$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f233168-9b38-3af0-89c7-c7d4283983cb.roa File: 5f233168-9b38-3af0-89c7-c7d4283983cb.roa (raw, json) Hash identifier: wvQUXrpIFq3e0aacl+LwOzyY4jXGikkFmd2Zx6Ts/wU= Subject key identifier: 28:26:52:3C:2D:49:23:D7:7A:12:B0:CF:C2:39:6C:15:A7:CF:8D:50 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD44B4C7A45F1EFC5A3177C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f233168-9b38-3af0-89c7-c7d4283983cb.roa Signing time: Tue 26 Aug 2025 22:58:43 +0000 ROA not before: Tue 26 Aug 2025 22:58:43 +0000 ROA not after: Mon 24 Nov 2025 23:58:43 +0000 asID: 31898 IP address blocks: 2606:b400:8012::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:b4:c7:a4:5f:1e:fc:5a:31:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:58:43 2025 GMT Not After : Nov 24 23:58:43 2025 GMT Subject: CN=9f56bcbb-6878-4ad0-bba6-8945648b457a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:72:c2:3b:b2:24:52:e5:8a:7a:bf:e0:34: 82:ec:9f:e6:c8:95:dc:e5:8c:aa:09:a9:8b:64:ee: 86:d8:dd:45:ac:c4:27:ad:a1:f1:c8:a6:04:e5:98: df:0d:60:43:2b:11:82:39:b9:23:86:c8:ae:83:ab: 71:4a:f4:7b:bf:ff:6d:77:03:1c:dd:b6:a1:a3:60: 09:ef:19:f0:b2:6c:27:da:5c:8e:fb:04:e2:f3:d2: 24:a1:6e:c0:53:bb:c3:8f:01:fa:07:14:50:d0:66: 46:ee:5e:af:bf:fa:0c:56:00:b9:47:60:7a:2e:4b: 3e:e0:5e:ac:f1:4f:51:47:0f:bb:12:b0:30:de:38: 9b:a8:e8:21:43:cb:80:28:1a:df:e3:47:f8:3e:95: c8:b6:9f:81:cf:07:da:84:a3:b1:40:63:ff:f1:b0: fb:be:15:8e:ca:e6:a9:3d:68:74:25:10:fb:32:c7: e9:94:17:58:42:95:be:47:d7:a9:36:84:a0:00:a5: 22:0a:1c:ac:b0:2f:95:db:c1:5f:2e:18:6c:61:09: 19:ae:82:6b:ba:2c:59:30:7c:0b:8f:63:29:15:12: 4f:97:36:2e:f1:bc:f6:ac:7e:2c:4c:e3:d7:0b:d5: 6d:52:bf:0c:4d:79:cd:52:76:ec:fb:9a:95:b7:86: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:26:52:3C:2D:49:23:D7:7A:12:B0:CF:C2:39:6C:15:A7:CF:8D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f233168-9b38-3af0-89c7-c7d4283983cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2606:b400:8012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:51:3f:68:aa:5c:7a:01:3d:d4:5b:6c:c2:a3:31:8c:8a:79: c3:10:c9:45:e5:85:c3:2b:55:96:e8:bc:13:b1:9e:3c:94:aa: 3a:90:4a:f7:18:4f:87:1b:e0:30:74:a6:39:2a:8f:75:aa:52: e5:70:2c:f4:e0:38:75:19:c6:c0:c1:68:ee:8a:9c:dc:17:66: 37:7b:46:bd:2b:b8:d9:3c:9e:83:71:f4:70:55:65:e9:d2:4e: 4b:16:d4:73:1a:70:08:f5:ea:5d:df:d3:6c:36:b3:33:f8:21: 22:6b:a0:a0:e5:f3:b4:b4:90:a3:0b:e8:4e:bb:17:a1:9c:45: 44:76:75:c3:89:3d:66:08:ec:88:7b:87:93:fb:0b:9a:80:e6: 4c:5e:c4:3d:e7:68:4b:8f:aa:89:b0:59:3c:37:a5:6c:4c:ae: 07:6d:be:e7:3c:db:67:8f:0d:91:42:19:ff:e1:f7:37:fc:43: d3:72:c1:72:22:12:b9:68:be:20:46:cd:47:f6:50:be:32:f4: 5d:3d:b9:e8:d4:f3:d3:c0:90:95:11:60:c8:9a:57:ff:b4:48: b2:23:0b:e4:32:62:db:cb:d3:a9:f9:58:d3:78:d9:06:36:31: f5:73:a3:04:02:9e:d4:e4:14:11:7c:4e:f6:1e:e8:97:e9:48: 18:02:b4:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr9RLTHpF8e/Foxd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTg0M1oXDTI1MTEyNDIzNTg0M1owLzEtMCsGA1UEAxMk OWY1NmJjYmItNjg3OC00YWQwLWJiYTYtODk0NTY0OGI0NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHNywjuyJFLlinq/4DSC7J/myJXc5YyqCamL ZO6G2N1FrMQnraHxyKYE5ZjfDWBDKxGCObkjhsiug6txSvR7v/9tdwMc3baho2AJ 7xnwsmwn2lyO+wTi89IkoW7AU7vDjwH6BxRQ0GZG7l6vv/oMVgC5R2B6Lks+4F6s 8U9RRw+7ErAw3jibqOghQ8uAKBrf40f4PpXItp+BzwfahKOxQGP/8bD7vhWOyuap PWh0JRD7MsfplBdYQpW+R9epNoSgAKUiChyssC+V28FfLhhsYQkZroJruixZMHwL j2MpFRJPlzYu8bz2rH4sTOPXC9VtUr8MTXnNUnbs+5qVt4bH1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgmUjwtSSPXehKwz8I5bBWnz41QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWYyMzMxNjgtOWIzOC0z YWYwLTg5YzctYzdkNDI4Mzk4M2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga0AIAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFRP2iqXHoBPdRbbMKjMYyKecMQyUXlhcMrVZbovBOxnjyUqjqQ SvcYT4cb4DB0pjkqj3WqUuVwLPTgOHUZxsDBaO6KnNwXZjd7Rr0ruNk8noNx9HBV ZenSTksW1HMacAj16l3f02w2szP4ISJroKDl87S0kKML6E67F6GcRUR2dcOJPWYI 7Ih7h5P7C5qA5kxexD3naEuPqomwWTw3pWxMrgdtvuc822ePDZFCGf/h9zf8Q9Ny wXIiErloviBGzUf2UL4y9F09uejU89PAkJURYMiaV/+0SLIjC+QyYtvL06n5WNN4 2QY2MfVzowQCntTkFBF8TvYe6JfpSBgCtAY= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:58 2025 by rpki-client