$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/842546d0-8f09-3428-9c6d-4eb7d58f3263.roa File: 842546d0-8f09-3428-9c6d-4eb7d58f3263.roa (raw, json) Hash identifier: zFX8wGCVFb1LYGPQQH+mEUYcASmLaSSpRY17y9PBNFw= Subject key identifier: 9E:1A:9E:8D:2D:2D:CF:AB:CD:62:2B:39:71:87:2F:AB:9F:FF:41:E4 Certificate issuer: /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Certificate serial: 010D0C9F4328584BB2F83235F8398A045149EE40 Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/842546d0-8f09-3428-9c6d-4eb7d58f3263.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 8103 IP address blocks: 2001:520:101e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:32:35:f8:39:8a:04:51:49:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=27e5edd5-4a1e-414b-b59d-b49242144ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:b5:01:0d:8a:a6:d4:37:e2:2c:65:ec:7e: c6:d5:ec:1f:e2:11:6d:ff:b5:38:16:73:5f:37:5a: 61:23:41:b1:d9:1a:6f:c6:93:a2:ae:2b:04:d2:e6: 4c:a8:61:c3:79:b9:ec:39:60:b4:2d:f8:ea:a7:6c: 94:ed:00:92:5a:0f:9a:4b:0c:a5:55:e5:8a:db:df: 5b:2b:dd:e7:63:f2:71:a0:b3:a6:07:bf:ad:fb:0b: 58:be:8f:f7:3f:dd:ad:4a:ef:d1:40:67:69:8f:ab: d4:6c:38:aa:64:35:46:51:89:09:b9:85:ce:ba:f5: a2:5d:47:bb:83:e3:27:37:55:3d:69:7a:66:7d:d4: 5b:ca:83:f7:16:09:0f:0b:25:11:a2:5d:f0:66:f6: 56:0b:fc:37:0f:a2:47:50:44:35:51:f8:61:33:02: 6e:3d:0d:c1:3d:68:37:0e:e8:27:31:5f:f4:32:da: 46:f3:9a:4b:ce:aa:f6:cc:41:6d:db:0f:c9:c9:03: ea:99:e5:ef:64:e1:e0:d0:08:61:a4:9e:c3:6c:74: 1f:22:d0:fd:f4:74:f2:b3:38:28:e0:a8:77:1c:d8: 63:f2:68:52:4f:39:91:7b:1a:86:fd:dd:cc:14:cb: cf:e9:ea:dd:a9:81:17:2a:62:08:c0:39:e1:ea:03: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1A:9E:8D:2D:2D:CF:AB:CD:62:2B:39:71:87:2F:AB:9F:FF:41:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/842546d0-8f09-3428-9c6d-4eb7d58f3263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl X509v3 Authority Key Identifier: keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer sbgp-ipAddrBlock: critical IPv6: 2001:520:101e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2b:c6:2d:f0:58:56:24:4e:82:73:0c:ed:93:8b:93:c0:8f: 74:1d:de:2c:ec:3f:7a:aa:02:d6:48:21:27:62:ed:13:a4:f7: 63:7c:b1:7a:9e:62:24:ed:79:58:0a:43:9a:0c:49:47:09:9f: 9e:5b:45:cb:92:3b:53:73:2d:70:7d:b1:38:89:43:da:b0:3e: 08:0b:83:8b:f3:cd:f2:50:8f:10:5c:92:15:46:a8:72:b6:e7: 3b:73:45:17:cc:3d:8f:86:82:81:26:a3:7d:12:e8:62:13:91: 2a:17:d7:92:41:58:10:c8:1a:e2:53:49:58:5e:e5:04:78:f9: df:e9:83:1e:94:4d:99:9f:43:7e:f6:33:ba:c7:19:a6:89:93: 81:5c:99:2b:74:d7:40:41:b7:7b:54:a3:1c:ae:86:ab:1e:fd: dd:8f:03:ce:aa:06:33:3d:25:85:46:c2:5c:4c:fe:fd:ac:92: 5b:45:55:ef:bf:2d:b0:c5:ae:4c:af:6a:0f:c0:19:5c:16:02: 7f:1a:c5:ea:c1:5f:3b:00:28:5c:03:15:7b:f0:a3:af:6d:d5: 73:71:06:5b:0a:cf:6f:8c:9c:8a:78:14:47:e7:98:74:a9:02: 51:7b:a8:be:c1:de:f8:dc:51:a7:6c:57:aa:90:43:22:18:64: e3:fb:fb:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+DI1+DmKBFFJ7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZmM2Q2M2MtNzhjMy00MTllLTljNWItZDkzN2UwYTBl OGMzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MjdlNWVkZDUtNGExZS00MTRiLWI1OWQtYjQ5MjQyMTQ0ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIS1AQ2KptQ34ixl7H7G1ewf4hFt/7U4FnNf N1phI0Gx2RpvxpOirisE0uZMqGHDebnsOWC0Lfjqp2yU7QCSWg+aSwylVeWK299b K93nY/JxoLOmB7+t+wtYvo/3P92tSu/RQGdpj6vUbDiqZDVGUYkJuYXOuvWiXUe7 g+MnN1U9aXpmfdRbyoP3FgkPCyURol3wZvZWC/w3D6JHUEQ1UfhhMwJuPQ3BPWg3 DugnMV/0MtpG85pLzqr2zEFt2w/JyQPqmeXvZOHg0AhhpJ7DbHQfItD99HTyszgo 4Kh3HNhj8mhSTzmRexqG/d3MFMvP6erdqYEXKmIIwDnh6gNn4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ4ano0tLc+rzWIrOXGHL6uf/0HkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYz ZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBhMGU4YzMvODQyNTQ2ZDAtOGYwOS0z NDI4LTljNmQtNGViN2Q1OGYzMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZmM2Q2M2MtNzhjMy00MTllLTlj NWItZDkzN2UwYTBlOGMzL2U2ZjNkNjNjLTc4YzMtNDE5ZS05YzViLWQ5MzdlMGEw ZThjMy5jcmwwHwYDVR0jBBgwFoAUjAXHW2gkLADG/NBRU0+R+xq38W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3 ZTBhMGU4YzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFIBAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsrxi3wWFYkToJzDO2Ti5PAj3Qd3izsP3qqAtZIISdi7ROk92N8 sXqeYiTteVgKQ5oMSUcJn55bRcuSO1NzLXB9sTiJQ9qwPggLg4vzzfJQjxBckhVG qHK25ztzRRfMPY+GgoEmo30S6GITkSoX15JBWBDIGuJTSVhe5QR4+d/pgx6UTZmf Q372M7rHGaaJk4FcmSt010BBt3tUoxyuhqse/d2PA86qBjM9JYVGwlxM/v2skltF Ve+/LbDFrkyvag/AGVwWAn8axerBXzsAKFwDFXvwo69t1XNxBlsKz2+MnIp4FEfn mHSpAlF7qL7B3vjcUadsV6qQQyIYZOP7+48= -----END CERTIFICATE-----Generated at Wed Nov 5 14:48:48 2025 by rpki-client