$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecf6d29b-e4f4-3c36-ae8c-7ee63ec2ab34.roa File: ecf6d29b-e4f4-3c36-ae8c-7ee63ec2ab34.roa (raw, json) Hash identifier: FWqoVHqPCnmxrHmYtjIjCq2fYXHAZEusDEpP2J6fyfc= Subject key identifier: C1:F7:65:4A:3A:F8:C0:03:6A:42:79:84:E9:0D:E7:9B:61:9A:28:A7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C2AD2435965D197FC7300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecf6d29b-e4f4-3c36-ae8c-7ee63ec2ab34.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397231 IP address blocks: 2001:503:e239::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:2a:d2:43:59:65:d1:97:fc:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=8b648529-02f5-487a-ad3d-033767d39493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:43:81:e1:cd:c4:64:f8:1f:b7:0d:fc:ea: fa:e0:30:aa:ee:03:7f:42:d6:0f:71:29:89:04:61: d5:15:26:39:8a:0d:7d:7f:ce:b8:dd:13:cb:7a:e4: ef:b1:14:47:09:66:e3:a1:1d:87:ee:76:7a:ba:cf: 11:7c:24:cc:61:01:ef:77:80:05:b4:69:46:fa:4d: 97:c4:18:60:9c:07:02:c8:94:67:05:48:cb:87:3c: 2e:9c:5a:aa:05:87:21:3c:4e:dd:3d:9a:0e:a9:a3: ab:7f:6c:e5:6c:45:eb:3c:c9:8b:95:84:3d:d0:f8: 11:ec:6a:b6:fc:df:e2:53:81:86:e8:d6:ad:50:89: 9b:2d:43:52:ba:a3:aa:66:d6:fa:b0:05:77:a2:e9: 5b:4d:a6:89:8d:39:cd:e6:ce:24:76:b2:c2:16:1c: 42:9d:57:e9:0d:eb:32:b4:21:41:ef:3b:2d:c1:59: ca:ae:77:0f:21:96:b6:04:bf:a6:32:56:46:19:18: 31:9f:06:4e:eb:7d:5c:b8:70:20:b5:69:4c:b3:04: aa:83:5d:ac:3c:3d:02:3d:d7:1a:a0:89:6d:f1:1d: a7:da:13:a4:8c:d7:d0:c0:81:ec:46:d1:31:17:12: 41:2b:a5:ab:99:3e:12:89:52:1f:08:77:89:ed:81: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:65:4A:3A:F8:C0:03:6A:42:79:84:E9:0D:E7:9B:61:9A:28:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ecf6d29b-e4f4-3c36-ae8c-7ee63ec2ab34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:e239::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:41:58:02:87:aa:d8:c8:bd:f3:a1:bc:7a:90:be:16:d6:b1: d8:3f:c2:e2:ff:d1:95:d2:45:ca:06:27:dd:c9:d7:75:e3:85: 24:1d:fa:3b:16:ae:86:ba:6b:7e:fc:be:8d:d0:d8:74:81:dd: 2b:fe:d0:b5:d1:c8:fa:d1:52:08:5a:c8:50:ae:5d:50:6a:c8: ad:bd:cf:a3:34:12:10:a0:3d:d7:7f:ed:a4:00:12:94:8b:de: 18:6a:cf:6f:2d:b9:cf:2d:db:6a:50:ee:02:a2:2f:bb:a9:07: 31:bf:d2:53:22:89:47:e0:79:01:af:32:a4:68:a2:5b:6e:66: e4:f3:9e:8c:a5:5c:88:97:64:84:69:a6:23:83:a3:ad:53:72: c2:ea:e3:1c:bd:16:92:1e:ef:11:6d:09:e0:51:19:0e:63:42: 3c:f4:a0:90:29:b2:68:b9:62:fe:04:00:c8:71:6d:e3:7d:41: c1:d0:b4:3d:52:1d:53:90:42:4d:c1:e8:0a:c8:5a:9c:3f:e4: df:63:3c:6f:1f:a1:21:92:1b:8d:b9:cb:cb:91:46:16:56:73: 8b:5b:69:b6:cc:ed:82:b3:18:33:46:e2:82:b3:6b:f8:47:8e: e6:95:ad:2c:79:ad:12:10:76:47:53:26:44:55:f6:66:e1:98: 37:1e:13:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSPCrSQ1ll0Zf8cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OGI2NDg1MjktMDJmNS00ODdhLWFkM2QtMDMzNzY3ZDM5NDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWlDgeHNxGT4H7cN/Or64DCq7gN/QtYPcSmJ BGHVFSY5ig19f8643RPLeuTvsRRHCWbjoR2H7nZ6us8RfCTMYQHvd4AFtGlG+k2X xBhgnAcCyJRnBUjLhzwunFqqBYchPE7dPZoOqaOrf2zlbEXrPMmLlYQ90PgR7Gq2 /N/iU4GG6NatUImbLUNSuqOqZtb6sAV3oulbTaaJjTnN5s4kdrLCFhxCnVfpDesy tCFB7zstwVnKrncPIZa2BL+mMlZGGRgxnwZO631cuHAgtWlMswSqg12sPD0CPdca oIlt8R2n2hOkjNfQwIHsRtExFxJBK6WrmT4SiVIfCHeJ7YEwXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMH3ZUo6+MADakJ5hOkN55thmiinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWNmNmQyOWItZTRmNC0z YzM2LWFlOGMtN2VlNjNlYzJhYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGxBWAKHqtjIvfOhvHqQvhbWsdg/wuL/0ZXSRcoGJ93J13XjhSQd +jsWroa6a378vo3Q2HSB3Sv+0LXRyPrRUghayFCuXVBqyK29z6M0EhCgPdd/7aQA EpSL3hhqz28tuc8t22pQ7gKiL7upBzG/0lMiiUfgeQGvMqRooltuZuTznoylXIiX ZIRppiODo61TcsLq4xy9FpIe7xFtCeBRGQ5jQjz0oJApsmi5Yv4EAMhxbeN9QcHQ tD1SHVOQQk3B6ArIWpw/5N9jPG8foSGSG425y8uRRhZWc4tbabbM7YKzGDNG4oKz a/hHjuaVrSx5rRIQdkdTJkRV9mbhmDceE9Q= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:12 2025 by rpki-client