:a4:6c:22:f4:b6: 2c:7f:ba:74:2e:e7:75:90:0c:3d:c1:da:16:16:a3: b9:14:62:73:be:49:c2:bf:75:95:6e:22:6f:03:53: 62:62:ba:ae:e7:96:bb:89:01:b5:9d:54:a3:68:04: 52:c8:61:28:6c:9a:ca:10:d5:ba:6d:d7:38:62:5a: 6a:5b:f2:dc:f1:f0:8a:8f:d2:9b:f8:f9:df:28:63: da:e4:1e:9c:27:f9:de:a4:1a:9f:fb:c7:43:d2:24: 3f:7c:71:99:9e:44:1b:ef:e1:92:59:2e:57:e4:cf: 26:53:2c:44:0e:f8:6b:0a:8c:ae:92:f2:7f:60:2c: d6:fb:52:3f:88:c4:94:25:04:88:81:17:65:3f:84: d1:fa:c3:e5:ad:e2:94:84:01:07:86:1c:af:32:a7: 66:3a:66:79:57:70:75:dd:d7:2a:e8:72:29:44:90: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A8:8E:04:0C:29:3A:B3:29:E9:6B:E6:F9:24:22:60:53:9F:63:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl X509v3 Authority Key Identifier: keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer sbgp-ipAddrBlock: critical IPv6: 2604:3540::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:fd:36:e8:b0:50:1f:a4:1f:05:05:db:d4:2a:c9:f3:0b:e3: db:96:12:92:6f:d2:1c:63:a5:dc:89:b7:f7:7a:f9:1e:92:36: cb:09:e1:c1:32:af:ce:ed:3c:eb:d7:e7:c4:49:50:c6:7d:99: c4:aa:7c:15:af:92:c1:7c:39:71:58:15:fc:0a:4c:c1:55:ab: 1e:46:84:aa:bb:dc:13:8f:a1:dd:bf:dc:10:0a:e3:1d:7d:2e: 7e:82:94:6b:89:11:49:e1:2e:61:89:1d:ab:a3:21:ee:8a:b5: 96:25:c5:5b:02:83:4c:d8:dd:20:a3:85:74:04:4e:aa:6d:34: 3e:40:61:f6:e6:83:d4:9c:7f:0d:f9:88:a4:44:96:60:79:0c: 12:ad:2e:e6:a9:91:75:03:dc:f3:4f:02:21:a6:81:df:da:dc: 9a:f0:02:e1:02:ff:94:e6:cc:c4:b2:58:b7:97:04:76:57:a3: 33:14:93:80:b0:b8:6d:f5:ba:dd:df:0f:12:a0:b9:82:c1:86: 56:a6:af:1d:b9:f5:15:29:4b:f1:f1:93:ee:aa:c3:a8:e9:42: 17:35:5c:e3:3f:d7:e5:46:3a:07:90:75:ff:08:3b:fc:10:86: 4f:c3:ba:92:87:75:ff:07:fb:ce:11:0f:cb:7b:35:67:c7:8d: a0:4c:e6:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr1IUy0nxV95Um2fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JlNWEyMDEtNzRkMy00NzU5LThkNjUtMTIwYTlhYmM4 ZWFhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk M2IxYWY4NWItYWQxNS00N2I1LWI4ZTktNWJhOTMwOTliZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSzC1obKe+jj+gfmX7TG/GtP7pLiNpwK1cFd bJbI/1CYeO2fAQy154Aba9R28RUUnnOrtZtolrr9z3Dux8k5Lt9IB23U/ZIogRjZ ht7mgelLF76QpGwi9LYsf7p0Lud1kAw9wdoWFqO5FGJzvknCv3WVbiJvA1NiYrqu 55a7iQG1nVSjaARSyGEobJrKENW6bdc4YlpqW/Lc8fCKj9Kb+PnfKGPa5B6cJ/ne pBqf+8dD0iQ/fHGZnkQb7+GSWS5X5M8mUyxEDvhrCoyukvJ/YCzW+1I/iMSUJQSI gRdlP4TR+sPlreKUhAEHhhyvMqdmOmZ5V3B13dcq6HIpRJA8TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ6ojgQMKTqzKelr5vkkImBTn2NcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYmU1 YTIwMS03NGQzLTQ3NTktOGQ2NS0xMjBhOWFiYzhlYWEvODFmNDBkZTktZTMwMi0z ODAzLTgyYzctZDUwYTIyOTYxOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2JlNWEyMDEtNzRkMy00NzU5LThk NjUtMTIwYTlhYmM4ZWFhL2NiZTVhMjAxLTc0ZDMtNDc1OS04ZDY1LTEyMGE5YWJj OGVhYS5jcmwwHwYDVR0jBBgwFoAU384m6KEHITO/EZyqU5TTCL4UVXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYmU1YTIwMS03NGQzLTQ3NTktOGQ2NS0xMjBh OWFiYzhlYWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgQ1QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCr/TbosFAfpB8FBdvUKsnzC+PblhKSb9IcY6Xcibf3evkekjbLCeHB Mq/O7Tzr1+fESVDGfZnEqnwVr5LBfDlxWBX8CkzBVaseRoSqu9wTj6Hdv9wQCuMd fS5+gpRriRFJ4S5hiR2royHuirWWJcVbAoNM2N0go4V0BE6qbTQ+QGH25oPUnH8N +YikRJZgeQwSrS7mqZF1A9zzTwIhpoHf2tya8ALhAv+U5szEsli3lwR2V6MzFJOA sLht9brd3w8SoLmCwYZWpq8dufUVKUvx8ZPuqsOo6UIXNVzjP9flRjoHkHX/CDv8 EIZPw7qSh3X/B/vOEQ/LezVnx42gTOZY -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:40 2025 by rpki-client