$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5eafa3a-267c-384c-930f-7ff0e945b61e.roa File: d5eafa3a-267c-384c-930f-7ff0e945b61e.roa (raw, json) Hash identifier: 0F2qD1aUyy0Bo8ovI7R8yE6D7m1osFbBq/MjrEF4r2A= Subject key identifier: C0:5A:A1:A5:B7:BC:E1:AC:C6:CA:3D:02:B8:21:2C:2D:B0:A6:7C:6B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4429D2766B486C7E7C9E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5eafa3a-267c-384c-930f-7ff0e945b61e.roa Signing time: Tue 26 Aug 2025 22:57:37 +0000 ROA not before: Tue 26 Aug 2025 22:57:37 +0000 ROA not after: Mon 24 Nov 2025 23:57:37 +0000 asID: 31898 IP address blocks: 2603:c000:3600::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:29:d2:76:6b:48:6c:7e:7c:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:37 2025 GMT Not After : Nov 24 23:57:37 2025 GMT Subject: CN=396133ed-b57a-4d42-8ad5-0ea878e500d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:00:40:42:ed:2b:5e:43:d7:5d:14:e2:49: b3:cc:41:13:9f:13:76:87:e2:4d:08:3f:8a:bc:5d: 82:9d:85:81:1a:bf:fe:11:d2:ae:de:ba:35:c1:26: 81:77:22:9b:21:db:6e:16:e9:b2:4b:36:bb:ee:f6: 1f:a4:8f:d2:8e:fa:24:db:3a:2e:42:0d:4a:9b:2d: c1:e3:ca:25:d8:1c:55:19:26:ba:9f:3d:15:9b:de: 2a:4a:a6:e0:5d:c6:7d:cf:d9:66:78:f1:96:82:48: 5e:40:dc:8a:c7:35:0c:3b:12:19:a3:73:8c:b6:f5: ef:cb:10:65:63:f6:44:21:c1:92:a5:32:35:31:c7: 37:1e:12:51:14:7f:bd:89:7b:0e:f0:40:19:d4:94: 61:a4:35:65:6d:b6:ee:3e:66:61:bf:a9:e2:ad:0a: 7b:c0:98:22:5f:2b:21:1b:ce:05:1c:b1:21:d5:17: 48:d4:57:e6:b4:3c:29:d8:d4:7d:3d:da:4c:00:b8: 35:4b:ef:29:e3:f0:6e:5d:fb:aa:33:b3:d0:99:88: fc:d8:a3:46:e6:76:d6:dc:67:d6:96:2c:c1:67:fa: 7d:fa:aa:cc:4d:12:11:20:8d:10:ec:9b:46:04:69: dd:03:b4:14:0a:34:3c:4e:90:ba:22:64:f2:e5:51: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5A:A1:A5:B7:BC:E1:AC:C6:CA:3D:02:B8:21:2C:2D:B0:A6:7C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d5eafa3a-267c-384c-930f-7ff0e945b61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:3600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:fe:d2:b8:07:c3:04:fd:af:b3:5c:0b:59:70:7a:bb:8a:d4: 7b:13:04:85:8f:4b:4a:54:67:7c:43:4e:17:74:7d:cc:1f:88: 1c:47:2a:c8:9b:5e:9a:86:7a:1c:6b:b8:e3:03:9a:c1:bb:56: 2d:47:64:f6:0f:a7:33:7b:05:71:61:29:f8:f0:55:06:29:00: ad:4e:80:cd:ed:f9:b8:74:ec:94:28:62:64:1e:70:49:8b:5a: 48:da:47:3e:ef:ac:b0:ae:bb:f0:51:24:0b:0f:84:99:e8:bd: e7:0c:7a:6e:75:bd:1f:9d:dd:84:25:5d:f0:35:65:56:00:81: 1a:a5:a9:fb:3c:70:42:95:4f:d3:9c:10:ec:54:76:40:b7:48: 8c:0d:6c:bf:8a:32:b5:d9:47:bd:b8:b6:e9:9f:83:a8:c9:7f: 23:06:2f:f2:2c:bd:3a:a6:4f:f3:bc:19:de:96:01:30:e9:11: 63:e8:4b:4a:ae:4e:78:37:fd:e8:b6:e9:ab:73:45:e7:8a:e7: 3d:31:50:b0:b4:2c:20:a7:f4:47:2e:5b:82:45:0a:0f:72:5a: 46:1e:14:de:96:f9:7e:50:b3:fc:14:82:0b:90:46:8f:11:e3: ef:d1:df:26:c0:2c:2b:da:36:0a:6b:61:e8:db:65:bf:ee:ba: db:6a:b6:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr9RCnSdmtIbH58ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTczN1oXDTI1MTEyNDIzNTczN1owLzEtMCsGA1UEAxMk Mzk2MTMzZWQtYjU3YS00ZDQyLThhZDUtMGVhODc4ZTUwMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL0AQELtK15D110U4kmzzEETnxN2h+JNCD+K vF2CnYWBGr/+EdKu3ro1wSaBdyKbIdtuFumySza77vYfpI/Sjvok2zouQg1Kmy3B 48ol2BxVGSa6nz0Vm94qSqbgXcZ9z9lmePGWgkheQNyKxzUMOxIZo3OMtvXvyxBl Y/ZEIcGSpTI1Mcc3HhJRFH+9iXsO8EAZ1JRhpDVlbbbuPmZhv6nirQp7wJgiXysh G84FHLEh1RdI1FfmtDwp2NR9PdpMALg1S+8p4/BuXfuqM7PQmYj82KNG5nbW3GfW lizBZ/p9+qrMTRIRII0Q7JtGBGndA7QUCjQ8TpC6ImTy5VFVWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMBaoaW3vOGsxso9ArghLC2wpnxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDVlYWZhM2EtMjY3Yy0z ODRjLTkzMGYtN2ZmMGU5NDViNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAADYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmv7SuAfDBP2vs1wLWXB6u4rUexMEhY9LSlRnfENOF3R9zB+IHEcq yJtemoZ6HGu44wOawbtWLUdk9g+nM3sFcWEp+PBVBikArU6Aze35uHTslChiZB5w SYtaSNpHPu+ssK678FEkCw+Emei95wx6bnW9H53dhCVd8DVlVgCBGqWp+zxwQpVP 05wQ7FR2QLdIjA1sv4oytdlHvbi26Z+DqMl/IwYv8iy9OqZP87wZ3pYBMOkRY+hL Sq5OeDf96Lbpq3NF54rnPTFQsLQsIKf0Ry5bgkUKD3JaRh4U3pb5flCz/BSCC5BG jxHj79HfJsAsK9o2Cmth6Ntlv+6622q2fA== -----END CERTIFICATE-----Generated at Thu Oct 9 01:13:02 2025 by rpki-client