$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa File: 3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa (raw, json) Hash identifier: a7uBzjKVdD6SqCtLrLlyu8xuBnhM9uf2Zp9/qpx/0nY= Subject key identifier: 03:D9:DE:59:47:3B:61:B4:AD:AF:6C:B2:7E:33:CD:17:36:08:93:F0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2993601B1759B8AA5152CB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa Signing time: Thu 11 Sep 2025 19:52:47 +0000 ROA not before: Thu 11 Sep 2025 19:52:47 +0000 ROA not after: Wed 10 Dec 2025 20:52:47 +0000 asID: 54253 IP address blocks: 2603:c049:2000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:93:60:1b:17:59:b8:aa:51:52:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 19:52:47 2025 GMT Not After : Dec 10 20:52:47 2025 GMT Subject: CN=00fd904a-bec6-46b7-a761-27ac57cd428b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:6e:5c:e0:f2:7d:ca:b1:20:a3:0f:db:ef: 89:28:11:39:da:34:c1:27:64:3c:37:7e:a5:b2:d5: 7a:f0:41:2b:1f:30:44:e6:af:51:fd:a2:c7:0f:32: ba:56:61:24:47:d2:3f:11:d7:e7:a3:18:e7:0d:9f: 10:f2:3e:0e:ae:e2:46:40:3c:9a:58:4e:4c:2f:e8: b5:1d:ef:90:9e:31:68:d0:5b:91:79:ad:0c:c6:6b: cd:18:69:17:b1:c1:92:56:4f:db:f4:9e:43:23:52: 45:3e:27:19:84:76:ca:cb:f7:00:b9:2f:9a:8d:21: 21:2d:a7:49:6a:04:de:b0:31:c5:98:eb:44:e4:06: 8d:7e:01:ca:7b:74:56:08:3b:03:b8:01:51:cc:8c: f7:86:e4:98:5a:a1:70:35:da:ed:c7:aa:d9:5d:e6: bd:38:ac:b2:3b:47:6d:fb:0e:5a:71:fc:62:3a:c5: 77:2a:c3:66:5a:eb:f7:59:e7:d1:39:62:f6:eb:fd: 3b:f2:cf:11:6c:f6:29:21:53:0c:56:3a:e0:52:af: 16:9b:42:df:c1:e8:a8:f4:a0:eb:8b:79:bd:6d:b1: 2d:a2:12:f8:86:ec:20:cc:04:59:b5:f6:87:e1:c1: 85:e2:08:f5:5b:de:af:eb:dd:53:7f:1e:59:34:ad: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D9:DE:59:47:3B:61:B4:AD:AF:6C:B2:7E:33:CD:17:36:08:93:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3886be9c-8697-3af7-bf05-1b0b0567a6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c049:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a4:60:b1:33:e3:55:7e:3b:d2:72:b3:28:cd:cd:60:7d:03: 60:d0:a1:e8:e1:2b:59:cd:03:90:43:1d:7c:f7:36:7a:f1:34: 77:a8:fc:9b:90:2f:41:90:2a:fc:e5:67:6f:f0:dd:4f:88:e7: d3:cd:b8:6f:6e:58:40:41:2e:37:02:0f:da:ee:5e:5b:ce:e9: 6a:51:ef:a1:08:e5:93:4f:07:cb:7f:e9:22:69:b4:08:e5:98: 81:4d:90:21:d7:1f:b5:bd:32:92:bf:f9:f4:8d:08:d1:b4:8c: 83:54:b5:4d:ea:63:b9:36:7c:cf:48:42:8e:2e:0d:1c:a2:c8: 97:6c:c3:9a:d0:55:4d:bb:6e:4b:ce:0a:b7:ab:89:b8:ed:bb: 96:74:09:e2:66:0f:4f:43:c4:54:39:71:05:80:b6:5f:4c:60: c1:1b:23:34:c1:17:55:39:60:ac:88:fb:43:ca:06:dd:a3:60: ee:f8:cd:94:9c:0d:2a:ec:6d:47:a5:b4:2c:7d:a6:05:8e:c5: 09:6b:55:68:6f:c3:b5:43:7b:b8:c7:1b:63:b8:4e:74:ce:00: 50:8b:11:90:ed:f2:d0:6a:24:b3:74:c6:9f:54:03:05:50:8d: 36:c8:2b:5e:9b:0f:3a:fa:d5:b4:21:af:0c:51:d1:f5:0e:09: fe:56:16:3c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEspk2AbF1m4qlFSywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMTE5NTI0N1oXDTI1MTIxMDIwNTI0N1owLzEtMCsGA1UEAxMk MDBmZDkwNGEtYmVjNi00NmI3LWE3NjEtMjdhYzU3Y2Q0MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0puXODyfcqxIKMP2++JKBE52jTBJ2Q8N36l stV68EErHzBE5q9R/aLHDzK6VmEkR9I/EdfnoxjnDZ8Q8j4OruJGQDyaWE5ML+i1 He+QnjFo0FuRea0MxmvNGGkXscGSVk/b9J5DI1JFPicZhHbKy/cAuS+ajSEhLadJ agTesDHFmOtE5AaNfgHKe3RWCDsDuAFRzIz3huSYWqFwNdrtx6rZXea9OKyyO0dt +w5acfxiOsV3KsNmWuv3WefROWL26/078s8RbPYpIVMMVjrgUq8Wm0Lfweio9KDr i3m9bbEtohL4huwgzARZtfaH4cGF4gj1W96v691Tfx5ZNK10PwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAPZ3llHO2G0ra9ssn4zzRc2CJPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzg4NmJlOWMtODY5Ny0z YWY3LWJmMDUtMWIwYjA1NjdhNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPASSAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANqRgsTPjVX470nKzKM3NYH0DYNCh6OErWc0DkEMdfPc2evE0d6j8 m5AvQZAq/OVnb/DdT4jn0824b25YQEEuNwIP2u5eW87palHvoQjlk08Hy3/pImm0 COWYgU2QIdcftb0ykr/59I0I0bSMg1S1TepjuTZ8z0hCji4NHKLIl2zDmtBVTbtu S84Kt6uJuO27lnQJ4mYPT0PEVDlxBYC2X0xgwRsjNMEXVTlgrIj7Q8oG3aNg7vjN lJwNKuxtR6W0LH2mBY7FCWtVaG/DtUN7uMcbY7hOdM4AUIsRkO3y0Goks3TGn1QD BVCNNsgrXpsPOvrVtCGvDFHR9Q4J/lYWPA== -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:17 2025 by rpki-client