$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2e9c9a12-41d4-34bf-ada3-0ffad94ff99c.roa File: 2e9c9a12-41d4-34bf-ada3-0ffad94ff99c.roa (raw, json) Hash identifier: dZ26C2R6GwYC3LN9tlkC0Pu8+33tQLLHqjuU55VyUZo= Subject key identifier: 93:4F:58:24:A8:95:4F:56:76:D8:48:1A:3A:C8:46:8C:46:16:AA:CA Certificate issuer: /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Certificate serial: 010D0C9F4328584AD33557FB2C9BE46507F17200 Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2e9c9a12-41d4-34bf-ada3-0ffad94ff99c.roa Signing time: Mon 11 Aug 2025 21:23:48 +0000 ROA not before: Mon 11 Aug 2025 21:23:48 +0000 ROA not after: Sun 09 Nov 2025 22:23:48 +0000 asID: 8103 IP address blocks: 2001:520:5031::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:35:57:fb:2c:9b:e4:65:07:f1:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Validity Not Before: Aug 11 21:23:48 2025 GMT Not After : Nov 9 22:23:48 2025 GMT Subject: CN=8b75d36b-68e1-4a68-99d8-47ed14062409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:f3:12:e2:b7:52:b9:f2:14:9f:36:fb:a1: 72:7e:a8:c1:35:28:23:f8:6e:71:cb:cc:9f:19:22: 9d:ab:a4:92:e1:13:59:de:89:d1:68:eb:46:aa:86: 69:9e:2a:53:0e:e0:75:d6:a6:59:8b:96:22:55:56: f5:c5:71:c4:b1:36:a6:4b:56:df:af:4d:a8:60:5e: 92:99:34:9f:8e:5a:c8:d3:f5:5a:40:09:34:b0:ff: 22:bb:a8:3f:dc:82:86:50:e6:93:4f:bd:26:4f:a3: ad:d8:bd:d1:f7:87:b5:4a:0d:1f:aa:0f:63:f9:9d: 3f:e7:76:3d:49:36:5d:c3:fa:56:b3:25:e1:38:f1: aa:15:5b:d6:b4:d8:66:ae:28:00:8d:00:67:bf:a3: 07:8a:08:25:a9:36:6f:80:3b:37:44:56:5e:c7:c8: 72:93:71:37:f2:e5:b5:9c:69:b3:c0:28:d2:29:6d: ab:f8:5e:33:2b:4c:73:08:fc:0b:d6:ba:e6:61:15: 88:04:3b:67:0e:51:01:80:53:42:d6:83:cf:c6:4d: 03:6f:48:a7:8a:d0:8a:8b:79:e3:29:e9:e3:2e:72: 3e:76:7f:7d:52:c6:b9:44:3d:00:4a:48:d1:b1:ee: 5c:64:24:25:84:c7:cf:58:94:16:f7:c9:a8:e6:c8: c3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4F:58:24:A8:95:4F:56:76:D8:48:1A:3A:C8:46:8C:46:16:AA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2e9c9a12-41d4-34bf-ada3-0ffad94ff99c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl X509v3 Authority Key Identifier: keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer sbgp-ipAddrBlock: critical IPv6: 2001:520:5031::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:47:ba:b0:88:41:c5:4a:18:34:d0:ed:b7:0d:b9:1d:b8:6f: 28:d6:c0:34:45:6e:c3:67:ce:d6:1f:f2:8c:77:20:2c:08:a7: a6:82:23:f8:64:3a:03:e0:4a:81:52:94:b8:84:7c:56:22:4f: 1d:b2:83:d7:58:67:b1:78:81:bb:c4:51:50:c9:f4:43:ed:d2: 60:91:39:e8:6e:09:70:0d:45:07:3b:7e:2e:59:0b:0c:18:87: c7:cd:30:e6:76:ea:64:05:25:47:7d:18:f2:96:71:cb:70:5a: 7e:0d:fe:ce:fa:dd:10:a3:9e:0b:f4:b0:00:b8:8c:20:46:ec: d2:14:c6:b1:df:a1:72:48:32:54:fb:3b:a2:08:62:1a:61:26: 58:07:55:60:19:07:c7:e4:81:6e:50:2e:53:56:6b:54:62:84: 9e:3a:78:ec:97:c8:4d:bb:9c:39:38:6b:86:8f:a0:89:5d:de: 1c:60:12:16:90:2d:58:91:40:9f:44:29:34:79:dd:cb:1c:35: eb:ea:6f:0a:eb:be:e1:64:f3:5b:2b:85:98:cd:bd:04:8a:e8: 3f:85:32:56:ed:86:77:bc:3f:58:3c:39:60:57:39:38:fa:44: e2:92:ba:fb:ac:4f:0d:be:8c:06:90:46:85:f1:9e:e8:0d:d3: e9:d7:05:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErTNVf7LJvkZQfxcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZmM2Q2M2MtNzhjMy00MTllLTljNWItZDkzN2UwYTBl OGMzMB4XDTI1MDgxMTIxMjM0OFoXDTI1MTEwOTIyMjM0OFowLzEtMCsGA1UEAxMk OGI3NWQzNmItNjhlMS00YTY4LTk5ZDgtNDdlZDE0MDYyNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nbzEuK3UrnyFJ82+6FyfqjBNSgj+G5xy8yf GSKdq6SS4RNZ3onRaOtGqoZpnipTDuB11qZZi5YiVVb1xXHEsTamS1bfr02oYF6S mTSfjlrI0/VaQAk0sP8iu6g/3IKGUOaTT70mT6Ot2L3R94e1Sg0fqg9j+Z0/53Y9 STZdw/pWsyXhOPGqFVvWtNhmrigAjQBnv6MHigglqTZvgDs3RFZex8hyk3E38uW1 nGmzwCjSKW2r+F4zK0xzCPwL1rrmYRWIBDtnDlEBgFNC1oPPxk0Db0initCKi3nj KenjLnI+dn99Usa5RD0ASkjRse5cZCQlhMfPWJQW98mo5sjD3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJNPWCSolU9WdthIGjrIRoxGFqrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYz ZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBhMGU4YzMvMmU5YzlhMTItNDFkNC0z NGJmLWFkYTMtMGZmYWQ5NGZmOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZmM2Q2M2MtNzhjMy00MTllLTlj NWItZDkzN2UwYTBlOGMzL2U2ZjNkNjNjLTc4YzMtNDE5ZS05YzViLWQ5MzdlMGEw ZThjMy5jcmwwHwYDVR0jBBgwFoAUjAXHW2gkLADG/NBRU0+R+xq38W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3 ZTBhMGU4YzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFIFAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMhHurCIQcVKGDTQ7bcNuR24byjWwDRFbsNnztYf8ox3ICwIp6aC I/hkOgPgSoFSlLiEfFYiTx2yg9dYZ7F4gbvEUVDJ9EPt0mCROehuCXANRQc7fi5Z CwwYh8fNMOZ26mQFJUd9GPKWcctwWn4N/s763RCjngv0sAC4jCBG7NIUxrHfoXJI MlT7O6IIYhphJlgHVWAZB8fkgW5QLlNWa1RihJ46eOyXyE27nDk4a4aPoIld3hxg EhaQLViRQJ9EKTR53cscNevqbwrrvuFk81srhZjNvQSK6D+FMlbthne8P1g8OWBX OTj6ROKSuvusTw2+jAaQRoXxnugN0+nXBco= -----END CERTIFICATE-----Generated at Wed Aug 20 21:13:30 2025 by rpki-client