$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/40b6a737-d24f-3bb1-8b1a-c81ff151d9ef.roa File: 40b6a737-d24f-3bb1-8b1a-c81ff151d9ef.roa (raw, json) Hash identifier: 1hbt+eN8c79A8iRw+qMKmzRZyftAcrD8DH2BX8y507Y= Subject key identifier: 41:E6:1D:C6:77:ED:FA:5D:AB:E5:B5:E1:F9:14:EE:7D:49:35:16:66 Certificate issuer: /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Certificate serial: 010D0C9F4328584AD32E1D7B1DFFE68C5168C480 Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/40b6a737-d24f-3bb1-8b1a-c81ff151d9ef.roa Signing time: Mon 11 Aug 2025 21:09:14 +0000 ROA not before: Mon 11 Aug 2025 21:09:14 +0000 ROA not after: Sun 09 Nov 2025 22:09:14 +0000 asID: 8103 IP address blocks: 2001:520:100c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:2e:1d:7b:1d:ff:e6:8c:51:68:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Validity Not Before: Aug 11 21:09:14 2025 GMT Not After : Nov 9 22:09:14 2025 GMT Subject: CN=96a23f5d-a378-483c-a96c-a07f417e291f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2f:f9:ef:ec:84:42:81:e7:4b:3f:d4:97:9d: 39:87:06:14:ea:5d:3b:2a:f1:8a:99:12:57:17:7b: b4:cb:73:5c:ca:3d:5f:1f:64:ae:09:c7:da:4a:b5: a0:da:fd:3f:20:79:2f:b0:b6:9d:fb:04:a5:80:c9: 29:61:d2:bd:96:a7:17:79:59:b5:98:f4:7c:6b:05: b1:87:ea:c6:5e:49:ec:01:bd:51:10:0e:8e:cf:61: b9:43:26:0a:2f:7d:4f:f8:18:08:b2:3a:22:3b:fb: 8c:4d:aa:08:8d:1f:42:5f:2d:ab:78:36:7c:96:75: 3d:f4:64:5e:cd:58:78:40:a1:eb:3c:0a:5d:3b:b0: 60:48:ba:c5:e7:c1:74:af:08:f0:73:ba:ac:88:dd: c4:15:93:e2:47:f7:b0:00:5a:e3:ef:78:74:5b:c0: 68:d7:f5:07:ea:10:e2:dc:f1:c9:a7:4a:e6:5f:8d: 79:08:fe:3b:f0:6f:67:65:5a:c0:90:5b:9d:93:4b: ca:62:a8:f5:44:6a:2f:4a:41:c2:0f:9f:ed:21:85: 8c:df:be:f6:db:d1:fc:67:72:df:9a:94:43:cc:31: df:96:45:ac:84:d0:59:df:5f:1c:26:65:d8:34:e8: 5c:fd:5c:01:b3:65:72:9d:4c:71:bc:bf:56:f8:d3: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:1D:C6:77:ED:FA:5D:AB:E5:B5:E1:F9:14:EE:7D:49:35:16:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/40b6a737-d24f-3bb1-8b1a-c81ff151d9ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl X509v3 Authority Key Identifier: keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer sbgp-ipAddrBlock: critical IPv6: 2001:520:100c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ef:d5:3a:ce:da:cf:2b:46:b8:cf:90:1c:3e:66:3c:8f:9d: 2a:5c:5c:59:d0:e2:81:8f:b1:35:96:77:03:bf:a6:f6:93:89: 85:ad:a9:bf:f4:91:68:4a:6a:62:43:72:a1:ea:82:52:1b:3a: c5:06:3a:e9:67:84:93:e0:a1:94:6c:8d:3e:84:dd:80:2c:16: 20:f9:47:58:94:7c:67:33:03:17:95:fc:20:ed:68:d7:cc:df: 3a:3b:b4:c1:c8:c9:13:bc:dd:cb:53:bb:fa:d3:92:1f:4b:9d: 7f:fa:98:c3:55:7f:6f:07:da:aa:b4:93:2d:3a:c2:a9:82:68: 78:e5:dc:bf:fd:40:dc:b1:9e:ab:06:85:0f:73:96:2e:2a:52: 81:8e:35:45:c2:6f:44:c6:ee:5c:f6:4b:3e:08:47:24:4a:e5: c9:a4:cd:c0:b7:bd:78:40:93:9f:8e:90:0e:8e:a9:85:49:04: 4b:76:36:35:11:88:d0:c1:3b:92:13:1d:f3:a4:94:2b:54:c3: 53:1b:9c:6f:a6:2d:38:2f:d4:fe:f3:57:47:17:1a:77:6f:23: 3b:07:d1:3d:16:83:c2:14:d7:a6:df:f8:d7:9a:c1:c8:b8:1b: 41:b6:44:a0:8e:8e:f5:7b:62:05:9a:df:e0:d6:8a:9d:04:a0: 4f:3e:3f:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErTLh17Hf/mjFFoxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZmM2Q2M2MtNzhjMy00MTllLTljNWItZDkzN2UwYTBl OGMzMB4XDTI1MDgxMTIxMDkxNFoXDTI1MTEwOTIyMDkxNFowLzEtMCsGA1UEAxMk OTZhMjNmNWQtYTM3OC00ODNjLWE5NmMtYTA3ZjQxN2UyOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS/57+yEQoHnSz/Ul505hwYU6l07KvGKmRJX F3u0y3Ncyj1fH2SuCcfaSrWg2v0/IHkvsLad+wSlgMkpYdK9lqcXeVm1mPR8awWx h+rGXknsAb1REA6Oz2G5QyYKL31P+BgIsjoiO/uMTaoIjR9CXy2reDZ8lnU99GRe zVh4QKHrPApdO7BgSLrF58F0rwjwc7qsiN3EFZPiR/ewAFrj73h0W8Bo1/UH6hDi 3PHJp0rmX415CP478G9nZVrAkFudk0vKYqj1RGovSkHCD5/tIYWM377229H8Z3Lf mpRDzDHflkWshNBZ318cJmXYNOhc/VwBs2VynUxxvL9W+NPp8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEHmHcZ37fpdq+W14fkU7n1JNRZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYz ZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBhMGU4YzMvNDBiNmE3MzctZDI0Zi0z YmIxLThiMWEtYzgxZmYxNTFkOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZmM2Q2M2MtNzhjMy00MTllLTlj NWItZDkzN2UwYTBlOGMzL2U2ZjNkNjNjLTc4YzMtNDE5ZS05YzViLWQ5MzdlMGEw ZThjMy5jcmwwHwYDVR0jBBgwFoAUjAXHW2gkLADG/NBRU0+R+xq38W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3 ZTBhMGU4YzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFIBAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEXv1TrO2s8rRrjPkBw+ZjyPnSpcXFnQ4oGPsTWWdwO/pvaTiYWt qb/0kWhKamJDcqHqglIbOsUGOulnhJPgoZRsjT6E3YAsFiD5R1iUfGczAxeV/CDt aNfM3zo7tMHIyRO83ctTu/rTkh9LnX/6mMNVf28H2qq0ky06wqmCaHjl3L/9QNyx nqsGhQ9zli4qUoGONUXCb0TG7lz2Sz4IRyRK5cmkzcC3vXhAk5+OkA6OqYVJBEt2 NjURiNDBO5ITHfOklCtUw1MbnG+mLTgv1P7zV0cXGndvIzsH0T0Wg8IU16bf+Nea wci4G0G2RKCOjvV7YgWa3+DWip0EoE8+P5Q= -----END CERTIFICATE-----Generated at Wed Aug 20 21:13:18 2025 by rpki-client