$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/475f574d-cac8-36bb-8a19-43aa4086182d.roa File: 475f574d-cac8-36bb-8a19-43aa4086182d.roa (raw, json) Hash identifier: YF39BSwi6/QTSBcnZp1ZTXGdIzDRmwa7K7ryM4/AcGA= Subject key identifier: F7:52:D7:28:E1:08:C6:B4:CB:A2:71:BC:BE:F8:2C:0A:70:A4:90:E2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD44493D95025C2F80CFFA60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/475f574d-cac8-36bb-8a19-43aa4086182d.roa Signing time: Tue 26 Aug 2025 22:57:52 +0000 ROA not before: Tue 26 Aug 2025 22:57:52 +0000 ROA not after: Mon 24 Nov 2025 23:57:52 +0000 asID: 31898 IP address blocks: 2603:c002:2500::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:49:3d:95:02:5c:2f:80:cf:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:52 2025 GMT Not After : Nov 24 23:57:52 2025 GMT Subject: CN=5e83250d-1935-459a-a54f-e06e6891ef50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:46:76:d0:38:c1:39:3a:a8:22:11:0e:da: 5e:db:dc:ec:da:9e:38:ae:bc:57:45:ac:e5:c9:7c: ec:52:9d:00:f3:f0:b0:30:28:a9:1d:e5:b7:23:0d: 71:2f:a9:f7:dd:8c:63:95:36:b7:81:e4:fe:91:ee: f0:10:e3:74:4f:b2:e6:13:11:0b:bc:d2:81:88:9e: 51:8f:86:01:ac:3c:14:7f:75:ed:82:b7:c3:75:44: e9:f1:72:fb:96:25:de:c1:c1:c4:e8:0e:4e:20:19: ae:00:4e:45:8c:91:6d:c5:f5:0e:91:f7:56:e1:65: 5a:e4:bf:bd:a7:3d:ad:23:f6:5b:97:6f:20:14:7c: ae:9f:45:ec:89:c2:e5:00:3d:43:0d:37:cd:8d:d8: 22:87:19:78:62:a4:f4:f3:e7:0f:74:62:be:97:9c: 5d:03:32:7e:81:03:21:2d:a2:e3:45:44:3f:db:61: bd:d9:0a:31:d4:45:bd:d2:13:53:1e:3c:d9:13:92: cf:88:57:ac:bf:1f:52:6e:d9:97:c5:f0:1b:4f:a6: 66:79:67:22:33:34:f8:e3:ff:1a:84:8a:1a:1a:66: de:79:b0:de:da:28:e0:42:3b:0a:5e:46:f8:fb:49: 67:b7:9c:12:80:3b:d9:2d:bc:b8:e5:ad:2f:3f:99: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:52:D7:28:E1:08:C6:B4:CB:A2:71:BC:BE:F8:2C:0A:70:A4:90:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/475f574d-cac8-36bb-8a19-43aa4086182d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:2500::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:cc:5a:d4:c8:eb:82:be:a9:3f:97:b7:e9:6b:eb:30:08:a9: 1f:28:5a:32:48:e3:e6:27:f4:ba:b5:19:52:cb:c1:02:f4:f5: 6f:a5:18:2b:fa:fe:85:47:16:4d:dc:c8:91:13:b1:00:ce:58: 50:f2:8f:83:91:02:e8:59:89:f3:03:4b:f6:3f:8e:06:c6:27: b7:d1:db:5f:f8:83:48:70:a4:d1:4b:72:27:b2:0f:f6:6f:f2: 65:1f:1c:67:bc:60:51:a7:5b:53:a9:3a:a1:b8:c3:f5:a0:c1: 07:eb:b7:09:5f:cb:67:e5:17:e7:d7:54:93:80:c7:70:7c:49: 43:07:71:96:02:82:5e:3a:55:41:6a:9a:f9:d7:8b:d3:e0:ee: e1:a4:87:ae:17:be:92:37:9b:34:dd:89:aa:19:5a:e8:1a:54: b5:bc:91:3a:9c:7f:ba:e1:e9:2b:1a:52:58:a1:e1:28:14:c2: be:be:8a:75:14:1b:e6:96:c5:ca:ea:f9:b1:2b:cc:ba:65:5c: 02:53:f7:7e:19:32:9c:05:ca:65:c5:1c:7d:35:67:bd:7b:79: db:5d:b5:51:fb:83:43:0c:2f:b3:79:f9:e6:cc:ba:a2:bd:96: 0c:4b:9b:8f:5d:0e:9f:da:aa:2a:c5:4e:9e:fa:44:80:9c:f7: 13:c0:13:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr9REk9lQJcL4DP+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTc1MloXDTI1MTEyNDIzNTc1MlowLzEtMCsGA1UEAxMk NWU4MzI1MGQtMTkzNS00NTlhLWE1NGYtZTA2ZTY4OTFlZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8lGdtA4wTk6qCIRDtpe29zs2p44rrxXRazl yXzsUp0A8/CwMCipHeW3Iw1xL6n33YxjlTa3geT+ke7wEON0T7LmExELvNKBiJ5R j4YBrDwUf3XtgrfDdUTp8XL7liXewcHE6A5OIBmuAE5FjJFtxfUOkfdW4WVa5L+9 pz2tI/Zbl28gFHyun0XsicLlAD1DDTfNjdgihxl4YqT08+cPdGK+l5xdAzJ+gQMh LaLjRUQ/22G92Qox1EW90hNTHjzZE5LPiFesvx9SbtmXxfAbT6ZmeWciMzT44/8a hIoaGmbeebDe2ijgQjsKXkb4+0lnt5wSgDvZLby45a0vP5mvdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPdS1yjhCMa0y6JxvL74LApwpJDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDc1ZjU3NGQtY2FjOC0z NmJiLThhMTktNDNhYTQwODYxODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAiUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGrMWtTI64K+qT+Xt+lr6zAIqR8oWjJI4+Yn9Lq1GVLLwQL09W+l GCv6/oVHFk3cyJETsQDOWFDyj4ORAuhZifMDS/Y/jgbGJ7fR21/4g0hwpNFLciey D/Zv8mUfHGe8YFGnW1OpOqG4w/WgwQfrtwlfy2flF+fXVJOAx3B8SUMHcZYCgl46 VUFqmvnXi9Pg7uGkh64XvpI3mzTdiaoZWugaVLW8kTqcf7rh6SsaUlih4SgUwr6+ inUUG+aWxcrq+bErzLplXAJT934ZMpwFymXFHH01Z717edtdtVH7g0MML7N5+ebM uqK9lgxLm49dDp/aqirFTp76RICc9xPAEzc= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:30 2025 by rpki-client