$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa File: 8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa (raw, json) Hash identifier: Ad9uprDl84whfLho8CGhIUMA586EYbeW+tV9lkI953M= Subject key identifier: 4C:55:46:1B:D7:7E:A3:87:16:84:46:DD:D9:29:7A:D6:87:53:B4:80 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2C3C05E19DED893CA3CB9F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa Signing time: Fri 12 Sep 2025 18:44:12 +0000 ROA not before: Fri 12 Sep 2025 18:44:12 +0000 ROA not after: Thu 11 Dec 2025 19:44:12 +0000 asID: 54253 IP address blocks: 2603:c089::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:3c:05:e1:9d:ed:89:3c:a3:cb:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 12 18:44:12 2025 GMT Not After : Dec 11 19:44:12 2025 GMT Subject: CN=2deb274f-245a-46c1-8d15-c2fca548bf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:96:7f:b7:a2:60:42:8e:90:3e:6e:86:6a: 04:f2:20:0b:1d:2a:25:47:69:cf:f4:e5:9e:39:a8: ab:c1:b0:13:19:fc:e8:79:05:13:f8:e6:e2:62:c5: 46:bf:ea:6e:5c:cc:c1:33:2b:a3:1d:ea:4f:1b:ba: 70:17:e4:65:81:b2:5d:1a:ed:fe:ac:1b:89:17:1e: 9c:d3:1e:bd:2f:29:fa:5e:1e:1f:ce:b6:79:09:01: f9:0e:06:0b:1f:31:8c:60:32:f5:b7:c3:63:e2:ed: 0b:d7:e0:f8:fd:50:3c:c4:1a:c2:65:c0:7a:c6:ee: f7:89:ed:95:ad:7c:fd:e5:3f:3d:b9:3a:b2:8f:79: 56:7f:46:91:93:47:39:a0:35:4a:fd:2a:75:3e:ec: a3:11:b6:8e:67:1a:cf:1a:94:77:c7:27:b8:03:ed: de:bb:ff:83:18:f0:38:39:b5:aa:6a:0e:ec:47:65: 75:87:26:a3:5e:54:4f:6b:6e:44:b3:ab:af:4d:91: 4e:5d:0c:2f:cb:ad:40:58:f1:85:64:6f:59:a1:e5: aa:b3:a9:47:5a:3c:a3:3d:cd:ce:1a:39:42:27:21: 15:51:ea:04:d1:76:3a:7d:ff:e4:bb:a7:f3:7a:48: d1:5d:3b:10:4c:59:8f:8e:90:6a:8d:4f:46:fc:d1: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:55:46:1B:D7:7E:A3:87:16:84:46:DD:D9:29:7A:D6:87:53:B4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8ff4f5cd-6157-30b3-bd0a-cac51aec3cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c089::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b0:71:ef:ff:87:44:85:b6:90:17:82:31:bd:f6:39:64:67: b7:00:72:04:11:de:73:6d:dc:56:67:6b:21:a7:1f:92:49:71: af:4a:c0:5c:35:4a:d4:c6:55:a1:b7:25:e2:8e:6d:dd:84:8e: db:a8:70:0a:06:83:db:f8:ff:7f:6a:d8:7d:54:56:2a:5b:05: 1e:e1:29:4e:f0:db:4e:f4:03:7f:80:26:45:a3:d0:6e:8e:f9: 9d:83:44:86:e7:f0:96:53:91:1d:a6:ee:96:3f:a9:ad:01:ed: 07:ea:ef:c8:88:3a:39:e9:69:35:8b:c2:6b:da:37:c6:2c:05: 5f:e6:48:50:7d:34:1c:51:e7:81:07:af:12:5c:8c:ad:bb:95: d7:7a:5e:8a:d4:94:56:97:63:9a:85:fe:61:3f:b4:2b:4e:78: be:4a:b4:8d:44:88:9f:c1:f2:2b:f3:73:df:9d:96:0b:1f:d8: ff:4f:cc:de:9a:75:45:fd:3e:ff:67:30:34:4f:61:0e:04:cd: a4:74:6c:f3:6b:e9:f7:5d:ca:6a:ae:96:72:35:43:c7:bc:19: 98:ed:c0:a9:a8:1e:96:b5:73:8d:90:c9:1c:7c:92:80:0d:d5: 7c:63:8d:8b:02:0f:62:3b:c1:81:09:62:96:67:3e:d1:4d:61: be:12:ed:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEssPAXhne2JPKPLn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMjE4NDQxMloXDTI1MTIxMTE5NDQxMlowLzEtMCsGA1UEAxMk MmRlYjI3NGYtMjQ1YS00NmMxLThkMTUtYzJmY2E1NDhiZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiWWf7eiYEKOkD5uhmoE8iALHSolR2nP9OWe OairwbATGfzoeQUT+ObiYsVGv+puXMzBMyujHepPG7pwF+RlgbJdGu3+rBuJFx6c 0x69Lyn6Xh4fzrZ5CQH5DgYLHzGMYDL1t8Nj4u0L1+D4/VA8xBrCZcB6xu73ie2V rXz95T89uTqyj3lWf0aRk0c5oDVK/Sp1PuyjEbaOZxrPGpR3xye4A+3eu/+DGPA4 ObWqag7sR2V1hyajXlRPa25Es6uvTZFOXQwvy61AWPGFZG9ZoeWqs6lHWjyjPc3O GjlCJyEVUeoE0XY6ff/ku6fzekjRXTsQTFmPjpBqjU9G/NFLqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFExVRhvXfqOHFoRG3dkpetaHU7SAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGZmNGY1Y2QtNjE1Ny0z MGIzLWJkMGEtY2FjNTFhZWMzY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAiQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHrBx7/+HRIW2kBeCMb32OWRntwByBBHec23cVmdrIacfkklxr0rA XDVK1MZVobcl4o5t3YSO26hwCgaD2/j/f2rYfVRWKlsFHuEpTvDbTvQDf4AmRaPQ bo75nYNEhufwllORHabulj+prQHtB+rvyIg6OelpNYvCa9o3xiwFX+ZIUH00HFHn gQevElyMrbuV13peitSUVpdjmoX+YT+0K054vkq0jUSIn8HyK/Nz352WCx/Y/0/M 3pp1Rf0+/2cwNE9hDgTNpHRs82vp913Kaq6WcjVDx7wZmO3AqagelrVzjZDJHHyS gA3VfGONiwIPYjvBgQlilmc+0U1hvhLt/Q== -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:12 2025 by rpki-client