$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/176c4a4a-2ee3-36a3-a300-266e722e6326.roa File: 176c4a4a-2ee3-36a3-a300-266e722e6326.roa (raw, json) Hash identifier: NCX2yhvJYj5pj5etUl46jdWodviPTe8jL5nIBwu3XRs= Subject key identifier: 72:DB:98:5D:20:19:95:70:F2:F7:82:9F:CC:0A:BF:52:BD:45:B7:53 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFFE75827B0654E9E79CDFF90 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/176c4a4a-2ee3-36a3-a300-266e722e6326.roa Signing time: Wed 27 Aug 2025 21:38:01 +0000 ROA not before: Wed 27 Aug 2025 21:38:01 +0000 ROA not after: Tue 25 Nov 2025 22:38:01 +0000 asID: 31898 IP address blocks: 2600:2003::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e7:58:27:b0:65:4e:9e:79:cd:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 21:38:01 2025 GMT Not After : Nov 25 22:38:01 2025 GMT Subject: CN=d8b95e45-d681-4ad1-8d39-454064798c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:10:fc:fc:4e:8a:3f:de:35:33:1b:50:27: 6b:b7:44:0c:7f:32:41:ca:e1:94:55:56:5e:91:ac: 14:2d:a5:4e:f1:57:7e:0e:8a:84:89:9c:51:5a:46: f5:ba:0a:07:32:7f:5c:72:b9:c3:2a:f2:ec:25:96: 93:1e:31:89:57:6a:54:c6:cd:af:76:f2:c6:72:e5: b2:1c:37:3a:be:b7:92:8f:ee:70:72:bf:ff:6e:8a: cb:3e:ab:24:ff:39:91:7a:48:2c:a7:01:74:77:41: 14:bf:29:ad:a6:3b:5a:eb:a9:39:a5:8b:f8:b5:51: 0e:c5:68:ce:b5:47:c5:0f:dc:44:ed:80:24:0e:1c: a3:03:98:b6:ab:ac:be:18:c6:37:89:62:e2:e1:fc: 78:3e:ca:9d:6b:f5:70:b2:3a:4b:ff:75:48:fd:10: 31:ec:96:4c:29:b7:88:58:72:f6:ed:1a:b6:c3:c1: 5f:e3:05:dc:89:2f:9b:0e:b4:96:0e:5a:92:ae:7e: 19:67:33:cd:ac:a5:43:5d:1d:8f:09:5d:de:fd:fa: 0b:a3:01:9d:79:cb:a9:01:42:67:21:67:97:f4:b0: 78:b0:d9:33:a3:99:e5:8b:63:f6:70:de:75:66:86: 92:af:12:d9:85:b4:a8:7b:43:e1:45:b9:9b:dd:45: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:98:5D:20:19:95:70:F2:F7:82:9F:CC:0A:BF:52:BD:45:B7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/176c4a4a-2ee3-36a3-a300-266e722e6326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:90:ad:65:86:85:94:3a:80:67:68:48:e8:60:d5:2c:01:d0: b4:8f:e3:ea:4a:e4:30:54:54:ae:d1:7e:ba:95:5a:bb:88:42: 7e:16:3c:53:32:ed:38:b4:3f:ef:65:20:67:8d:ea:e5:dc:a9: a1:93:94:57:c6:57:37:0e:a5:74:16:73:5e:ae:2d:77:52:9f: d7:2e:9b:9b:95:d5:cc:b8:1d:db:5c:69:49:45:ce:65:7c:e3: 2b:4a:3c:f3:d7:54:27:f4:92:4e:b4:5e:87:a6:88:ff:04:95: a3:6b:3d:48:13:de:6c:c4:f4:f0:1a:89:0b:45:df:5a:2c:4c: 4b:9d:1b:c0:56:d4:08:06:21:b1:e3:da:9e:00:c3:97:0c:fb: 27:3c:77:97:11:6f:b0:43:1a:14:88:08:df:6b:e4:8c:e4:c1: 1b:dd:08:9e:60:59:05:72:1a:d6:27:49:fc:f3:6b:d7:2c:56: 00:ba:5d:41:65:6d:89:81:b4:14:ec:31:60:78:e1:c7:0f:d2: 60:8d:48:ba:d3:0e:10:37:56:81:2f:67:be:66:74:35:8b:90: db:fb:20:05:52:7d:05:44:b7:28:09:bc:76:0b:11:a6:c0:4b: a3:68:e2:ee:87:a8:9e:77:1e:da:2d:b5:fd:40:27:96:fb:41: 94:66:2c:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr/51gnsGVOnnnN/5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIxMzgwMVoXDTI1MTEyNTIyMzgwMVowLzEtMCsGA1UEAxMk ZDhiOTVlNDUtZDY4MS00YWQxLThkMzktNDU0MDY0Nzk4Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6UQ/PxOij/eNTMbUCdrt0QMfzJByuGUVVZe kawULaVO8Vd+DoqEiZxRWkb1ugoHMn9ccrnDKvLsJZaTHjGJV2pUxs2vdvLGcuWy HDc6vreSj+5wcr//borLPqsk/zmRekgspwF0d0EUvymtpjta66k5pYv4tVEOxWjO tUfFD9xE7YAkDhyjA5i2q6y+GMY3iWLi4fx4Psqda/VwsjpL/3VI/RAx7JZMKbeI WHL27Rq2w8Ff4wXciS+bDrSWDlqSrn4ZZzPNrKVDXR2PCV3e/foLowGdecupAUJn IWeX9LB4sNkzo5nli2P2cN51ZoaSrxLZhbSoe0PhRbmb3UX20QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLbmF0gGZVw8veCn8wKv1K9RbdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTc2YzRhNGEtMmVlMy0z NmEzLWEzMDAtMjY2ZTcyMmU2MzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAgAwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIiQrWWGhZQ6gGdoSOhg1SwB0LSP4+pK5DBUVK7RfrqVWruIQn4W PFMy7Ti0P+9lIGeN6uXcqaGTlFfGVzcOpXQWc16uLXdSn9cum5uV1cy4HdtcaUlF zmV84ytKPPPXVCf0kk60XoemiP8ElaNrPUgT3mzE9PAaiQtF31osTEudG8BW1AgG IbHj2p4Aw5cM+yc8d5cRb7BDGhSICN9r5IzkwRvdCJ5gWQVyGtYnSfzza9csVgC6 XUFlbYmBtBTsMWB44ccP0mCNSLrTDhA3VoEvZ75mdDWLkNv7IAVSfQVEtygJvHYL EabAS6No4u6HqJ53Htottf1AJ5b7QZRmLG8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:09 2025 by rpki-client