$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a54a7ce-3650-371a-9885-b9cbe7f4994d.roa File: 9a54a7ce-3650-371a-9885-b9cbe7f4994d.roa (raw, json) Hash identifier: oPv+X2d4WkHSA0VQfQKw1nUbBxSxvcjRdQ29L31t5Hw= Subject key identifier: B2:E3:17:8E:65:EA:7B:62:7A:0E:64:44:69:5C:DC:0A:BC:92:AC:CD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4482E6FFAD2659B8CDDD00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a54a7ce-3650-371a-9885-b9cbe7f4994d.roa Signing time: Tue 26 Aug 2025 22:58:19 +0000 ROA not before: Tue 26 Aug 2025 22:58:19 +0000 ROA not after: Mon 24 Nov 2025 23:58:19 +0000 asID: 31898 IP address blocks: 2603:c002:a910::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:82:e6:ff:ad:26:59:b8:cd:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:58:19 2025 GMT Not After : Nov 24 23:58:19 2025 GMT Subject: CN=c7f351f7-1fd4-43fe-a069-9c8abece1519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:92:91:dd:76:5d:8c:6a:fe:a2:01:ea:53:cc: 4c:f4:87:89:56:9f:f0:8c:52:3a:6a:05:11:4b:77: 15:4a:d2:3e:87:ae:ec:1e:ea:16:37:78:ed:57:37: 59:b2:83:e3:cc:19:fd:64:fc:59:14:cb:1e:c8:9a: c1:b6:2d:57:8a:9c:ee:a0:8f:e1:d7:03:64:70:ee: 44:3a:7c:47:7b:70:e1:75:b1:9b:0f:b0:3a:b9:2e: eb:4b:27:7b:32:02:1d:d7:00:0a:04:a2:7c:38:08: 9a:1c:b3:77:b0:55:f2:7f:dc:bf:e8:5c:9f:aa:15: 1b:70:54:aa:a8:c9:7b:4c:e1:b8:71:03:eb:92:cb: 40:ce:32:11:ff:d8:92:71:d8:8b:5f:97:1f:d9:1a: 7b:b8:70:49:f5:e9:c5:08:96:6e:01:49:1b:f5:0a: f6:35:ca:a1:45:fb:9b:c4:10:0e:e6:05:79:74:4c: 28:58:64:b7:12:3f:0c:00:ea:d8:81:38:be:f8:e9: f9:2f:d3:cb:37:1e:b5:27:fa:34:3a:f6:2b:6f:bf: 8e:14:9d:68:92:f3:6c:75:04:2e:8f:0f:54:b2:b0: 78:d9:85:52:3c:44:08:34:ed:86:16:56:a3:a6:37: 81:14:d5:8e:73:e2:af:7f:69:f1:41:7f:ef:41:b3: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E3:17:8E:65:EA:7B:62:7A:0E:64:44:69:5C:DC:0A:BC:92:AC:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a54a7ce-3650-371a-9885-b9cbe7f4994d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:a910::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:aa:0d:f3:0f:32:dd:22:19:65:2e:a7:ef:28:07:d2:bc:ff: 9b:1e:f3:f4:00:d3:d9:10:02:3c:e8:af:a2:0c:a7:12:41:c4: b7:37:f2:39:51:ce:81:f0:23:d9:5d:c0:be:74:24:e7:b6:6c: f7:61:ef:4f:83:f8:c5:79:d5:f1:73:a9:53:3a:80:7e:95:1c: fd:b3:95:d7:68:75:7e:34:fa:41:80:c0:6f:57:75:ab:c3:7c: d2:cc:4e:79:af:6f:2c:e4:57:04:7e:34:c1:dd:83:17:da:f3: 6a:3a:13:2d:84:23:5d:b1:0f:74:b7:73:0f:03:76:71:a8:78: 77:60:49:11:83:ba:fa:6f:07:7a:33:bd:d4:3d:51:c9:98:a6: 1f:33:88:67:75:7d:5c:ad:08:60:35:9a:7d:bf:cc:7a:bb:98: a6:65:b2:16:49:60:af:d6:2b:d2:6f:4d:2b:89:27:02:45:eb: d8:97:2d:d3:3d:7e:07:ef:a7:98:89:46:94:96:1f:59:ab:49: f3:7c:99:37:10:d9:ab:bb:c3:bc:fc:8e:32:78:07:f3:89:43: 0b:3d:2c:c6:25:81:77:dc:a7:5a:20:ac:d6:2f:0a:ae:b5:c5: 99:29:3c:5f:d1:1b:26:b1:64:94:1c:52:e6:be:62:18:4d:72: 9d:25:0b:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr9RILm/60mWbjN3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTgxOVoXDTI1MTEyNDIzNTgxOVowLzEtMCsGA1UEAxMk YzdmMzUxZjctMWZkNC00M2ZlLWEwNjktOWM4YWJlY2UxNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJKR3XZdjGr+ogHqU8xM9IeJVp/wjFI6agUR S3cVStI+h67sHuoWN3jtVzdZsoPjzBn9ZPxZFMseyJrBti1XipzuoI/h1wNkcO5E OnxHe3DhdbGbD7A6uS7rSyd7MgId1wAKBKJ8OAiaHLN3sFXyf9y/6FyfqhUbcFSq qMl7TOG4cQPrkstAzjIR/9iScdiLX5cf2Rp7uHBJ9enFCJZuAUkb9Qr2NcqhRfub xBAO5gV5dEwoWGS3Ej8MAOrYgTi++On5L9PLNx61J/o0OvYrb7+OFJ1okvNsdQQu jw9UsrB42YVSPEQINO2GFlajpjeBFNWOc+Kvf2nxQX/vQbNj8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLjF45l6ntieg5kRGlc3Aq8kqzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWE1NGE3Y2UtMzY1MC0z NzFhLTk4ODUtYjljYmU3ZjQ5OTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAqkQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACaqDfMPMt0iGWUup+8oB9K8/5se8/QA09kQAjzor6IMpxJBxLc3 8jlRzoHwI9ldwL50JOe2bPdh70+D+MV51fFzqVM6gH6VHP2zlddodX40+kGAwG9X davDfNLMTnmvbyzkVwR+NMHdgxfa82o6Ey2EI12xD3S3cw8DdnGoeHdgSRGDuvpv B3ozvdQ9UcmYph8ziGd1fVytCGA1mn2/zHq7mKZlshZJYK/WK9JvTSuJJwJF69iX LdM9fgfvp5iJRpSWH1mrSfN8mTcQ2au7w7z8jjJ4B/OJQws9LMYlgXfcp1ogrNYv Cq61xZkpPF/RGyaxZJQcUua+YhhNcp0lC9Y= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:28 2025 by rpki-client