$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa File: d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa (raw, json) Hash identifier: apL6aF69hAyKsZa2Drnkdn8eHfh14883EHWRdyYzo2w= Subject key identifier: 36:7D:8D:F3:63:EF:3D:92:B6:F7:CB:4A:91:2A:52:B2:1E:86:59:8B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B2C3C6858C58FCC71E80BE880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa Signing time: Fri 12 Sep 2025 18:44:59 +0000 ROA not before: Fri 12 Sep 2025 18:44:59 +0000 ROA not after: Thu 11 Dec 2025 19:44:59 +0000 asID: 54253 IP address blocks: 2603:c0bc:1200::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:3c:68:58:c5:8f:cc:71:e8:0b:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 12 18:44:59 2025 GMT Not After : Dec 11 19:44:59 2025 GMT Subject: CN=25d5d9f7-11f0-431a-a6ba-6ef538dfc49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d5:d3:0b:87:03:bf:a5:d2:fb:db:24:00:5a: 6f:06:69:be:58:c0:5a:6a:50:3f:24:f8:e0:f9:bb: f5:1b:e4:3c:d9:79:93:4f:fc:53:ba:92:23:f4:d8: 06:4b:04:dc:86:d5:58:cc:47:31:e5:05:e5:e5:2a: e2:8d:b6:5d:17:64:1e:2c:1d:3d:e8:bd:de:d6:d2: 92:55:47:64:00:f8:95:7e:4d:09:34:a4:6b:46:cf: 44:36:9b:d1:3b:73:a5:79:c4:0a:50:ac:07:c6:a9: 8c:b6:6a:ed:98:60:2b:06:2e:4c:a6:72:f8:8a:c2: 84:54:aa:9c:e6:41:f6:9d:c9:c1:65:96:f1:90:b6: 12:62:e2:c2:ef:33:c4:88:6c:d0:f3:a2:7c:1c:3c: f3:93:64:69:ca:e8:7b:0a:f9:ce:a5:9b:bb:36:5b: 6f:af:75:a8:fd:6b:c1:a7:8b:be:b8:e2:12:3c:6d: 85:cc:b7:b6:eb:9e:6f:93:f5:03:81:32:0f:39:be: 6f:fc:34:9e:41:c9:eb:ff:f9:de:ec:75:6d:a8:c3: 1c:1d:17:c8:20:d7:dd:43:b0:8c:8b:15:23:f4:75: 9f:8c:72:84:43:b3:d2:a1:22:74:d4:a0:0c:66:f4: 0f:2b:75:b7:ae:91:ce:98:61:4b:32:c4:98:99:bb: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7D:8D:F3:63:EF:3D:92:B6:F7:CB:4A:91:2A:52:B2:1E:86:59:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d18af67f-af5d-3ce4-9b58-2590acc31e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0bc:1200::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:00:9e:3a:2d:ae:8c:ec:79:c2:0c:89:0a:0e:23:c2:e3:ec: ed:75:f2:36:5d:34:c5:d2:88:de:90:dd:bc:5c:83:a0:96:44: f6:f3:2c:fa:38:f4:6d:01:90:88:ed:b9:3e:ec:f7:dd:9b:42: b2:0c:0a:b9:ca:3a:07:c7:73:75:02:d6:dd:c3:f7:00:1d:62: 7c:b3:41:63:86:c7:6d:0f:e2:d2:e7:20:de:81:f1:5d:e0:51: 76:d8:40:21:c1:1e:cf:81:69:74:37:10:46:c4:f7:99:08:c5: 78:c3:c5:69:f4:3c:25:b6:40:db:f1:fd:ce:32:4a:aa:17:65: fa:b1:2c:0a:70:8a:0a:41:41:05:72:c0:b0:5f:b4:1b:4f:61: 18:dc:2d:35:bd:3a:6f:ef:a3:7c:cf:c7:39:b8:a1:12:0d:ad: a0:d5:e0:bf:ce:00:38:08:0e:b9:a8:f1:1a:0d:33:5b:82:89: 28:c1:29:51:df:a4:05:2c:46:c9:d3:02:d2:c4:70:f2:2b:86: e7:26:6c:c1:c2:40:20:40:49:f5:42:f7:7a:d2:be:60:b6:81: cb:6f:f8:a7:a4:24:27:28:ce:86:89:51:cf:80:db:99:9a:6a: 3a:9d:74:cf:79:18:d7:34:85:f5:90:27:a6:15:5c:f3:60:94: 9e:1a:75:40 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEssPGhYxY/McegL6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMjE4NDQ1OVoXDTI1MTIxMTE5NDQ1OVowLzEtMCsGA1UEAxMk MjVkNWQ5ZjctMTFmMC00MzFhLWE2YmEtNmVmNTM4ZGZjNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNXTC4cDv6XS+9skAFpvBmm+WMBaalA/JPjg +bv1G+Q82XmTT/xTupIj9NgGSwTchtVYzEcx5QXl5SrijbZdF2QeLB096L3e1tKS VUdkAPiVfk0JNKRrRs9ENpvRO3OlecQKUKwHxqmMtmrtmGArBi5MpnL4isKEVKqc 5kH2ncnBZZbxkLYSYuLC7zPEiGzQ86J8HDzzk2Rpyuh7CvnOpZu7Nltvr3Wo/WvB p4u+uOISPG2FzLe2655vk/UDgTIPOb5v/DSeQcnr//ne7HVtqMMcHRfIINfdQ7CM ixUj9HWfjHKEQ7PSoSJ01KAMZvQPK3W3rpHOmGFLMsSYmbvcDQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDZ9jfNj7z2StvfLSpEqUrIehlmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDE4YWY2N2YtYWY1ZC0z Y2U0LTliNTgtMjU5MGFjYzMxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAvBIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbgCeOi2ujOx5wgyJCg4jwuPs7XXyNl00xdKI3pDdvFyDoJZE9vMs +jj0bQGQiO25Puz33ZtCsgwKuco6B8dzdQLW3cP3AB1ifLNBY4bHbQ/i0ucg3oHx XeBRdthAIcEez4FpdDcQRsT3mQjFeMPFafQ8JbZA2/H9zjJKqhdl+rEsCnCKCkFB BXLAsF+0G09hGNwtNb06b++jfM/HObihEg2toNXgv84AOAgOuajxGg0zW4KJKMEp Ud+kBSxGydMC0sRw8iuG5yZswcJAIEBJ9UL3etK+YLaBy2/4p6QkJyjOholRz4Db mZpqOp10z3kY1zSF9ZAnphVc82CUnhp1QA== -----END CERTIFICATE-----Generated at Thu Oct 9 03:12:49 2025 by rpki-client