$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef9bc3a-eb29-3db3-ad1b-25cffe5aedf9.roa File: 4ef9bc3a-eb29-3db3-ad1b-25cffe5aedf9.roa (raw, json) Hash identifier: 8pOmTE891lYGAOi3dkBt/TW2dlD00KRrXTNo637FUOw= Subject key identifier: 80:23:94:F8:46:52:CC:21:FB:CD:F6:1A:1C:9A:DE:6B:05:1F:91:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFFE741E7D63A3C72039C3160 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef9bc3a-eb29-3db3-ad1b-25cffe5aedf9.roa Signing time: Wed 27 Aug 2025 21:37:51 +0000 ROA not before: Wed 27 Aug 2025 21:37:51 +0000 ROA not after: Tue 25 Nov 2025 22:37:51 +0000 asID: 31898 IP address blocks: 2600:2000:2120::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e7:41:e7:d6:3a:3c:72:03:9c:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 21:37:51 2025 GMT Not After : Nov 25 22:37:51 2025 GMT Subject: CN=12aab3df-2147-4ceb-b7d9-c8b795382402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:70:cb:01:8d:e0:9d:dd:7b:52:c8:92:5d: 52:44:df:5f:50:b9:f7:bc:7b:33:43:8c:6c:a7:a7: b3:3b:ef:45:08:82:7a:ec:ec:5a:b4:63:75:06:a8: c0:d6:01:22:c8:44:ab:5a:45:72:24:ee:c9:08:fe: 70:48:09:06:ac:7f:77:bc:a4:11:49:78:a2:99:2a: 6e:92:5a:f9:19:36:34:15:2a:f3:d5:3c:fd:f0:a2: 28:8f:ac:59:f5:82:0d:1a:8e:8a:a4:c1:3e:84:66: 4a:c5:a8:28:73:ad:12:bd:e1:af:83:1b:93:e3:57: b9:70:0d:c2:7e:8a:dc:ec:bf:33:c4:29:32:4a:06: 77:26:6d:7d:07:23:08:2d:44:ca:f4:33:a9:a2:77: d9:e4:ed:bf:56:3b:05:45:52:9e:fb:e8:23:8a:c1: fd:44:bb:34:1f:ca:08:0a:92:c8:99:28:e1:c0:28: ed:4d:8e:34:78:98:a7:1c:6d:fb:27:dc:18:d4:13: 89:82:47:84:79:a9:72:0d:f6:ea:ca:52:01:2c:89: 03:8c:fe:c7:8f:f0:79:8e:13:c8:aa:4e:fd:36:fc: 61:88:d1:e3:6d:77:7b:95:f0:15:de:48:6c:b5:b4: fc:f9:f4:ea:08:94:5d:40:65:e0:14:30:d9:71:6e: 67:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:23:94:F8:46:52:CC:21:FB:CD:F6:1A:1C:9A:DE:6B:05:1F:91:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef9bc3a-eb29-3db3-ad1b-25cffe5aedf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2120::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:84:98:49:89:a8:9a:de:3a:9d:96:94:e6:b7:9e:86:d9:ce: 3a:1c:f2:b1:c5:9f:c5:95:53:79:84:32:26:3d:8b:2e:9d:58: bf:70:fe:c9:1f:1b:a8:20:0e:e2:73:01:73:45:b3:b7:f4:e7: de:a2:6a:04:76:33:38:65:dd:da:ca:5b:07:b7:9b:1c:b5:3c: 00:7b:df:d7:ff:1d:27:6b:61:ce:48:11:89:8c:62:e5:c7:1e: 3a:ef:35:f9:70:12:20:dc:c7:be:7a:f5:e6:3b:b0:bc:e6:96: 89:2d:16:c2:b9:25:e6:df:61:d2:ea:61:c7:23:ea:a3:bc:16: 6b:24:0a:5c:9e:7a:ce:b5:83:68:61:f7:66:83:df:45:04:c8: c4:60:41:1a:df:63:f3:7c:ab:f0:d5:84:bd:28:9a:b6:2a:2c: c0:00:d7:df:f0:de:1f:48:cc:95:0a:47:44:72:5c:d4:74:b8: 4b:a6:68:21:00:e8:14:90:8c:1d:5b:d8:9e:87:4c:61:d9:3a: 89:01:ea:2b:80:79:57:f9:ad:ea:ad:c0:63:98:81:c4:47:16: 57:53:f8:b2:eb:17:ac:f3:b2:71:55:04:00:8d:1c:47:8a:e3: c4:8d:51:22:7b:1e:0b:e4:0c:f7:4f:b2:e3:f2:6a:e4:e4:eb: 19:19:b9:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr/50Hn1jo8cgOcMWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIxMzc1MVoXDTI1MTEyNTIyMzc1MVowLzEtMCsGA1UEAxMk MTJhYWIzZGYtMjE0Ny00Y2ViLWI3ZDktYzhiNzk1MzgyNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdZwywGN4J3de1LIkl1SRN9fULn3vHszQ4xs p6ezO+9FCIJ67OxatGN1BqjA1gEiyESrWkVyJO7JCP5wSAkGrH93vKQRSXiimSpu klr5GTY0FSrz1Tz98KIoj6xZ9YINGo6KpME+hGZKxagoc60SveGvgxuT41e5cA3C forc7L8zxCkySgZ3Jm19ByMILUTK9DOponfZ5O2/VjsFRVKe++gjisH9RLs0H8oI CpLImSjhwCjtTY40eJinHG37J9wY1BOJgkeEealyDfbqylIBLIkDjP7Hj/B5jhPI qk79NvxhiNHjbXd7lfAV3khstbT8+fTqCJRdQGXgFDDZcW5neQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIAjlPhGUswh+832Ghya3msFH5HSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVmOWJjM2EtZWIyOS0z ZGIzLWFkMWItMjVjZmZlNWFlZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmEmEmJqJreOp2WlOa3nobZzjoc8rHFn8WVU3mEMiY9iy6dWL9w /skfG6ggDuJzAXNFs7f0596iagR2Mzhl3drKWwe3mxy1PAB739f/HSdrYc5IEYmM YuXHHjrvNflwEiDcx7569eY7sLzmloktFsK5JebfYdLqYccj6qO8FmskClyees61 g2hh92aD30UEyMRgQRrfY/N8q/DVhL0omrYqLMAA19/w3h9IzJUKR0RyXNR0uEum aCEA6BSQjB1b2J6HTGHZOokB6iuAeVf5reqtwGOYgcRHFldT+LLrF6zzsnFVBACN HEeK48SNUSJ7HgvkDPdPsuPyauTk6xkZuV0= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:15 2025 by rpki-client