$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa File: c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa (raw, json) Hash identifier: nDFnZ7zsIdDj7z7qYI/w5FwRNzPo7IQjjxsH6QLy99M= Subject key identifier: 2F:AB:99:2D:0D:C1:19:EF:27:EC:8B:78:F7:2E:3C:19:86:54:10:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B29EF2295224F7F5757505F20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa Signing time: Thu 11 Sep 2025 22:57:40 +0000 ROA not before: Thu 11 Sep 2025 22:57:40 +0000 ROA not after: Wed 10 Dec 2025 23:57:40 +0000 asID: 54253 IP address blocks: 2603:c088:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:ef:22:95:22:4f:7f:57:57:50:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 22:57:40 2025 GMT Not After : Dec 10 23:57:40 2025 GMT Subject: CN=933dc18a-0334-4587-a862-d072e25e0163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:12:84:c4:a5:91:86:a8:50:66:d4:ef:44: 3c:37:71:ad:4f:0b:4b:8a:9b:8d:80:ba:86:49:06: 2e:9e:0f:97:2f:94:8d:ee:84:ef:ef:aa:82:17:a3: 2f:b0:99:ca:18:d7:29:3c:1a:ff:7e:cc:d9:fe:a2: 3d:05:8e:8b:37:da:a9:94:8b:90:a0:76:2d:ca:a1: 12:4c:6b:50:63:1e:45:89:35:c5:77:6e:98:57:e1: 30:5c:c0:81:64:35:7a:8e:64:07:24:0f:4d:b4:49: e2:67:fe:b6:6d:b6:83:8f:5b:3e:e9:1f:46:1a:19: 90:57:af:b4:0a:bf:90:15:06:7e:1f:bf:e1:05:d4: 74:ce:0e:05:e1:27:1f:20:3e:73:b4:e8:00:66:2b: 13:33:b7:3b:c0:8a:dd:fd:35:d2:0f:05:11:52:6f: 6c:a9:61:7a:ee:d9:cf:2e:7f:bb:e8:ff:39:15:f9: 65:43:a1:65:d6:08:b6:84:63:ef:f2:13:8c:1f:90: c8:48:42:ea:b6:f0:05:f5:b5:a3:93:b4:68:ac:16: 6f:da:cd:83:33:b2:a4:07:28:03:4f:f4:a3:0c:fe: f7:b7:5b:62:90:01:ae:d5:66:f5:1f:fa:00:cd:f6: b9:8a:d3:0f:0d:d1:60:e4:11:86:42:ea:5a:c7:9e: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AB:99:2D:0D:C1:19:EF:27:EC:8B:78:F7:2E:3C:19:86:54:10:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3a8c090-d169-3720-96d4-cf034b7bdd4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c088:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:69:6f:ba:c7:e7:15:5f:14:de:11:db:67:44:36:37:4b:80: 47:05:d3:ce:96:c2:dd:d4:4b:e2:6f:2b:e0:8b:82:3e:53:ab: 32:54:ff:56:01:b6:5b:22:68:90:a2:38:61:f2:0a:5f:c8:e3: cb:07:b2:7d:06:5a:74:f6:eb:af:44:52:71:4a:1c:9b:3d:c7: aa:7b:05:af:c0:dd:39:ce:77:62:e5:cd:20:89:64:d2:c7:cc: ca:47:02:a9:50:bd:4b:db:1f:b9:06:ae:e2:5f:a8:0d:2e:8a: a5:56:bd:cc:83:32:bd:07:bb:a8:9a:b0:de:84:7c:10:67:c9: 79:be:03:01:0e:2d:d2:7a:ad:23:8f:9a:27:0e:f9:0b:cc:63: 1d:ec:42:5a:ce:89:9a:aa:f3:57:b2:95:f7:3f:13:6e:16:8d: 5e:86:ea:48:5d:4e:40:b7:e6:bb:af:4c:1c:8e:0b:3c:4d:f9: b8:4b:da:f8:1c:34:1e:99:db:f6:49:0c:95:79:e2:e4:4f:0a: 04:f4:94:62:b4:a7:2d:db:8d:96:e7:06:2d:53:d4:13:ae:93: 09:8f:be:ed:59:ae:6b:88:22:c8:8d:99:03:34:a7:91:38:1a: dd:5a:21:6c:b6:40:2a:17:81:60:56:79:9a:b6:9f:23:1e:f3: 0a:70:c2:8e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsp7yKVIk9/V1dQXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMTIyNTc0MFoXDTI1MTIxMDIzNTc0MFowLzEtMCsGA1UEAxMk OTMzZGMxOGEtMDMzNC00NTg3LWE4NjItZDA3MmUyNWUwMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMUShMSlkYaoUGbU70Q8N3GtTwtLipuNgLqG SQYung+XL5SN7oTv76qCF6MvsJnKGNcpPBr/fszZ/qI9BY6LN9qplIuQoHYtyqES TGtQYx5FiTXFd26YV+EwXMCBZDV6jmQHJA9NtEniZ/62bbaDj1s+6R9GGhmQV6+0 Cr+QFQZ+H7/hBdR0zg4F4ScfID5ztOgAZisTM7c7wIrd/TXSDwURUm9sqWF67tnP Ln+76P85FfllQ6Fl1gi2hGPv8hOMH5DISELqtvAF9bWjk7RorBZv2s2DM7KkBygD T/SjDP73t1tikAGu1Wb1H/oAzfa5itMPDdFg5BGGQupax54FSwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC+rmS0NwRnvJ+yLePcuPBmGVBDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNhOGMwOTAtZDE2OS0z NzIwLTk2ZDQtY2YwMzRiN2JkZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAiCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqGlvusfnFV8U3hHbZ0Q2N0uARwXTzpbC3dRL4m8r4IuCPlOrMlT/ VgG2WyJokKI4YfIKX8jjyweyfQZadPbrr0RScUocmz3HqnsFr8DdOc53YuXNIIlk 0sfMykcCqVC9S9sfuQau4l+oDS6KpVa9zIMyvQe7qJqw3oR8EGfJeb4DAQ4t0nqt I4+aJw75C8xjHexCWs6JmqrzV7KV9z8TbhaNXobqSF1OQLfmu69MHI4LPE35uEva +Bw0Hpnb9kkMlXni5E8KBPSUYrSnLduNlucGLVPUE66TCY++7Vmua4giyI2ZAzSn kTga3VohbLZAKheBYFZ5mrafIx7zCnDCjg== -----END CERTIFICATE-----Generated at Thu Oct 9 03:21:11 2025 by rpki-client