$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2aa5e1b2-cf6b-3f50-8aa9-acd3ad54a56c.roa File: 2aa5e1b2-cf6b-3f50-8aa9-acd3ad54a56c.roa (raw, json) Hash identifier: JCJan6uhVJti79MTPLfgySwFW47yr74YfjAqjvMbe6I= Subject key identifier: 21:E6:12:C9:3C:E8:E3:3B:28:32:B8:81:13:B7:71:9B:23:28:F6:65 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFA196DA3BB0CB01A51AA01AC Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2aa5e1b2-cf6b-3f50-8aa9-acd3ad54a56c.roa Signing time: Mon 25 Aug 2025 19:44:05 +0000 ROA not before: Mon 25 Aug 2025 19:44:05 +0000 ROA not after: Sun 23 Nov 2025 20:44:05 +0000 asID: 31898 IP address blocks: 2603:c02f:4000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:19:6d:a3:bb:0c:b0:1a:51:aa:01:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 19:44:05 2025 GMT Not After : Nov 23 20:44:05 2025 GMT Subject: CN=9869f4eb-97a3-432e-8b6c-2552ad1854a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:27:fe:76:8a:af:a3:33:29:89:ff:4a:92: f1:dc:38:1a:9f:d6:fc:45:da:ed:25:e3:97:c5:35: 19:40:73:58:e9:a9:9f:29:b4:09:94:dd:21:ae:6d: 19:4a:e7:25:fd:d9:4b:a7:cc:28:04:fa:17:16:30: a0:99:dd:34:8e:bf:29:4a:5d:7d:61:c4:1b:90:a7: f6:00:45:53:d1:f4:29:36:50:7f:1b:88:21:56:60: e7:ad:c7:09:d4:7e:21:90:76:03:c8:1e:fc:82:a2: 9e:d5:28:b2:0d:9d:8d:c2:a6:9f:99:3e:09:b0:47: 54:ee:16:dc:09:e7:5a:97:de:8e:7e:ba:63:b6:ee: 87:f8:82:89:a2:57:53:50:09:1c:ef:5b:23:fc:86: 06:1b:8c:d6:72:4d:af:80:a3:2e:58:5f:ca:3b:d7: 98:a8:b9:96:24:14:57:60:c3:be:a5:a3:c2:82:8c: f9:f2:2b:c4:51:e9:b9:fd:4f:bb:63:84:7f:df:eb: 84:7f:7e:95:24:b6:23:44:ce:f1:43:7f:43:09:54: 20:a0:c1:ba:1b:4b:63:63:1c:b9:bc:48:26:7b:ec: 94:e5:4e:bd:1f:c9:00:62:a2:aa:ef:03:be:3e:63: b0:bc:64:ea:4d:f3:d1:77:72:e2:be:b1:b8:91:0e: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:12:C9:3C:E8:E3:3B:28:32:B8:81:13:B7:71:9B:23:28:F6:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2aa5e1b2-cf6b-3f50-8aa9-acd3ad54a56c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c02f:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:dc:98:fc:ef:9f:37:06:a6:8a:49:6d:70:30:7b:e4:86:a1: 43:91:4d:05:2f:55:a9:0b:fb:7a:d2:10:0f:17:1f:04:13:60: 93:73:5c:14:2e:00:fd:2a:eb:9e:99:c0:ee:17:81:94:db:b5: a9:12:01:37:46:a2:69:6e:c8:e9:53:d9:cc:bb:69:1e:59:af: a5:ea:19:6e:21:f8:d2:77:fc:e1:d8:06:08:a7:a5:07:41:df: 6f:6c:19:f4:68:62:c4:68:5d:26:b6:fe:69:b6:3f:35:17:78: e9:38:4a:6e:59:f8:7b:07:35:cc:f2:ca:ab:e9:42:b1:c5:c3: ab:60:de:7d:2e:0e:6c:46:12:62:76:82:db:34:84:e7:5e:3f: 00:45:dd:ff:57:f5:09:2b:26:a0:9f:b7:1c:a8:eb:8b:22:25: 91:0d:68:71:5a:05:28:ad:7c:f3:14:7b:50:34:ed:cc:50:71: e5:4c:5a:16:23:d9:15:01:97:a4:f8:42:7b:cb:bf:f4:84:cb: da:32:c7:0d:e2:bc:bb:55:fb:e3:76:1e:2d:2f:a4:2f:3a:a2: d1:2c:f6:10:21:1a:6e:e8:98:72:cf:f9:47:69:2d:88:cf:91: 87:8a:d3:3d:cd:ef:90:7b:9f:ff:20:8f:f7:e6:54:1c:23:b9: ed:87:45:3c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr6GW2juwywGlGqAawwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE5NDQwNVoXDTI1MTEyMzIwNDQwNVowLzEtMCsGA1UEAxMk OTg2OWY0ZWItOTdhMy00MzJlLThiNmMtMjU1MmFkMTg1NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWMn/naKr6MzKYn/SpLx3Dgan9b8RdrtJeOX xTUZQHNY6amfKbQJlN0hrm0ZSucl/dlLp8woBPoXFjCgmd00jr8pSl19YcQbkKf2 AEVT0fQpNlB/G4ghVmDnrccJ1H4hkHYDyB78gqKe1SiyDZ2NwqafmT4JsEdU7hbc Cedal96Ofrpjtu6H+IKJoldTUAkc71sj/IYGG4zWck2vgKMuWF/KO9eYqLmWJBRX YMO+paPCgoz58ivEUem5/U+7Y4R/3+uEf36VJLYjRM7xQ39DCVQgoMG6G0tjYxy5 vEgme+yU5U69H8kAYqKq7wO+PmOwvGTqTfPRd3LivrG4kQ4bzwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCHmEsk86OM7KDK4gRO3cZsjKPZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmFhNWUxYjItY2Y2Yi0z ZjUwLThhYTktYWNkM2FkNTRhNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAL0Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZNyY/O+fNwamikltcDB75IahQ5FNBS9VqQv7etIQDxcfBBNgk3Nc FC4A/SrrnpnA7heBlNu1qRIBN0aiaW7I6VPZzLtpHlmvpeoZbiH40nf84dgGCKel B0Hfb2wZ9GhixGhdJrb+abY/NRd46ThKbln4ewc1zPLKq+lCscXDq2DefS4ObEYS YnaC2zSE514/AEXd/1f1CSsmoJ+3HKjriyIlkQ1ocVoFKK188xR7UDTtzFBx5Uxa FiPZFQGXpPhCe8u/9ITL2jLHDeK8u1X743YeLS+kLzqi0Sz2ECEabuiYcs/5R2kt iM+Rh4rTPc3vkHuf/yCP9+ZUHCO57YdFPA== -----END CERTIFICATE-----Generated at Thu Oct 9 01:13:06 2025 by rpki-client