$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af530e7-92ed-3e89-a601-827d2f05a05b.roa File: 0af530e7-92ed-3e89-a601-827d2f05a05b.roa (raw, json) Hash identifier: dz+n2SaPswJq5Yd4vv8zPzYXq+7WM9GR8Jl+zaFQbF0= Subject key identifier: 9B:AE:B9:13:6F:74:A8:BD:EB:59:A6:1C:E5:4B:9C:11:AF:4C:68:98 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B377B590A3B14618CC6B8D140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af530e7-92ed-3e89-a601-827d2f05a05b.roa Signing time: Tue 16 Sep 2025 19:25:41 +0000 ROA not before: Tue 16 Sep 2025 19:25:41 +0000 ROA not after: Mon 15 Dec 2025 20:25:41 +0000 asID: 54253 IP address blocks: 2603:c0f6::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:7b:59:0a:3b:14:61:8c:c6:b8:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 16 19:25:41 2025 GMT Not After : Dec 15 20:25:41 2025 GMT Subject: CN=cdd4f1d7-4601-4b5b-9692-58924e59d2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:d6:78:78:d2:f6:5b:6c:c0:7f:3f:5b:fd: 9a:3a:88:55:d3:3c:0d:63:8e:71:8c:63:08:68:c0: 86:1e:23:21:da:ee:e9:da:ac:30:78:ea:dc:29:e1: 8a:c2:28:78:eb:b1:68:72:41:3d:8c:76:3f:4a:ac: bb:30:c6:7f:66:7b:a0:3d:8f:2b:7d:2c:58:f5:9d: 4c:ca:9e:83:68:c5:de:20:9f:1b:5c:eb:15:a0:6b: 9b:8a:5f:23:00:05:16:b6:d7:31:86:e3:4e:4e:78: af:a9:e2:d9:90:81:da:34:f3:0c:21:98:98:2f:31: 85:9f:94:8c:40:6a:15:71:d6:f3:28:3c:99:e2:01: b9:ea:e2:42:39:d6:48:a0:00:07:d3:58:40:f6:de: f4:c4:c6:8b:61:8c:a3:e1:f2:0f:7d:41:ed:bf:24: 11:24:96:1d:b3:ad:55:5f:07:64:55:bc:ce:ba:dd: 6d:e6:7a:dc:e6:a5:e4:71:cc:71:bb:18:ff:4d:b5: d1:d7:fe:bb:f9:b9:d3:ec:40:eb:24:87:25:a5:b0: e3:53:13:6b:d3:82:72:e1:fe:97:35:0d:cc:61:05: 3a:59:f0:d2:db:b7:33:38:83:64:7b:d4:9f:74:fe: 57:3c:e4:49:b0:da:4e:99:ce:e1:d5:23:3b:57:e6: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AE:B9:13:6F:74:A8:BD:EB:59:A6:1C:E5:4B:9C:11:AF:4C:68:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af530e7-92ed-3e89-a601-827d2f05a05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0f6::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:de:1f:bb:5e:1f:4f:63:45:6d:98:e5:90:3e:1e:0d:a2:1d: b9:99:68:93:8c:3b:3b:e9:a0:e2:95:51:6b:de:45:33:54:d4: a6:ee:81:82:8d:86:0b:94:f1:a6:15:62:04:6d:0d:ce:a3:26: 30:f6:cd:a5:e5:75:ca:74:d7:95:fb:a9:72:fa:e4:19:f3:b6: 58:87:8a:ce:da:04:7b:3f:8b:bb:8a:08:1c:82:b3:60:43:18: 95:81:b2:11:ae:d0:c3:71:bf:8c:01:f1:9b:5e:ea:b7:7a:a0: ce:72:56:ec:9d:34:31:49:9c:a8:42:65:3e:1c:8d:92:a1:44: 35:09:b7:c9:34:ea:4d:c9:e2:0b:8c:f8:87:7e:a8:a1:3f:d1: 63:ba:d6:05:39:79:c1:ef:49:41:3d:64:3a:59:de:b4:05:08: 42:b7:cf:e9:32:63:81:fc:2e:bc:f1:29:c8:8d:af:47:1d:25: a3:73:3a:1a:3c:e6:59:2a:61:c0:71:9a:80:28:56:27:95:af: d8:be:55:fd:f9:9f:32:83:d2:90:37:d7:fc:ee:61:5c:7b:e7: 5a:08:6d:b6:9c:36:87:da:3e:cd:26:4e:52:5d:d0:68:b0:1d: a0:2e:c4:c2:72:f6:dd:83:1b:68:ac:fb:12:47:64:31:ca:03: 99:b7:df:95 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs3e1kKOxRhjMa40UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNjE5MjU0MVoXDTI1MTIxNTIwMjU0MVowLzEtMCsGA1UEAxMk Y2RkNGYxZDctNDYwMS00YjViLTk2OTItNTg5MjRlNTlkMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9HWeHjS9ltswH8/W/2aOohV0zwNY45xjGMI aMCGHiMh2u7p2qwweOrcKeGKwih467FockE9jHY/Sqy7MMZ/ZnugPY8rfSxY9Z1M yp6DaMXeIJ8bXOsVoGubil8jAAUWttcxhuNOTnivqeLZkIHaNPMMIZiYLzGFn5SM QGoVcdbzKDyZ4gG56uJCOdZIoAAH01hA9t70xMaLYYyj4fIPfUHtvyQRJJYds61V XwdkVbzOut1t5nrc5qXkccxxuxj/TbXR1/67+bnT7EDrJIclpbDjUxNr04Jy4f6X NQ3MYQU6WfDS27czOINke9SfdP5XPORJsNpOmc7h1SM7V+amVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJuuuRNvdKi961mmHOVLnBGvTGiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGFmNTMwZTctOTJlZC0z ZTg5LWE2MDEtODI3ZDJmMDVhMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPA9gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAM94fu14fT2NFbZjlkD4eDaIduZlok4w7O+mg4pVRa95FM1TUpu6B go2GC5TxphViBG0NzqMmMPbNpeV1ynTXlfupcvrkGfO2WIeKztoEez+Lu4oIHIKz YEMYlYGyEa7Qw3G/jAHxm17qt3qgznJW7J00MUmcqEJlPhyNkqFENQm3yTTqTcni C4z4h36ooT/RY7rWBTl5we9JQT1kOlnetAUIQrfP6TJjgfwuvPEpyI2vRx0lo3M6 GjzmWSphwHGagChWJ5Wv2L5V/fmfMoPSkDfX/O5hXHvnWghttpw2h9o+zSZOUl3Q aLAdoC7EwnL23YMbaKz7EkdkMcoDmbfflQ== -----END CERTIFICATE-----Generated at Thu Oct 9 03:11:01 2025 by rpki-client