$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa File: 3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa (raw, json) Hash identifier: qtLAH/h1yley4fXRIndwCev2rV27AYXbxAfbHjfEkK8= Subject key identifier: CA:DF:71:25:3A:5E:B1:F7:F1:10:53:CA:D4:44:81:8C:DF:13:E0:8C Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba Certificate serial: 010D0C9F4328584AC17B8CF3C61E7FC339DC3C40 Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa Signing time: Tue 05 Aug 2025 13:00:41 +0000 ROA not before: Tue 05 Aug 2025 13:00:41 +0000 ROA not after: Mon 03 Nov 2025 14:00:41 +0000 asID: 5650 IP address blocks: 2606:8940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:7b:8c:f3:c6:1e:7f:c3:39:dc:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba Validity Not Before: Aug 5 13:00:41 2025 GMT Not After : Nov 3 14:00:41 2025 GMT Subject: CN=e51a3d0c-cf30-477d-b8ed-371ba553aacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:91:52:fa:5f:71:c3:07:b3:55:ae:a5:30: 4b:79:ad:9b:56:5f:a7:74:12:f3:e6:27:bd:0b:0c: 91:fc:4f:82:6d:31:01:b1:23:cb:b1:f4:2a:d2:fe: eb:36:06:1d:00:b6:0c:cb:5d:43:ce:ec:6b:b3:f0: e7:5d:fa:76:dd:5a:19:fe:0e:44:e6:28:6e:2b:b3: e4:5b:e2:5c:ac:21:db:9b:82:03:40:bb:96:a6:90: d3:76:23:82:80:91:21:c2:02:b7:7b:d8:60:c7:ba: 72:d1:0a:8e:02:3a:00:b5:71:fb:ce:94:72:29:00: 1c:45:20:72:6d:b2:f9:4c:24:ab:dd:9c:ec:61:94: 21:14:1e:81:b8:95:3c:72:43:95:0e:0f:a5:36:9b: 31:51:ff:71:08:4f:eb:e2:e5:c5:3d:0d:ca:c7:64: b8:0e:d3:0f:72:38:e0:bb:5f:ce:33:92:e1:a7:df: 1a:d8:14:01:40:ca:3c:98:a5:8c:12:7c:97:52:97: 31:55:48:26:13:1a:bc:76:6b:d1:48:d0:ab:ac:87: 3b:20:0c:b3:47:a1:ea:bf:97:70:c9:c8:74:70:06: 34:1d:60:b1:55:b3:83:a2:8c:01:94:e7:d9:3f:48: 0c:b9:91:2e:a1:4e:2c:b5:a8:10:e9:1f:6e:e2:d1: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DF:71:25:3A:5E:B1:F7:F1:10:53:CA:D4:44:81:8C:DF:13:E0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl X509v3 Authority Key Identifier: keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer sbgp-ipAddrBlock: critical IPv6: 2606:8940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:78:67:f9:c1:d1:4d:94:47:21:64:9e:71:d5:77:a7:32:fc: 0e:91:1c:ea:0f:a3:d3:38:8a:b8:15:80:aa:2e:5b:74:63:aa: 72:ad:b4:88:1a:76:d6:c4:a1:e8:ba:1d:ad:6f:d0:a6:27:73: 96:57:6d:71:79:4d:24:15:65:47:02:14:f6:80:69:ca:90:cd: f6:85:02:7f:69:bb:6a:18:a0:a9:27:ad:97:c4:3b:4c:c4:85: 73:ef:64:21:e0:74:a7:80:2a:40:85:73:23:dd:f6:20:dd:e2: 4e:17:8d:89:b5:ba:79:c9:f0:91:f3:70:04:11:9a:e7:3d:df: 14:05:d4:48:2f:96:18:01:d7:df:21:42:60:ac:26:c0:6e:9c: ae:06:88:64:42:e8:7d:61:4d:17:bc:34:9c:fd:77:50:87:2d: 7a:82:ff:7e:a8:97:ee:ba:6a:67:4a:1f:9e:5d:d0:66:ff:d9: c5:fe:37:59:4a:c1:be:05:f1:cc:b5:d1:5c:33:43:91:a6:ad: 05:e6:f9:34:ce:50:00:af:e1:55:fd:04:d0:fa:0c:23:53:05: df:9c:9d:1c:0f:95:30:34:83:78:9b:d8:9f:83:b4:fa:b1:3a: c1:fd:d2:48:36:24:4c:fe:86:54:b5:7a:fe:96:48:4b:1a:75: 47:d3:3a:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErBe4zzxh5/wzncPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm ZWJhMB4XDTI1MDgwNTEzMDA0MVoXDTI1MTEwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZTUxYTNkMGMtY2YzMC00NzdkLWI4ZWQtMzcxYmE1NTNhYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonSRUvpfccMHs1WupTBLea2bVl+ndBLz5ie9 CwyR/E+CbTEBsSPLsfQq0v7rNgYdALYMy11Dzuxrs/DnXfp23VoZ/g5E5ihuK7Pk W+JcrCHbm4IDQLuWppDTdiOCgJEhwgK3e9hgx7py0QqOAjoAtXH7zpRyKQAcRSBy bbL5TCSr3ZzsYZQhFB6BuJU8ckOVDg+lNpsxUf9xCE/r4uXFPQ3Kx2S4DtMPcjjg u1/OM5Lhp98a2BQBQMo8mKWMEnyXUpcxVUgmExq8dmvRSNCrrIc7IAyzR6Hqv5dw ych0cAY0HWCxVbODoowBlOfZP0gMuZEuoU4stagQ6R9u4tGxOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMrfcSU6XrH38RBTytREgYzfE+CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4 NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvM2JkZjkwMGQtMTdiOC0z ZmVmLWEwYmYtMWVlNGUzYzA3YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5 NzMwYWZlYmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaJQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASeGf5wdFNlEchZJ5x1XenMvwOkRzqD6PTOIq4FYCqLlt0Y6pyrbSI GnbWxKHouh2tb9CmJ3OWV21xeU0kFWVHAhT2gGnKkM32hQJ/abtqGKCpJ62XxDtM xIVz72Qh4HSngCpAhXMj3fYg3eJOF42Jtbp5yfCR83AEEZrnPd8UBdRIL5YYAdff IUJgrCbAbpyuBohkQuh9YU0XvDSc/XdQhy16gv9+qJfuumpnSh+eXdBm/9nF/jdZ SsG+BfHMtdFcM0ORpq0F5vk0zlAAr+FV/QTQ+gwjUwXfnJ0cD5UwNIN4m9ifg7T6 sTrB/dJINiRM/oZUtXr+lkhLGnVH0zpQ -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:49 2025 by rpki-client