$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2ac756c0-6363-36d5-a559-3a48720a6fcc.roa File: 2ac756c0-6363-36d5-a559-3a48720a6fcc.roa (raw, json) Hash identifier: AHV4s3EijcKMVnunL1zZhr4MA4Gxx1WZ44OWO2VWb+U= Subject key identifier: 8D:CC:DD:58:64:06:3A:BD:EC:74:6A:5F:A3:F9:09:75:BC:F1:C7:5E Certificate issuer: /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Certificate serial: 010D0C9F4328584AD32DB12874EF41E5790A4140 Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2ac756c0-6363-36d5-a559-3a48720a6fcc.roa Signing time: Mon 11 Aug 2025 21:08:23 +0000 ROA not before: Mon 11 Aug 2025 21:08:23 +0000 ROA not after: Sun 09 Nov 2025 22:08:23 +0000 asID: 8103 IP address blocks: 2001:520:1007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:2d:b1:28:74:ef:41:e5:79:0a:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Validity Not Before: Aug 11 21:08:23 2025 GMT Not After : Nov 9 22:08:23 2025 GMT Subject: CN=784d5ea7-a1c8-4be7-9d23-836b6ab521ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:fc:75:6a:fd:64:66:39:83:ed:0a:dd:bd: 58:a1:b2:1f:db:ac:71:37:33:9b:03:7b:9f:c3:b1: 63:36:a3:0e:9e:44:0f:79:83:90:56:4d:d2:3e:c2: d4:29:21:51:de:e0:af:fb:d3:04:17:2e:af:76:65: 88:0b:78:63:75:0c:22:65:bd:75:81:0c:61:25:0f: 21:f7:97:c6:41:66:dd:60:d0:64:5a:fb:a7:67:38: b8:f7:38:52:bc:07:97:a0:3c:cb:10:e1:b4:cd:6c: 2b:6e:3c:0a:c1:ee:c5:3e:e7:02:77:52:75:d5:a0: 22:7d:4c:1d:f1:bc:a7:be:e8:45:59:26:c5:96:c3: 6c:cf:cd:02:27:3d:69:fc:c3:23:02:4c:cf:97:fc: e0:1c:5f:8a:a1:fb:52:6b:87:1b:d2:95:1d:e0:37: e6:55:32:c3:15:5d:57:b7:8a:7b:c8:1b:15:87:9a: 97:24:a0:4a:19:8e:1f:a7:db:f0:ec:f4:0b:fc:1a: 5d:49:d6:53:ba:c6:13:7b:30:f4:56:08:c5:02:c8: 72:e8:33:fc:5b:01:57:69:61:31:28:99:8b:50:fc: 42:03:58:04:d1:4c:56:a5:ac:5b:80:8d:2a:9d:b4: e0:0d:7c:d9:60:63:ed:4f:a6:78:8e:39:61:80:43: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CC:DD:58:64:06:3A:BD:EC:74:6A:5F:A3:F9:09:75:BC:F1:C7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/2ac756c0-6363-36d5-a559-3a48720a6fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl X509v3 Authority Key Identifier: keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer sbgp-ipAddrBlock: critical IPv6: 2001:520:1007::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1c:30:78:22:6c:0d:5f:fc:64:c2:3a:17:ec:57:67:0d:40: 44:c9:99:d7:9c:d4:bb:27:52:96:90:3c:06:cb:bf:63:f4:54: 53:b6:05:73:65:b5:70:5a:cb:48:96:b5:05:d0:f8:90:92:55: d7:d7:5d:6d:ff:7b:d5:13:2b:1d:a0:21:6b:76:a7:ce:5e:5f: 16:bd:7b:1b:77:86:bf:33:9b:a0:8f:74:d1:67:2f:25:d6:9b: 75:a5:76:93:66:16:c9:c4:4e:44:af:ed:2b:2a:ad:67:fd:e0: f4:85:1c:e2:dd:40:09:b0:6d:e4:f8:04:4b:e3:c6:04:a2:e0: 4e:e8:97:62:ac:d1:ef:c6:6e:49:ef:6b:e4:9c:33:90:d3:59: d0:4b:21:5b:44:17:d9:dd:b0:7f:da:55:f3:a8:1b:60:79:6c: 02:df:a6:71:39:2a:8c:2c:bb:b8:21:10:8a:02:ac:db:99:09: 22:b9:4b:46:a8:f9:66:2c:b8:3a:b3:52:4a:40:f4:b3:ba:fe: 54:39:bc:32:73:06:da:22:52:8a:d7:35:fd:a2:6b:f2:7c:d2: 3f:f9:26:5f:58:f7:ab:e5:02:4d:ea:4f:88:ec:63:a8:d6:26: dc:dd:bd:07:1f:6a:a4:61:21:01:8f:6b:10:3a:70:59:4b:86: 85:b2:bd:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErTLbEodO9B5XkKQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZmM2Q2M2MtNzhjMy00MTllLTljNWItZDkzN2UwYTBl OGMzMB4XDTI1MDgxMTIxMDgyM1oXDTI1MTEwOTIyMDgyM1owLzEtMCsGA1UEAxMk Nzg0ZDVlYTctYTFjOC00YmU3LTlkMjMtODM2YjZhYjUyMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0L8dWr9ZGY5g+0K3b1YobIf26xxNzObA3uf w7FjNqMOnkQPeYOQVk3SPsLUKSFR3uCv+9MEFy6vdmWIC3hjdQwiZb11gQxhJQ8h 95fGQWbdYNBkWvunZzi49zhSvAeXoDzLEOG0zWwrbjwKwe7FPucCd1J11aAifUwd 8bynvuhFWSbFlsNsz80CJz1p/MMjAkzPl/zgHF+KoftSa4cb0pUd4DfmVTLDFV1X t4p7yBsVh5qXJKBKGY4fp9vw7PQL/BpdSdZTusYTezD0VgjFAshy6DP8WwFXaWEx KJmLUPxCA1gE0UxWpaxbgI0qnbTgDXzZYGPtT6Z4jjlhgEM8XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI3M3VhkBjq97HRqX6P5CXW88cdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYz ZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBhMGU4YzMvMmFjNzU2YzAtNjM2My0z NmQ1LWE1NTktM2E0ODcyMGE2ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZmM2Q2M2MtNzhjMy00MTllLTlj NWItZDkzN2UwYTBlOGMzL2U2ZjNkNjNjLTc4YzMtNDE5ZS05YzViLWQ5MzdlMGEw ZThjMy5jcmwwHwYDVR0jBBgwFoAUjAXHW2gkLADG/NBRU0+R+xq38W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3 ZTBhMGU4YzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFIBAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABgcMHgibA1f/GTCOhfsV2cNQETJmdec1LsnUpaQPAbLv2P0VFO2 BXNltXBay0iWtQXQ+JCSVdfXXW3/e9UTKx2gIWt2p85eXxa9ext3hr8zm6CPdNFn LyXWm3WldpNmFsnETkSv7SsqrWf94PSFHOLdQAmwbeT4BEvjxgSi4E7ol2Ks0e/G bknva+ScM5DTWdBLIVtEF9ndsH/aVfOoG2B5bALfpnE5Kowsu7ghEIoCrNuZCSK5 S0ao+WYsuDqzUkpA9LO6/lQ5vDJzBtoiUorXNf2ia/J80j/5Jl9Y96vlAk3qT4js Y6jWJtzdvQcfaqRhIQGPaxA6cFlLhoWyvbQ= -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:44 2025 by rpki-client