$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/46d68287-f604-3ece-8d31-abaab9e4f4f4.roa File: 46d68287-f604-3ece-8d31-abaab9e4f4f4.roa (raw, json) Hash identifier: 654bXuHn3KFPK3R7RfFKmknVU2f7Q+Dl9HNrc8yT3vE= Subject key identifier: DE:21:DE:F5:5B:EE:2B:1A:E7:99:C3:A6:5B:3C:E3:F6:C0:7E:0D:99 Certificate issuer: /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Certificate serial: 010D0C9F4328584AD32DEB39F6ECF08A3EBFA700 Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/46d68287-f604-3ece-8d31-abaab9e4f4f4.roa Signing time: Mon 11 Aug 2025 21:08:51 +0000 ROA not before: Mon 11 Aug 2025 21:08:51 +0000 ROA not after: Sun 09 Nov 2025 22:08:51 +0000 asID: 8103 IP address blocks: 2001:520:100b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:2d:eb:39:f6:ec:f0:8a:3e:bf:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Validity Not Before: Aug 11 21:08:51 2025 GMT Not After : Nov 9 22:08:51 2025 GMT Subject: CN=a3cf77b3-072a-4205-a341-e312e8025928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:60:1e:5d:81:9d:43:f9:c9:b6:7e:4a:90: 42:cd:08:de:3d:a7:b7:c2:d0:8d:67:7c:f4:1b:6f: 49:ca:7b:5c:f8:df:ca:0f:96:2c:66:be:ef:4e:b5: 5b:e0:17:6d:b6:ff:ea:f0:95:3e:34:d3:5a:72:05: 1c:a3:8a:96:14:41:52:6f:ad:b2:4f:d2:c1:62:ae: 5e:99:03:ca:60:fe:65:2c:04:5a:7d:6c:bf:9b:7f: d6:aa:81:09:2e:c6:a6:06:9d:f5:91:d4:a6:00:00: c9:cc:4a:41:27:6c:98:63:82:02:da:58:a1:1f:69: e1:22:33:35:7a:34:29:49:3f:03:15:2c:42:c6:d7: 01:3b:ff:11:4c:0d:06:7f:dc:fe:29:5c:d6:81:d4: 57:d3:14:66:1c:6f:f8:6d:55:aa:fb:08:aa:ae:73: 6d:76:b1:21:82:12:25:68:75:1b:25:bf:3d:d6:e6: 55:0c:41:08:60:09:1b:a8:2c:6d:3c:25:b0:02:cf: 0d:31:79:96:32:26:a3:33:83:3b:a6:c2:7b:d5:52: 29:1c:ed:f2:50:99:03:61:42:c3:df:2a:28:62:70: 16:45:5f:83:c3:d3:47:f3:23:6f:63:d4:ea:d8:c5: 08:9c:55:1c:e7:db:93:3f:43:5e:90:9d:2d:eb:df: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:21:DE:F5:5B:EE:2B:1A:E7:99:C3:A6:5B:3C:E3:F6:C0:7E:0D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/46d68287-f604-3ece-8d31-abaab9e4f4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl X509v3 Authority Key Identifier: keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer sbgp-ipAddrBlock: critical IPv6: 2001:520:100b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:06:cf:f0:ae:11:02:31:17:55:23:b3:7d:3c:83:28:95:0d: 60:83:5a:27:a3:0e:cb:20:44:6a:37:c5:c7:78:48:c8:d5:5f: 8e:e9:e0:74:f9:45:e2:ec:37:98:cc:c8:6b:b5:9d:ab:6d:9e: 41:40:37:01:2a:87:d3:bd:9d:30:0c:41:c2:c2:9c:41:ea:91: 0a:88:1e:2f:36:c0:cd:6f:94:f3:81:f9:30:8f:1c:56:c1:4b: f6:56:e4:70:d5:c1:9e:07:3a:a4:31:3e:70:93:6d:8f:23:02: dc:32:6c:f7:d2:89:24:10:e8:c7:35:a1:54:1d:69:8f:61:08: e0:90:f5:ec:88:4b:a4:39:51:42:86:85:9e:5d:ca:ad:04:ff: 99:ad:ed:63:0e:0d:bf:a0:c4:fa:30:37:52:30:0e:81:a9:fe: 5b:37:3c:fd:0c:c4:38:66:81:c9:cd:60:11:ae:3c:2b:9d:09: 53:74:2a:d5:f6:19:30:f1:f5:94:d7:dd:a9:27:90:23:6f:2d: a6:26:07:ec:7a:e3:fe:33:26:a0:19:a6:c5:c0:1b:29:10:6e: 41:65:c6:bc:82:91:5d:8e:b5:27:50:18:c9:37:92:3d:1e:44: 57:5d:8b:9c:43:a2:bb:9d:21:39:03:a9:30:6d:c6:42:a8:8b: ce:6b:9e:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErTLes59uzwij6/pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZmM2Q2M2MtNzhjMy00MTllLTljNWItZDkzN2UwYTBl OGMzMB4XDTI1MDgxMTIxMDg1MVoXDTI1MTEwOTIyMDg1MVowLzEtMCsGA1UEAxMk YTNjZjc3YjMtMDcyYS00MjA1LWEzNDEtZTMxMmU4MDI1OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoRgHl2BnUP5ybZ+SpBCzQjePae3wtCNZ3z0 G29Jyntc+N/KD5YsZr7vTrVb4Bdttv/q8JU+NNNacgUco4qWFEFSb62yT9LBYq5e mQPKYP5lLARafWy/m3/WqoEJLsamBp31kdSmAADJzEpBJ2yYY4IC2lihH2nhIjM1 ejQpST8DFSxCxtcBO/8RTA0Gf9z+KVzWgdRX0xRmHG/4bVWq+wiqrnNtdrEhghIl aHUbJb891uZVDEEIYAkbqCxtPCWwAs8NMXmWMiajM4M7psJ71VIpHO3yUJkDYULD 3yooYnAWRV+Dw9NH8yNvY9Tq2MUInFUc59uTP0NekJ0t69+CbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4h3vVb7isa55nDpls84/bAfg2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYz ZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBhMGU4YzMvNDZkNjgyODctZjYwNC0z ZWNlLThkMzEtYWJhYWI5ZTRmNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZmM2Q2M2MtNzhjMy00MTllLTlj NWItZDkzN2UwYTBlOGMzL2U2ZjNkNjNjLTc4YzMtNDE5ZS05YzViLWQ5MzdlMGEw ZThjMy5jcmwwHwYDVR0jBBgwFoAUjAXHW2gkLADG/NBRU0+R+xq38W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3 ZTBhMGU4YzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFIBAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJEGz/CuEQIxF1Ujs308gyiVDWCDWiejDssgRGo3xcd4SMjVX47p 4HT5ReLsN5jMyGu1nattnkFANwEqh9O9nTAMQcLCnEHqkQqIHi82wM1vlPOB+TCP HFbBS/ZW5HDVwZ4HOqQxPnCTbY8jAtwybPfSiSQQ6Mc1oVQdaY9hCOCQ9eyIS6Q5 UUKGhZ5dyq0E/5mt7WMODb+gxPowN1IwDoGp/ls3PP0MxDhmgcnNYBGuPCudCVN0 KtX2GTDx9ZTX3aknkCNvLaYmB+x64/4zJqAZpsXAGykQbkFlxryCkV2OtSdQGMk3 kj0eRFddi5xDorudITkDqTBtxkKoi85rnrs= -----END CERTIFICATE-----Generated at Wed Aug 20 23:01:03 2025 by rpki-client