$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa File: c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa (raw, json) Hash identifier: iUuJPrmPgHd0kxhvGyd96x+4q3zU6iGzkYtnpG1/wJk= Subject key identifier: C6:9D:FB:77:12:FE:65:22:35:1E:24:AF:38:03:AF:26:6C:F1:9A:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFFE744985970A18285C85600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa Signing time: Wed 27 Aug 2025 21:37:52 +0000 ROA not before: Wed 27 Aug 2025 21:37:52 +0000 ROA not after: Tue 25 Nov 2025 22:37:52 +0000 asID: 31898 IP address blocks: 2600:2000:2130::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:e7:44:98:59:70:a1:82:85:c8:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 27 21:37:52 2025 GMT Not After : Nov 25 22:37:52 2025 GMT Subject: CN=f8999c9f-4869-43b8-8f19-bd000f1d30ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:44:46:09:b9:71:26:a8:6f:d6:8e:d7:fc: 5b:b3:ef:77:7b:7b:d4:33:6b:64:80:07:80:c3:c4: d6:49:2f:e8:cc:c8:5d:0d:1a:a8:8d:fd:54:0f:de: ea:fb:14:a9:9a:cc:b8:a2:29:2d:c0:ab:ba:6a:40: 3e:d3:38:d0:65:08:51:a3:f2:fe:ec:07:f7:94:5e: ec:e3:77:25:a4:f9:09:e5:1a:85:d0:07:61:22:01: 13:73:28:d3:97:c2:22:38:ba:95:fb:52:62:4c:4d: f6:0d:35:2a:46:0f:ca:73:f9:a9:bf:8d:09:b8:d5: 4e:60:16:63:5a:40:3f:a9:8b:bb:ee:3d:fc:d9:cf: 64:db:4a:fa:98:16:00:e4:67:5e:ec:81:5d:64:ef: 67:8e:8c:54:fd:c9:8a:5b:a8:db:9f:37:4a:20:eb: 91:79:24:22:4f:1f:bf:b1:29:8c:dd:bc:56:78:31: 22:0e:93:c3:2a:a9:a6:e8:3e:39:f7:11:f4:ab:db: 74:13:02:63:fb:69:d0:55:04:48:ef:d9:27:42:65: 84:65:19:09:0a:b9:22:f2:76:3f:a0:be:c8:7b:86: 64:8e:7d:a8:f6:e4:e0:ca:92:38:cc:d6:32:61:c7: 0b:4f:7e:80:93:ad:37:18:81:41:70:9f:2c:a6:51: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9D:FB:77:12:FE:65:22:35:1E:24:AF:38:03:AF:26:6C:F1:9A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:70:52:41:e0:bb:19:0c:e3:a9:7a:ac:3d:8e:69:9b:48:af: 6e:47:b8:68:65:88:ad:22:f4:1b:2b:c0:88:62:ee:aa:4d:a0: a0:d5:ae:17:d0:e6:c8:da:dc:31:10:1f:49:42:3a:0f:6f:77: 56:a0:92:7e:9a:ad:86:2a:94:59:73:5f:f1:51:25:c9:c6:d6: 3c:5f:45:6c:ec:71:fc:62:06:5b:5f:03:c0:0f:ff:1d:01:62: 30:62:34:6a:bf:e5:b5:99:1b:fc:3e:84:f6:59:14:04:89:b5: 54:41:9a:90:38:c3:61:0f:d3:ec:99:66:00:f1:e7:f3:e2:a6: 3d:f5:48:0f:5d:a4:96:b2:a0:67:5c:59:ec:78:51:a7:f0:c2: 27:17:21:80:d5:68:e4:71:de:ee:91:08:f1:07:c9:e7:a7:04: 78:4b:e8:91:2f:31:f8:13:c0:53:8a:bf:ea:a2:fb:58:ee:f6: ee:07:55:8d:b6:67:51:ce:ee:3e:ea:22:7a:6e:98:92:64:fc: d4:90:33:d1:40:7f:65:47:78:88:82:e6:e0:a2:6e:c3:b5:e9: 83:e3:84:8a:3e:d0:32:fb:a3:c7:2a:dd:87:4f:39:9e:19:e5: ee:31:e1:9f:e8:56:e7:21:b2:18:6c:5f:aa:c9:75:b6:8b:02: 28:95:1c:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr/50SYWXChgoXIVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNzIxMzc1MloXDTI1MTEyNTIyMzc1MlowLzEtMCsGA1UEAxMk Zjg5OTljOWYtNDg2OS00M2I4LThmMTktYmQwMDBmMWQzMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I5ERgm5cSaob9aO1/xbs+93e3vUM2tkgAeA w8TWSS/ozMhdDRqojf1UD97q+xSpmsy4oiktwKu6akA+0zjQZQhRo/L+7Af3lF7s 43clpPkJ5RqF0AdhIgETcyjTl8IiOLqV+1JiTE32DTUqRg/Kc/mpv40JuNVOYBZj WkA/qYu77j382c9k20r6mBYA5Gde7IFdZO9njoxU/cmKW6jbnzdKIOuReSQiTx+/ sSmM3bxWeDEiDpPDKqmm6D459xH0q9t0EwJj+2nQVQRI79knQmWEZRkJCrki8nY/ oL7Ie4Zkjn2o9uTgypI4zNYyYccLT36Ak603GIFBcJ8splFwKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMad+3cS/mUiNR4krzgDryZs8ZphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzhhYTk4NTktZTNiYS0z YmY0LWJhMzctNTFkMTBjNzk4ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKBwUkHguxkM46l6rD2OaZtIr25HuGhliK0i9BsrwIhi7qpNoKDV rhfQ5sja3DEQH0lCOg9vd1agkn6arYYqlFlzX/FRJcnG1jxfRWzscfxiBltfA8AP /x0BYjBiNGq/5bWZG/w+hPZZFASJtVRBmpA4w2EP0+yZZgDx5/Pipj31SA9dpJay oGdcWex4UafwwicXIYDVaORx3u6RCPEHyeenBHhL6JEvMfgTwFOKv+qi+1ju9u4H VY22Z1HO7j7qInpumJJk/NSQM9FAf2VHeIiC5uCibsO16YPjhIo+0DL7o8cq3YdP OZ4Z5e4x4Z/oVuchshhsX6rJdbaLAiiVHA0= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:47 2025 by rpki-client