$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa File: dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa (raw, json) Hash identifier: GecdstngMj25HAyp3IhxGy2XjzxGR4YZRbWdmEhaEtY= Subject key identifier: A1:1E:C4:48:A2:19:E1:A4:CC:D7:7A:09:C6:D3:DE:3C:36:25:C5:0B Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584B0B769CDEE300E3B9BF1E4900 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 400065 IP address blocks: 2604:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9c:de:e3:00:e3:b9:bf:1e:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=99a39ddf-8206-43f4-8a87-aeef703a499c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:a9:df:74:ef:52:3a:4b:05:c4:63:2e:3c: 46:a6:f6:22:c5:d2:12:0c:ba:60:05:e9:65:a9:0d: 5e:a2:c2:3b:6a:11:66:2a:c6:d2:d0:bd:c3:e0:d9: c8:cf:8d:16:4a:4c:1a:30:b6:11:fc:9e:3f:4a:e1: 8d:20:4d:bf:1a:34:49:af:25:49:85:6d:c1:1d:60: 93:22:a2:fa:3b:ba:10:28:6c:98:0a:13:77:d6:d8: 8c:c3:3f:66:48:8f:55:da:e5:c4:fc:d1:74:ba:cb: 4c:e5:1f:7b:9d:5b:3f:01:dc:fe:57:94:4e:a4:50: a5:93:6e:c6:25:3f:2b:cb:68:5b:53:76:1d:03:e1: 64:30:f3:4f:82:a3:df:67:6d:26:83:b6:23:30:9b: 8d:48:59:31:18:08:36:5a:d2:14:0e:ac:69:86:94: 39:06:25:bb:02:7d:0a:fb:62:47:b5:66:46:a5:d3: bd:63:73:a2:1e:3c:dd:59:a5:07:fe:8a:a0:4f:a1: 79:ab:0b:93:2d:b7:70:94:40:74:a8:49:22:24:4c: 1e:27:5a:66:d0:0f:7d:41:24:73:0d:f3:73:32:9d: 03:9a:0e:a5:71:fe:09:6d:e3:53:89:12:48:35:9a: ee:c5:54:cc:be:cc:b8:56:2a:af:c1:d4:f5:b8:a8: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1E:C4:48:A2:19:E1:A4:CC:D7:7A:09:C6:D3:DE:3C:36:25:C5:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:db:1a:53:26:45:fc:54:c1:f9:44:1b:88:c9:71:0d:33:9c: 19:a3:74:b2:57:01:88:10:c2:50:eb:9d:2d:b3:9f:3b:21:0a: f3:ea:58:f4:33:c9:27:84:e1:79:67:9d:c7:7c:94:2c:ca:b3: 00:ae:84:02:cb:cc:fc:3a:ad:1c:23:ed:b2:14:59:ab:c5:cd: 1e:f7:81:11:de:5e:df:75:73:6c:43:1a:62:4d:99:60:1c:be: 4f:f0:8e:e5:6f:01:dd:a5:1e:09:bb:a4:2c:7e:86:5e:fb:e2: 8d:2e:8e:5b:1c:a6:94:b9:1e:f6:f0:15:13:a6:21:29:9e:33: 0b:eb:0d:32:03:70:fd:89:27:79:dd:2d:46:d7:14:00:dd:f1: 1f:63:52:45:3d:12:7a:c3:65:67:bb:18:bb:25:e5:b0:90:53: c7:20:00:cf:6e:a4:c5:59:f1:a8:a1:1b:23:d4:60:ce:6b:95: 40:f2:8c:21:75:c5:ee:76:bb:74:5d:e3:6a:0f:c4:5b:ef:b1: a4:4c:9b:54:3b:e4:21:55:95:59:e1:de:27:9b:39:cd:c6:70: 5f:d0:05:9f:84:e0:30:65:34:e9:db:d0:a9:26:70:42:5d:25: 40:b4:a9:24:29:4f:6a:9d:26:8c:e6:f2:eb:b3:0d:11:a8:fc: 03:d3:e3:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLdpze4wDjub8eSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OTlhMzlkZGYtODIwNi00M2Y0LThhODctYWVlZjcwM2E0OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovup33TvUjpLBcRjLjxGpvYixdISDLpgBell qQ1eosI7ahFmKsbS0L3D4NnIz40WSkwaMLYR/J4/SuGNIE2/GjRJryVJhW3BHWCT IqL6O7oQKGyYChN31tiMwz9mSI9V2uXE/NF0ustM5R97nVs/Adz+V5ROpFClk27G JT8ry2hbU3YdA+FkMPNPgqPfZ20mg7YjMJuNSFkxGAg2WtIUDqxphpQ5BiW7An0K +2JHtWZGpdO9Y3OiHjzdWaUH/oqgT6F5qwuTLbdwlEB0qEkiJEweJ1pm0A99QSRz DfNzMp0Dmg6lcf4JbeNTiRJINZruxVTMvsy4ViqvwdT1uKh4EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKEexEiiGeGkzNd6CcbT3jw2JcULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZGQ0ZDg0ZGItN2EzZC0z NWFkLWExZGItNmU3NzBjMWM3NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILbGlMmRfxUwflEG4jJcQ0znBmjdLJXAYgQwlDrnS2znzshCvPq WPQzySeE4Xlnncd8lCzKswCuhALLzPw6rRwj7bIUWavFzR73gRHeXt91c2xDGmJN mWAcvk/wjuVvAd2lHgm7pCx+hl774o0ujlscppS5HvbwFROmISmeMwvrDTIDcP2J J3ndLUbXFADd8R9jUkU9EnrDZWe7GLsl5bCQU8cgAM9upMVZ8aihGyPUYM5rlUDy jCF1xe52u3Rd42oPxFvvsaRMm1Q75CFVlVnh3iebOc3GcF/QBZ+E4DBlNOnb0Kkm cEJdJUC0qSQpT2qdJozm8uuzDRGo/APT49Q= -----END CERTIFICATE-----Generated at Thu Sep 11 12:10:01 2025 by rpki-client