$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b9625f5-f2d7-30b2-bada-475f8d13af9f.roa File: 0b9625f5-f2d7-30b2-bada-475f8d13af9f.roa (raw, json) Hash identifier: CuCfN2pVrNLpxEaWknbO7yOb7WA9lmQ/oEZElnkHJpc= Subject key identifier: B8:0A:A3:67:0F:27:A3:39:D4:03:85:34:1C:64:33:D5:3F:43:6D:8C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD445447935143241C2E8580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b9625f5-f2d7-30b2-bada-475f8d13af9f.roa Signing time: Tue 26 Aug 2025 22:57:57 +0000 ROA not before: Tue 26 Aug 2025 22:57:57 +0000 ROA not after: Mon 24 Nov 2025 23:57:57 +0000 asID: 31898 IP address blocks: 2603:c002:3000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:54:47:93:51:43:24:1c:2e:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:57 2025 GMT Not After : Nov 24 23:57:57 2025 GMT Subject: CN=b6052014-0394-4a05-8f74-6bdda5a9a568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:35:6f:37:be:7c:66:fe:6d:b5:ef:f6:9d: 6e:8e:fb:9b:9a:6f:2f:74:5c:aa:f0:ff:1f:07:de: de:4e:51:be:b8:33:a8:3c:a4:7d:51:ca:a3:14:91: d0:ba:1b:7c:6d:52:b0:72:f7:bd:09:59:8c:a1:e1: 41:07:d2:7e:93:59:20:ef:b2:e3:2e:29:c9:14:b0: e9:59:aa:f6:d5:4e:97:d5:8d:20:27:2e:0a:27:25: 08:5b:ec:60:3f:60:25:37:29:d2:52:f9:b8:e6:d2: c1:83:5e:a9:c5:e5:11:e0:ac:d1:7f:17:f7:0a:e6: cd:64:28:1f:b5:f0:6d:08:3f:74:64:79:3c:67:80: 69:60:dc:b6:0a:f5:7c:8d:a2:cd:73:d0:88:89:de: fb:c2:76:fb:18:57:e4:a0:38:07:fb:d1:45:d7:74: 9f:17:f3:7b:79:74:af:c1:8f:5a:f3:65:7d:6c:03: 49:2b:05:8d:ce:a5:b4:f9:7e:06:84:83:3f:ff:b6: e0:46:82:0d:bc:0c:60:86:48:bc:c8:d8:66:25:98: dd:ac:ac:1f:55:6f:d2:53:bd:ae:cb:7b:07:31:bc: 3f:21:5b:10:0e:70:3c:99:23:d8:2f:f7:28:04:6e: 71:d7:7b:30:09:bb:22:07:6f:67:57:82:ea:92:c4: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0A:A3:67:0F:27:A3:39:D4:03:85:34:1C:64:33:D5:3F:43:6D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b9625f5-f2d7-30b2-bada-475f8d13af9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d8:6f:20:5d:25:5e:55:bd:95:1c:be:63:35:f6:e5:b8:81: 9f:ba:27:c2:9b:fb:7c:70:47:91:61:60:61:ad:6d:4c:4c:84: 7b:8c:1c:d9:c7:93:79:23:33:92:ad:e3:78:d6:4f:a1:7e:a9: fe:fb:82:a4:19:b2:f3:16:b2:ab:73:c8:f7:1a:5e:43:3d:8a: b4:69:89:a5:8f:de:02:50:fa:47:76:83:1a:79:a3:47:59:ee: 59:c6:84:b3:0f:55:92:e5:af:71:da:7d:03:ad:25:96:39:5d: f0:4f:83:fd:34:fb:4c:1d:94:0c:6c:d7:7d:cc:e7:4c:dc:63: a5:7d:90:36:c8:29:d7:8a:6f:7b:1a:53:a7:7e:20:b4:00:dc: 44:34:24:f8:ed:f7:23:c0:5f:40:d1:25:90:bd:95:cc:38:04: f9:a3:ec:fc:65:e8:fa:49:06:b4:99:ea:08:18:aa:0a:b3:21: 7d:f4:24:90:f8:0b:9a:60:ae:56:ae:39:2c:89:a5:00:40:e7: 16:32:e3:58:83:60:ae:8a:5a:89:f3:ca:d6:c9:c6:b8:40:45: 48:01:fa:6e:a1:00:1f:d5:c7:76:81:e9:cf:a0:f8:cf:60:6d: a8:d9:79:c3:68:f2:cd:35:d1:45:70:62:e1:01:fc:6b:5a:19: 81:63:10:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr9RFRHk1FDJBwuhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTc1N1oXDTI1MTEyNDIzNTc1N1owLzEtMCsGA1UEAxMk YjYwNTIwMTQtMDM5NC00YTA1LThmNzQtNmJkZGE1YTlhNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL41bze+fGb+bbXv9p1ujvubmm8vdFyq8P8f B97eTlG+uDOoPKR9UcqjFJHQuht8bVKwcve9CVmMoeFBB9J+k1kg77LjLinJFLDp War21U6X1Y0gJy4KJyUIW+xgP2AlNynSUvm45tLBg16pxeUR4KzRfxf3CubNZCgf tfBtCD90ZHk8Z4BpYNy2CvV8jaLNc9CIid77wnb7GFfkoDgH+9FF13SfF/N7eXSv wY9a82V9bANJKwWNzqW0+X4GhIM//7bgRoINvAxghki8yNhmJZjdrKwfVW/SU72u y3sHMbw/IVsQDnA8mSPYL/coBG5x13swCbsiB29nV4LqksQ2QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLgKo2cPJ6M51AOFNBxkM9U/Q22MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGI5NjI1ZjUtZjJkNy0z MGIyLWJhZGEtNDc1ZjhkMTNhZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKfYbyBdJV5VvZUcvmM19uW4gZ+6J8Kb+3xwR5FhYGGtbUxMhHuM HNnHk3kjM5Kt43jWT6F+qf77gqQZsvMWsqtzyPcaXkM9irRpiaWP3gJQ+kd2gxp5 o0dZ7lnGhLMPVZLlr3HafQOtJZY5XfBPg/00+0wdlAxs133M50zcY6V9kDbIKdeK b3saU6d+ILQA3EQ0JPjt9yPAX0DRJZC9lcw4BPmj7Pxl6PpJBrSZ6ggYqgqzIX30 JJD4C5pgrlauOSyJpQBA5xYy41iDYK6KWonzytbJxrhARUgB+m6hAB/Vx3aB6c+g +M9gbajZecNo8s010UVwYuEB/GtaGYFjELI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:28 2025 by rpki-client