$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0595df75-55a0-3a88-b7ea-09fe4718e8f5.roa File: 0595df75-55a0-3a88-b7ea-09fe4718e8f5.roa (raw, json) Hash identifier: x27HljGN7Z+69+5CNxaSDNQ1BF6HHAZTDGnE1maBxSA= Subject key identifier: 77:9D:58:22:21:BF:7A:A7:3F:F3:3E:DB:02:28:FC:82:F7:03:37:FF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9D90EC308AF26191DBC3120 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0595df75-55a0-3a88-b7ea-09fe4718e8f5.roa Signing time: Mon 25 Aug 2025 17:34:23 +0000 ROA not before: Mon 25 Aug 2025 17:34:23 +0000 ROA not after: Sun 23 Nov 2025 18:34:23 +0000 asID: 31898 IP address blocks: 2603:c000:1400::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d9:0e:c3:08:af:26:19:1d:bc:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:34:23 2025 GMT Not After : Nov 23 18:34:23 2025 GMT Subject: CN=bb4af951-8ad1-42c8-b071-2d6ec46edf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:72:d6:75:33:ab:d7:28:2f:b1:12:78:f7:ba: 30:d9:67:4c:7b:c7:48:2c:16:5c:5d:b2:e9:71:a0: 72:7a:b2:eb:47:ac:46:ff:83:bb:c3:80:b0:38:8a: ce:39:71:4e:11:f1:06:32:bf:4b:aa:b4:b2:e3:5b: 75:f9:e1:4a:f6:2b:0e:14:c3:2b:a1:7c:15:de:4e: 14:a7:ae:01:f0:ef:37:dd:83:5c:7c:6d:42:72:31: 31:83:51:05:fa:9d:26:21:3d:58:35:55:1c:7e:8e: c9:1e:26:9d:94:6d:70:90:f3:94:43:f6:29:ba:aa: 55:a1:a2:91:e4:5d:a9:50:1b:71:65:22:09:ae:f6: f1:c0:79:7b:af:85:54:cc:b9:68:17:14:e5:21:9e: 97:7c:48:9f:ce:b9:5d:6f:ce:60:eb:d6:d3:d5:36: c2:95:67:13:98:04:1f:c3:3b:94:ea:a7:94:4e:bc: 3b:86:1d:bb:bc:33:06:14:b5:51:76:9c:36:05:13: 3a:b9:cc:30:1f:68:9c:d0:6a:82:8a:8f:6c:ba:a1: da:d6:ff:7e:2d:9c:b4:e5:25:a8:5b:06:fa:6d:9c: d6:ae:76:39:0c:0c:55:8f:87:11:1d:3c:cc:4f:f5: 67:c9:45:8c:dc:74:c7:c6:28:98:ea:b8:53:bd:96: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9D:58:22:21:BF:7A:A7:3F:F3:3E:DB:02:28:FC:82:F7:03:37:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0595df75-55a0-3a88-b7ea-09fe4718e8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:1400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:8f:86:ba:1f:41:47:d5:9b:1e:bc:e8:75:2e:69:61:7d:63: 1f:3f:ea:5b:f1:27:b2:a5:b9:48:47:43:df:38:6e:f1:b0:c1: d9:9c:5d:63:4f:00:82:7a:eb:b2:51:5f:e7:49:27:60:88:5a: 62:b7:26:91:e0:98:a0:0e:a9:88:f1:09:eb:30:6e:99:e7:3d: 3a:33:35:65:3c:2a:2a:ab:28:8f:f2:eb:0a:79:a7:52:ea:b0: aa:57:45:00:6c:f1:ff:8e:88:4e:be:0c:4f:84:1e:e0:71:51: ba:4d:6b:e6:10:9f:83:54:9c:7b:4d:a5:55:00:27:10:d1:ee: 78:97:29:bc:a3:e3:54:8f:69:23:8f:fc:f0:b9:c6:9a:65:67: 28:66:d6:6f:f2:df:32:fa:e3:dc:ed:f9:e9:41:99:10:82:56: 30:5b:f3:02:60:1c:a1:d6:9c:88:c8:18:1e:ef:d1:a4:24:c7: 6a:3f:7a:21:c0:be:bf:4b:04:6b:1c:31:d6:0f:53:44:dc:e1: 67:2a:75:a7:1e:56:a1:30:9a:91:1e:d5:d6:27:8e:50:9a:ad: 21:60:99:3e:7a:6e:84:e5:eb:e2:ad:17:46:93:b8:ee:61:7a: d1:0b:26:ac:92:b9:2b:eb:8d:0b:43:10:23:e6:37:3d:4e:10: 1a:f0:e9:dd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr52Q7DCK8mGR28MSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MzQyM1oXDTI1MTEyMzE4MzQyM1owLzEtMCsGA1UEAxMk YmI0YWY5NTEtOGFkMS00MmM4LWIwNzEtMmQ2ZWM0NmVkZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HLWdTOr1ygvsRJ497ow2WdMe8dILBZcXbLp caByerLrR6xG/4O7w4CwOIrOOXFOEfEGMr9LqrSy41t1+eFK9isOFMMroXwV3k4U p64B8O833YNcfG1CcjExg1EF+p0mIT1YNVUcfo7JHiadlG1wkPOUQ/YpuqpVoaKR 5F2pUBtxZSIJrvbxwHl7r4VUzLloFxTlIZ6XfEifzrldb85g69bT1TbClWcTmAQf wzuU6qeUTrw7hh27vDMGFLVRdpw2BRM6ucwwH2ic0GqCio9suqHa1v9+LZy05SWo Wwb6bZzWrnY5DAxVj4cRHTzMT/VnyUWM3HTHxiiY6rhTvZaLmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHedWCIhv3qnP/M+2wIo/IL3Azf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDU5NWRmNzUtNTVhMC0z YTg4LWI3ZWEtMDlmZTQ3MThlOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAABQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWY+Guh9BR9WbHrzodS5pYX1jHz/qW/EnsqW5SEdD3zhu8bDB2Zxd Y08AgnrrslFf50knYIhaYrcmkeCYoA6piPEJ6zBumec9OjM1ZTwqKqsoj/LrCnmn UuqwqldFAGzx/46ITr4MT4Qe4HFRuk1r5hCfg1Sce02lVQAnENHueJcpvKPjVI9p I4/88LnGmmVnKGbWb/LfMvrj3O356UGZEIJWMFvzAmAcodaciMgYHu/RpCTHaj96 IcC+v0sEaxwx1g9TRNzhZyp1px5WoTCakR7V1ieOUJqtIWCZPnpuhOXr4q0XRpO4 7mF60QsmrJK5K+uNC0MQI+Y3PU4QGvDp3Q== -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:45 2025 by rpki-client