$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23145bd1-a843-32e5-9ade-679deb82129b.roa File: 23145bd1-a843-32e5-9ade-679deb82129b.roa (raw, json) Hash identifier: cter3cerBd2aRVnicEmkqCjdlQicXYWPFpfULz4gp8o= Subject key identifier: 9B:4F:0C:C6:14:F5:C5:D1:7D:1A:06:54:47:39:B8:48:EA:88:12:6D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B34AADD753AC6A33FDE3E6580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23145bd1-a843-32e5-9ade-679deb82129b.roa Signing time: Mon 15 Sep 2025 19:14:00 +0000 ROA not before: Mon 15 Sep 2025 19:14:00 +0000 ROA not after: Sun 14 Dec 2025 20:14:00 +0000 asID: 54253 IP address blocks: 2603:c0c0::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:aa:dd:75:3a:c6:a3:3f:de:3e:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 15 19:14:00 2025 GMT Not After : Dec 14 20:14:00 2025 GMT Subject: CN=bbbaf7bd-318e-433e-b02f-d386fdee1aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:b4:72:2a:57:69:ae:6a:d1:0d:92:b5:18: 4c:68:61:a8:e5:ae:5d:f1:f3:4a:c5:65:66:57:09: 34:7c:ce:8a:36:aa:bd:32:fe:f4:1f:ed:9b:05:c2: 22:e7:ba:f3:f6:44:45:06:06:e7:ed:78:9d:23:73: 35:46:fa:d7:6d:bf:77:a4:db:d4:ab:bd:85:2a:4e: 2d:11:89:41:f3:d2:5c:94:14:a5:a8:21:fd:44:09: 1c:d4:b1:fb:a3:9f:40:77:d1:03:30:47:4a:d7:3b: 52:e3:28:46:36:c2:0c:7b:4b:2a:ca:16:b7:43:05: b9:13:a4:17:11:7b:7c:7e:a3:1f:89:5a:62:99:3e: 9e:79:fd:e3:e5:f7:9f:db:e6:86:00:52:33:de:ed: ef:80:19:66:7d:3b:5a:cf:24:3b:a5:37:e7:0e:01: 6a:01:ff:35:f0:ac:65:7c:b6:1a:61:1d:bd:91:84: 74:a4:d4:33:e7:5c:f2:98:64:b3:3e:9c:f7:1a:3f: d5:7a:f7:34:db:fd:5d:cd:c4:80:6e:af:f8:79:46: 76:96:9e:28:a2:a0:ee:60:4a:d3:ea:5f:5d:da:78: 43:04:69:7a:f2:a0:95:ce:21:9a:c2:2d:a2:36:63: e8:fa:1c:f2:fe:50:8b:f8:02:64:a4:ea:04:11:75: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4F:0C:C6:14:F5:C5:D1:7D:1A:06:54:47:39:B8:48:EA:88:12:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23145bd1-a843-32e5-9ade-679deb82129b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:40:34:26:39:2f:ae:f8:8f:9b:0d:be:a0:1d:10:82:45:39: f7:b8:2f:48:2a:c4:ff:d4:24:22:7f:71:d4:02:a5:a9:01:a7: 7b:b4:db:0a:bf:52:6b:86:8e:2b:ff:6e:77:3a:d5:60:d2:7e: fb:2c:ab:a3:54:40:6f:fa:bd:7e:29:73:96:8b:15:73:bc:cd: 7b:50:c5:0d:5a:43:92:6e:29:43:30:d6:54:99:9a:64:56:34: 1d:f2:1d:69:33:fc:d0:7c:42:2c:03:1c:67:f9:5c:05:b1:b1: f1:b2:f1:68:b0:07:20:d6:eb:6a:b7:1a:a6:f6:27:8f:95:39: 65:0d:d0:67:fd:04:fc:07:0b:08:52:3c:a2:89:69:7c:8d:56: fb:ab:db:33:77:56:79:82:f4:70:ca:ef:06:48:17:20:37:e5: 20:52:f0:63:f9:e5:f8:64:f9:54:9d:21:f8:e5:be:ff:25:34: df:68:e8:b9:9b:58:e4:87:48:f3:fc:d4:c7:d6:1f:df:38:07: ab:bc:37:8d:bd:47:1a:ba:56:2d:18:e5:7b:7a:a5:65:73:ef: 04:56:52:fb:59:c4:30:10:de:4f:24:0a:d5:79:d1:f4:b1:d3: ce:1d:55:e9:7f:0b:06:71:90:bb:67:5f:9b:2b:c7:f3:ff:02: 99:9b:6f:0d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs0qt11OsajP94+ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNTE5MTQwMFoXDTI1MTIxNDIwMTQwMFowLzEtMCsGA1UEAxMk YmJiYWY3YmQtMzE4ZS00MzNlLWIwMmYtZDM4NmZkZWUxYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eG0cipXaa5q0Q2StRhMaGGo5a5d8fNKxWVm Vwk0fM6KNqq9Mv70H+2bBcIi57rz9kRFBgbn7XidI3M1RvrXbb93pNvUq72FKk4t EYlB89JclBSlqCH9RAkc1LH7o59Ad9EDMEdK1ztS4yhGNsIMe0sqyha3QwW5E6QX EXt8fqMfiVpimT6eef3j5fef2+aGAFIz3u3vgBlmfTtazyQ7pTfnDgFqAf818Kxl fLYaYR29kYR0pNQz51zymGSzPpz3Gj/Vevc02/1dzcSAbq/4eUZ2lp4ooqDuYErT 6l9d2nhDBGl68qCVziGawi2iNmPo+hzy/lCL+AJkpOoEEXUltwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJtPDMYU9cXRfRoGVEc5uEjqiBJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjMxNDViZDEtYTg0My0z MmU1LTlhZGUtNjc5ZGViODIxMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAwAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATEA0JjkvrviPmw2+oB0QgkU597gvSCrE/9QkIn9x1AKlqQGne7Tb Cr9Sa4aOK/9udzrVYNJ++yyro1RAb/q9filzlosVc7zNe1DFDVpDkm4pQzDWVJma ZFY0HfIdaTP80HxCLAMcZ/lcBbGx8bLxaLAHINbrarcapvYnj5U5ZQ3QZ/0E/AcL CFI8oolpfI1W+6vbM3dWeYL0cMrvBkgXIDflIFLwY/nl+GT5VJ0h+OW+/yU032jo uZtY5IdI8/zUx9Yf3zgHq7w3jb1HGrpWLRjle3qlZXPvBFZS+1nEMBDeTyQK1XnR 9LHTzh1V6X8LBnGQu2dfmyvH8/8CmZtvDQ== -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:42 2025 by rpki-client