$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b807fc9-bd04-3d2a-9e32-e611c513a312.roa File: 0b807fc9-bd04-3d2a-9e32-e611c513a312.roa (raw, json) Hash identifier: rjNm6+H1ydRa2jMsDl1NUre1UufIgFbt5Q8JiWjsg6Y= Subject key identifier: 46:E2:0D:0D:EE:D9:25:0A:87:D3:91:44:C1:5D:C1:23:9B:09:FC:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B29EEBD3BAB0B4A10167C4D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b807fc9-bd04-3d2a-9e32-e611c513a312.roa Signing time: Thu 11 Sep 2025 22:56:52 +0000 ROA not before: Thu 11 Sep 2025 22:56:52 +0000 ROA not after: Wed 10 Dec 2025 23:56:52 +0000 asID: 54253 IP address blocks: 2603:c06d::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:ee:bd:3b:ab:0b:4a:10:16:7c:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 22:56:52 2025 GMT Not After : Dec 10 23:56:52 2025 GMT Subject: CN=4d2483b3-0891-4b22-81f8-2f272eae3d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:04:b4:69:20:5f:80:0b:95:a6:ac:5f:6a:48: 9b:cf:cd:bf:ea:b4:9e:f8:db:da:0a:ce:9b:8c:e0: e6:73:7e:77:b1:c0:f3:ae:a3:c7:73:81:83:c2:5b: 49:64:0e:50:69:3a:21:9b:55:0e:29:a5:c9:63:ae: 3b:6b:17:55:5f:d7:f5:f6:6e:18:d6:aa:a5:f8:5d: 20:13:32:43:f8:c8:48:4a:99:43:6a:68:b9:46:d1: 0e:47:9f:c6:ed:86:5c:ae:e6:5e:03:51:c7:65:33: 0b:9b:eb:a0:97:68:00:cc:41:03:3c:7e:d7:22:df: 58:16:31:3f:dc:75:a5:36:3f:76:ae:83:c1:df:95: b8:bf:f4:49:29:9a:f8:43:56:22:42:e8:4c:31:ea: 0a:5a:97:41:25:31:c2:5a:41:80:89:ac:3d:2d:ad: c6:9d:42:2f:0f:50:38:96:75:20:ed:a5:fd:9c:78: af:1d:4d:49:f6:89:65:f4:93:7e:dc:61:25:6a:70: 34:47:e1:b9:2e:89:1e:0f:ec:1a:ac:eb:2f:60:44: 31:ba:e7:f3:4c:9a:5e:bb:9f:b1:4a:4b:e6:9a:33: 11:78:ff:16:1c:26:82:7a:c3:74:77:df:ee:df:7c: e2:b7:02:89:f0:c1:59:ff:5b:ae:72:85:dc:ff:32: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E2:0D:0D:EE:D9:25:0A:87:D3:91:44:C1:5D:C1:23:9B:09:FC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b807fc9-bd04-3d2a-9e32-e611c513a312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c06d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:18:de:36:32:bc:32:50:10:bf:60:05:d5:1d:98:4a:c5:9d: bb:c6:3c:46:fe:af:b3:75:16:a9:5e:cd:c0:ae:31:19:d6:c4: f0:5b:54:e5:00:5a:93:bd:84:b9:07:07:ae:82:08:65:ed:93: 14:0f:f8:64:a1:62:9a:b2:89:30:c6:2e:45:5d:c7:2a:81:4a: cb:ab:71:16:4a:cb:fd:08:78:85:12:d2:0b:7b:4a:e3:47:ba: ae:a1:b6:9f:06:77:6a:98:c7:a6:f4:b2:3c:01:49:72:0c:5d: aa:c3:b3:d1:69:7b:44:e1:f0:7b:01:aa:49:9e:0b:83:5f:94: ee:3f:b6:f4:3e:a9:f7:03:b9:4f:92:c9:85:ef:3d:d4:3e:99: df:82:8b:34:af:a1:ea:8b:9c:74:ff:2c:7f:f3:2f:2e:99:d6: 74:6a:24:e8:3e:85:d1:92:55:95:49:80:63:ff:7f:03:c2:88: 57:a5:26:4e:4e:29:fe:a9:61:69:77:57:5f:32:bb:7b:94:b0: 3a:5e:22:c9:49:1d:59:c0:9f:2e:c0:cd:0f:ec:61:3f:d3:3c: a4:eb:3f:e3:13:65:53:3c:a2:b9:47:dc:b7:fb:db:7e:d6:08: 83:92:d1:9d:07:b7:d4:39:bc:3e:ad:66:32:38:18:ef:30:c9: b7:c3:4b:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsp7r07qwtKEBZ8TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMTIyNTY1MloXDTI1MTIxMDIzNTY1MlowLzEtMCsGA1UEAxMk NGQyNDgzYjMtMDg5MS00YjIyLTgxZjgtMmYyNzJlYWUzZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwS0aSBfgAuVpqxfakibz82/6rSe+NvaCs6b jODmc353scDzrqPHc4GDwltJZA5QaTohm1UOKaXJY647axdVX9f19m4Y1qql+F0g EzJD+MhISplDami5RtEOR5/G7YZcruZeA1HHZTMLm+ugl2gAzEEDPH7XIt9YFjE/ 3HWlNj92roPB35W4v/RJKZr4Q1YiQuhMMeoKWpdBJTHCWkGAiaw9La3GnUIvD1A4 lnUg7aX9nHivHU1J9oll9JN+3GElanA0R+G5LokeD+warOsvYEQxuufzTJpeu5+x SkvmmjMReP8WHCaCesN0d9/u33zitwKJ8MFZ/1uucoXc/zLLMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEbiDQ3u2SUKh9ORRMFdwSObCfxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGI4MDdmYzktYmQwNC0z ZDJhLTllMzItZTYxMWM1MTNhMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAbQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHBjeNjK8MlAQv2AF1R2YSsWdu8Y8Rv6vs3UWqV7NwK4xGdbE8FtU 5QBak72EuQcHroIIZe2TFA/4ZKFimrKJMMYuRV3HKoFKy6txFkrL/Qh4hRLSC3tK 40e6rqG2nwZ3apjHpvSyPAFJcgxdqsOz0Wl7ROHwewGqSZ4Lg1+U7j+29D6p9wO5 T5LJhe891D6Z34KLNK+h6oucdP8sf/MvLpnWdGok6D6F0ZJVlUmAY/9/A8KIV6Um Tk4p/qlhaXdXXzK7e5SwOl4iyUkdWcCfLsDND+xhP9M8pOs/4xNlUzyiuUfct/vb ftYIg5LRnQe31Dm8Pq1mMjgY7zDJt8NLEA== -----END CERTIFICATE-----Generated at Thu Oct 9 03:11:01 2025 by rpki-client