$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa File: bdc1d313-e722-3175-a88b-0e02110e4b88.roa (raw, json) Hash identifier: d00/Xlr5oOdwYY8i3OikM22+U1bQqkoVr9CwvSmcRfI= Subject key identifier: A8:5C:5D:6A:20:B5:4E:D4:01:BC:E3:2F:25:FB:F0:3F:9F:03:C0:BD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B377ADB4B2BE2E891FDA5E140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa Signing time: Tue 16 Sep 2025 19:24:42 +0000 ROA not before: Tue 16 Sep 2025 19:24:42 +0000 ROA not after: Mon 15 Dec 2025 20:24:42 +0000 asID: 54253 IP address blocks: 2603:c0f4:300::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:7a:db:4b:2b:e2:e8:91:fd:a5:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 16 19:24:42 2025 GMT Not After : Dec 15 20:24:42 2025 GMT Subject: CN=eb24caa3-39a6-4dd9-9ef0-86b904327678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:13:a4:3a:69:d4:d7:43:9f:e6:4e:3a:af:83: 87:0d:5a:cd:c8:9c:a4:97:c1:8a:a8:63:90:24:62: fb:6a:3a:b1:6b:cb:7b:70:d6:d2:c2:b1:39:5a:9d: 3a:51:61:11:4a:74:a3:9b:8a:37:bb:c5:48:ff:a1: 31:11:26:38:00:06:d3:0b:0a:2a:91:cd:21:3a:9c: 8a:5c:c5:1a:c5:2b:a4:8d:31:3a:7f:a5:9c:10:00: f6:0b:6c:f0:5a:e9:56:50:a4:e9:00:58:7d:d5:f5: 8d:fa:64:ab:0a:44:bb:7a:2f:a3:24:02:17:62:3d: 6d:96:49:55:b1:09:1f:f5:80:16:a4:c2:99:ab:4f: 15:1f:44:29:55:7f:41:e8:bc:f5:d1:57:19:91:07: 9a:d7:dc:36:7f:ba:e7:cb:f9:05:77:ab:bf:c7:1f: 14:8f:9b:44:cb:64:ba:7f:f5:3b:4d:f3:ec:af:df: d4:8a:1c:5b:bc:de:5a:13:37:5f:5b:b6:94:ee:00: 8b:89:6a:4e:1b:7f:d5:64:ed:18:6b:b7:20:7f:83: 17:4f:24:2d:ff:cd:3a:29:7b:6c:06:33:81:c9:79: 9e:08:06:f2:dd:b9:a7:90:0d:ba:04:ae:1e:88:97: da:b7:ad:04:8d:ae:80:2b:a5:07:6e:54:44:76:f2: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5C:5D:6A:20:B5:4E:D4:01:BC:E3:2F:25:FB:F0:3F:9F:03:C0:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bdc1d313-e722-3175-a88b-0e02110e4b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0f4:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8d:b7:9d:9b:68:83:89:80:e0:13:63:81:c6:7e:d0:b8:be: 27:e2:92:d1:3b:6d:41:2f:36:7c:68:c8:2b:d7:c2:6c:9f:28: 73:40:b1:cd:78:fa:cf:55:e4:0a:c5:78:0c:89:de:bb:c9:d8: 39:a9:9c:55:71:60:be:d1:01:cd:11:6e:3b:01:1e:13:50:a3: 16:af:26:9f:ae:4c:56:b2:4d:52:52:13:a8:01:88:38:bf:89: ca:93:fd:52:17:a1:c5:c3:42:09:58:97:91:c8:54:62:46:43: 53:f1:7c:83:0b:14:c4:f3:a7:bf:2a:00:7e:de:09:53:0d:0d: e2:0f:88:f1:37:75:ac:66:a7:20:36:ed:cb:78:5e:65:2b:a7: ab:d8:82:3f:ea:b5:99:26:8e:b9:8c:6e:9c:c6:9a:bb:a9:a3: c2:f4:e0:d7:75:16:dd:94:0a:d7:e3:65:66:e5:94:07:8f:53: 18:4e:dc:53:c1:44:65:1e:31:14:ef:7c:1a:b1:68:da:21:66: 10:c3:c3:1a:5d:f4:42:86:cd:f0:df:3d:8a:02:af:0c:e0:5a: 20:2a:91:ee:47:f2:5e:b5:80:d1:d0:b7:6d:77:9e:30:5b:f0: f3:bb:35:88:ec:1b:93:63:a3:60:c8:37:3d:45:0c:ef:a7:a3: 80:a7:5c:dc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs3ettLK+Lokf2l4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNjE5MjQ0MloXDTI1MTIxNTIwMjQ0MlowLzEtMCsGA1UEAxMk ZWIyNGNhYTMtMzlhNi00ZGQ5LTllZjAtODZiOTA0MzI3Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgROkOmnU10Of5k46r4OHDVrNyJykl8GKqGOQ JGL7ajqxa8t7cNbSwrE5Wp06UWERSnSjm4o3u8VI/6ExESY4AAbTCwoqkc0hOpyK XMUaxSukjTE6f6WcEAD2C2zwWulWUKTpAFh91fWN+mSrCkS7ei+jJAIXYj1tlklV sQkf9YAWpMKZq08VH0QpVX9B6Lz10VcZkQea19w2f7rny/kFd6u/xx8Uj5tEy2S6 f/U7TfPsr9/UihxbvN5aEzdfW7aU7gCLiWpOG3/VZO0Ya7cgf4MXTyQt/806KXts BjOByXmeCAby3bmnkA26BK4eiJfat60Eja6AK6UHblREdvLVTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKhcXWogtU7UAbzjLyX78D+fA8C9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmRjMWQzMTMtZTcyMi0z MTc1LWE4OGItMGUwMjExMGU0Yjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA9AMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAU423nZtog4mA4BNjgcZ+0Li+J+KS0TttQS82fGjIK9fCbJ8oc0Cx zXj6z1XkCsV4DIneu8nYOamcVXFgvtEBzRFuOwEeE1CjFq8mn65MVrJNUlITqAGI OL+JypP9UhehxcNCCViXkchUYkZDU/F8gwsUxPOnvyoAft4JUw0N4g+I8Td1rGan IDbty3heZSunq9iCP+q1mSaOuYxunMaau6mjwvTg13UW3ZQK1+NlZuWUB49TGE7c U8FEZR4xFO98GrFo2iFmEMPDGl30QobN8N89igKvDOBaICqR7kfyXrWA0dC3bXee MFvw87s1iOwbk2OjYMg3PUUM76ejgKdc3A== -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:47 2025 by rpki-client