$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a99149f-2795-3bfd-800d-90ea98c2f2d7.roa File: 5a99149f-2795-3bfd-800d-90ea98c2f2d7.roa (raw, json) Hash identifier: kNbSL2Pso7d7iWkFd22KsRAczdXrH22gPCROwijawKM= Subject key identifier: 97:AB:75:DE:4B:4B:2F:84:FC:DF:80:99:69:C2:24:2C:54:BE:05:C9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B377AE0C84EDE2A35390C9B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a99149f-2795-3bfd-800d-90ea98c2f2d7.roa Signing time: Tue 16 Sep 2025 19:24:45 +0000 ROA not before: Tue 16 Sep 2025 19:24:45 +0000 ROA not after: Mon 15 Dec 2025 20:24:45 +0000 asID: 54253 IP address blocks: 2603:c0f4:500::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:7a:e0:c8:4e:de:2a:35:39:0c:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 16 19:24:45 2025 GMT Not After : Dec 15 20:24:45 2025 GMT Subject: CN=2a750ab6-5986-4f4c-8578-4c0513178b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:38:2b:ce:21:4f:40:10:5c:77:e7:3d:42: b6:69:3e:8e:6f:96:b2:26:b4:9e:ed:3b:da:29:f0: 70:8c:8b:48:55:77:db:9a:b1:29:46:3a:5b:d1:a8: 1f:f4:22:e6:fe:bb:17:ba:ab:8f:e4:8f:b0:fa:d6: ce:c0:84:76:4f:66:3e:62:ed:3e:02:13:88:77:28: 92:4c:3e:df:5f:55:75:f9:65:70:c5:71:81:f1:43: 49:9f:6b:0a:78:79:4a:7c:58:61:81:9f:c8:cb:f9: 5b:e7:94:44:b7:5b:79:fe:75:8e:cf:09:2f:04:59: da:6c:6e:2b:dc:56:79:a6:11:7c:2f:34:10:d0:83: 09:f5:69:00:8e:ba:0a:9b:ab:b1:23:e7:34:23:b6: 48:73:9c:14:af:15:6f:e0:1e:9d:ef:22:79:ee:24: f9:28:3a:27:e6:bc:56:10:be:98:22:8e:0d:cc:c6: d4:2b:ed:f1:13:bb:7f:be:57:52:9e:42:7e:e8:da: 18:78:28:61:96:dc:1d:4a:39:23:da:9d:51:07:ba: a1:70:7b:30:de:02:8e:29:69:e9:cb:c0:22:cd:25: 46:94:1d:0a:ca:49:86:f6:ef:03:b8:98:20:c1:6f: 64:66:fe:d5:09:6b:79:42:6a:4a:1a:21:ed:93:ca: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:75:DE:4B:4B:2F:84:FC:DF:80:99:69:C2:24:2C:54:BE:05:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a99149f-2795-3bfd-800d-90ea98c2f2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0f4:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:dc:f4:cf:25:ef:e6:d7:d6:a0:01:3d:15:6c:48:bf:9c:b2: d5:65:7f:22:53:ab:2a:1d:60:43:d1:5b:a3:9b:0f:e2:7c:0b: 38:c7:e4:f4:3f:32:3e:a3:40:db:ee:3e:93:82:76:7b:b2:6e: ff:75:bc:47:f0:bb:4e:07:8a:16:6c:95:91:4d:41:32:ae:8a: bc:33:23:8f:63:b4:a9:4e:ca:fb:f4:52:60:7c:38:58:65:ae: 7b:54:09:77:f3:b0:ff:b5:27:70:7b:ed:92:c9:2e:4a:ff:59: 15:96:ff:96:05:91:d5:06:84:77:eb:b9:1b:3b:59:05:89:54: c2:27:bf:6f:e1:8e:aa:a8:fc:d0:8a:5b:27:48:6e:72:d2:3f: 0a:9e:44:3b:59:32:aa:d5:65:4f:c5:4c:99:d3:eb:53:c0:a7: ab:76:4c:55:d9:f9:ba:2f:d8:79:6f:6b:d9:54:3d:14:9f:f2: 36:38:68:3f:09:00:37:7a:20:ba:4a:de:f5:4f:7c:59:6a:c6: 1b:4f:87:1f:d4:a9:db:8f:cd:ea:71:3c:ec:f3:1f:04:58:b8: 6b:73:49:0d:fe:b3:2f:52:5d:b4:b5:42:88:5c:11:9b:3c:ba: c6:f8:af:ce:2e:34:63:46:f5:22:47:9c:42:26:62:95:1c:17: 5f:5c:b2:e3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs3euDITt4qNTkMmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNjE5MjQ0NVoXDTI1MTIxNTIwMjQ0NVowLzEtMCsGA1UEAxMk MmE3NTBhYjYtNTk4Ni00ZjRjLTg1NzgtNGMwNTEzMTc4YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYI4K84hT0AQXHfnPUK2aT6Ob5ayJrSe7Tva KfBwjItIVXfbmrEpRjpb0agf9CLm/rsXuquP5I+w+tbOwIR2T2Y+Yu0+AhOIdyiS TD7fX1V1+WVwxXGB8UNJn2sKeHlKfFhhgZ/Iy/lb55REt1t5/nWOzwkvBFnabG4r 3FZ5phF8LzQQ0IMJ9WkAjroKm6uxI+c0I7ZIc5wUrxVv4B6d7yJ57iT5KDon5rxW EL6YIo4NzMbUK+3xE7t/vldSnkJ+6NoYeChhltwdSjkj2p1RB7qhcHsw3gKOKWnp y8AizSVGlB0KykmG9u8DuJggwW9kZv7VCWt5QmpKGiHtk8owawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJerdd5LSy+E/N+AmWnCJCxUvgXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWE5OTE0OWYtMjc5NS0z YmZkLTgwMGQtOTBlYTk4YzJmMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA9AUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqtz0zyXv5tfWoAE9FWxIv5yy1WV/IlOrKh1gQ9Fbo5sP4nwLOMfk 9D8yPqNA2+4+k4J2e7Ju/3W8R/C7TgeKFmyVkU1BMq6KvDMjj2O0qU7K+/RSYHw4 WGWue1QJd/Ow/7UncHvtkskuSv9ZFZb/lgWR1QaEd+u5GztZBYlUwie/b+GOqqj8 0IpbJ0huctI/Cp5EO1kyqtVlT8VMmdPrU8Cnq3ZMVdn5ui/YeW9r2VQ9FJ/yNjho PwkAN3ogukre9U98WWrGG0+HH9Sp24/N6nE87PMfBFi4a3NJDf6zL1JdtLVCiFwR mzy6xvivzi40Y0b1IkecQiZilRwXX1yy4w== -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:43 2025 by rpki-client