$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa File: ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa (raw, json) Hash identifier: JxMugsYrOiRHlPTxkSDlZr4gsUGFmm3i/5ibprK6ybA= Subject key identifier: AA:35:5B:1A:D4:E2:B0:DF:E5:E7:A0:50:8D:16:C2:F8:AD:7A:CA:19 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584B0B769CABF0DE9AA42ACF2480 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 559 IP address blocks: 2604:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9c:ab:f0:de:9a:a4:2a:cf:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=c72b360c-9cb3-4daa-8776-9a64973e855f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:05:4b:ed:d1:41:f0:70:39:95:62:d0:60: 05:b4:e5:50:bf:87:bc:7f:d5:a0:11:fe:5a:84:b1: 7e:0f:03:6c:72:53:62:6f:77:f7:d7:d3:0d:c4:79: 11:f2:4b:ad:40:6f:f0:2a:ee:cc:e6:d8:16:93:73: fe:da:c8:fb:0b:98:05:5f:d3:bb:6d:43:88:d4:3f: 2c:82:8c:2f:bf:25:65:e6:b8:ad:6f:4c:18:ef:71: ef:b6:e6:ee:0a:f5:51:dc:13:b8:df:f8:59:57:be: 16:41:b9:c1:c0:d0:d0:20:29:d4:3a:7d:f4:de:11: 95:df:44:9d:3c:1b:7e:03:2b:3b:ff:60:5f:88:a4: 95:6c:7e:b4:6b:37:38:e1:53:0c:e7:bc:9e:49:0f: 3f:d8:3c:53:3d:53:79:6e:cc:4a:f2:28:af:36:fc: a6:77:e1:0c:8b:89:09:81:e3:33:87:ce:c6:90:40: c4:d8:35:23:51:cc:f1:5b:60:79:c5:cf:93:05:0f: d2:23:76:55:b9:38:49:89:8d:be:b8:26:ad:61:51: fa:5d:e4:d3:b8:13:e0:ea:ec:f6:7c:07:9a:2a:c1: 67:de:b1:69:30:b3:5d:a9:c3:57:2e:ec:b8:9e:62: 25:fd:7d:9a:5e:04:34:53:4e:41:8f:b7:91:41:99: bd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:35:5B:1A:D4:E2:B0:DF:E5:E7:A0:50:8D:16:C2:F8:AD:7A:CA:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/ebf9b2cc-5b56-304a-9601-ce7416e9e1d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3e:33:cc:65:f7:6f:99:85:ce:03:ab:10:dd:19:60:a5:f1: e4:50:f8:9d:7a:38:60:89:ab:82:ec:cb:cd:93:e8:cd:e2:19: b5:05:a1:0a:75:cd:ae:90:d5:c5:d2:f7:78:ab:1a:0d:a5:10: 64:9d:48:c7:4d:d7:3a:9b:98:40:c8:b1:0a:50:9f:3f:4d:e7: 94:70:c2:36:1f:cd:21:73:f6:bf:12:75:61:e7:fe:3f:d0:79: 1d:98:cf:ab:b8:9e:6a:bf:4e:a6:63:02:45:83:b6:57:7a:44: 10:aa:6b:b9:bf:91:4d:f2:d0:6d:ac:7e:74:19:a3:cb:aa:64: a0:c1:47:b4:92:c2:e9:c9:8e:9a:ac:fa:b1:24:05:8a:7d:d8: 1c:83:af:48:be:5f:7c:9d:32:04:cc:17:b6:35:5f:71:c1:ae: 15:3b:33:4c:7d:3c:e4:cf:0a:7a:d0:e5:f8:97:18:e8:02:96: 10:f7:b6:c7:ef:76:80:b1:c2:9f:ed:eb:59:2c:53:74:e3:6e: f3:29:58:b0:3a:c6:ea:77:81:54:90:cf:b0:ae:f7:12:aa:2d: d0:df:e9:77:1b:ae:2d:0d:11:b5:5a:eb:27:25:7e:a2:b0:65: 71:83:df:23:a8:af:46:ec:a0:d1:a9:bf:7f:f3:1f:d0:c1:b8: a9:df:85:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLdpyr8N6apCrPJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YzcyYjM2MGMtOWNiMy00ZGFhLTg3NzYtOWE2NDk3M2U4NTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnIFS+3RQfBwOZVi0GAFtOVQv4e8f9WgEf5a hLF+DwNsclNib3f319MNxHkR8kutQG/wKu7M5tgWk3P+2sj7C5gFX9O7bUOI1D8s gowvvyVl5ritb0wY73HvtubuCvVR3BO43/hZV74WQbnBwNDQICnUOn303hGV30Sd PBt+Ays7/2BfiKSVbH60azc44VMM57yeSQ8/2DxTPVN5bsxK8iivNvymd+EMi4kJ geMzh87GkEDE2DUjUczxW2B5xc+TBQ/SI3ZVuThJiY2+uCatYVH6XeTTuBPg6uz2 fAeaKsFn3rFpMLNdqcNXLuy4nmIl/X2aXgQ0U05Bj7eRQZm9cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKo1WxrU4rDf5eegUI0WwvitesoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZWJmOWIyY2MtNWI1Ni0z MDRhLTk2MDEtY2U3NDE2ZTllMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIU+M8xl92+Zhc4DqxDdGWCl8eRQ+J16OGCJq4Lsy82T6M3iGbUF oQp1za6Q1cXS93irGg2lEGSdSMdN1zqbmEDIsQpQnz9N55RwwjYfzSFz9r8SdWHn /j/QeR2Yz6u4nmq/TqZjAkWDtld6RBCqa7m/kU3y0G2sfnQZo8uqZKDBR7SSwunJ jpqs+rEkBYp92ByDr0i+X3ydMgTMF7Y1X3HBrhU7M0x9POTPCnrQ5fiXGOgClhD3 tsfvdoCxwp/t61ksU3TjbvMpWLA6xup3gVSQz7Cu9xKqLdDf6Xcbri0NEbVa6ycl fqKwZXGD3yOor0bsoNGpv3/zH9DBuKnfhVI= -----END CERTIFICATE-----Generated at Thu Sep 11 04:15:52 2025 by rpki-client