$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef8f3472-33dc-31f4-8d46-1d27bd2d847d.roa File: ef8f3472-33dc-31f4-8d46-1d27bd2d847d.roa (raw, json) Hash identifier: btBKKjE41Y9HZitEMo8A6Ylr+aSilhMlh85BiAmJy9U= Subject key identifier: A2:00:1D:EC:C8:42:2B:01:02:6E:E5:25:82:6C:0D:A4:D5:06:D2:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B377B97FA94E35461949DF280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef8f3472-33dc-31f4-8d46-1d27bd2d847d.roa Signing time: Tue 16 Sep 2025 19:26:11 +0000 ROA not before: Tue 16 Sep 2025 19:26:11 +0000 ROA not after: Mon 15 Dec 2025 20:26:11 +0000 asID: 54253 IP address blocks: 2603:c0fe:4000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:7b:97:fa:94:e3:54:61:94:9d:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 16 19:26:11 2025 GMT Not After : Dec 15 20:26:11 2025 GMT Subject: CN=977738f3-73f8-4463-806d-5214f5722206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:b7:1d:86:d4:91:2a:e3:32:1d:34:8d:57: 0e:49:a1:a3:71:1b:14:72:bf:6d:f5:0b:7a:4e:1f: 10:a7:26:2c:35:0f:3f:19:38:8c:33:fc:4b:c9:af: cc:a7:c1:9c:35:ec:2e:c5:6e:fe:16:b0:af:4e:58: 7a:c2:69:1c:08:88:59:44:d9:c2:47:b2:28:38:cc: a6:53:66:fa:12:1f:df:84:6c:27:6e:61:87:1e:fa: dd:00:c3:96:5e:83:b4:76:5d:5e:b1:27:93:0f:56: c2:51:e5:bf:cb:09:b3:b4:18:1b:91:53:fa:27:08: a4:d0:a8:a9:be:a7:6a:ff:d5:3b:2d:cd:4c:50:af: cd:4b:08:6e:0d:af:91:29:28:f4:c0:e5:0f:ed:64: 09:b4:31:0c:8a:aa:d6:c8:25:0f:ee:a1:58:c2:e3: 49:63:e2:00:13:f9:62:e2:97:b4:1e:57:7c:2b:80: fc:2e:cc:95:b8:95:c6:4d:e0:49:de:a0:f0:b4:56: 88:59:c4:2f:0c:3b:7c:04:f1:5c:48:c2:7a:0c:6e: ff:60:75:f8:44:0e:9d:84:bc:36:57:22:95:7c:9d: d4:17:c9:ce:53:1f:68:72:77:35:dd:d4:1c:d6:ba: f5:f4:ae:6f:8c:80:c6:a8:95:4a:f7:66:2e:58:f6: 9a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:1D:EC:C8:42:2B:01:02:6E:E5:25:82:6C:0D:A4:D5:06:D2:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef8f3472-33dc-31f4-8d46-1d27bd2d847d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0fe:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2a:b2:fe:44:70:b7:ae:8b:7f:01:42:ba:14:91:52:63:62: fa:15:ed:67:20:d1:bd:ce:d8:40:96:6f:91:3f:95:db:4f:9b: e5:d4:d8:11:f1:48:7b:95:f7:da:d9:cf:51:7c:f4:1b:c1:4a: 58:3c:22:02:3f:0a:77:71:45:6b:a5:54:08:2b:16:df:17:ce: 8c:d7:40:bf:61:36:60:bc:ec:ef:c6:44:ea:3e:67:9e:d7:6b: 03:8c:71:b1:59:51:f6:7e:94:46:9b:ba:38:4f:2b:f5:48:44: 18:85:eb:87:fc:04:51:a9:d2:a5:8f:ca:a0:ed:7b:6f:b9:1c: 70:1c:33:60:55:f0:36:ca:34:83:4f:80:30:86:79:d4:77:ae: c8:93:78:ab:88:dd:70:fa:a1:25:38:0c:2c:a3:25:bd:fd:9e: 6c:be:5f:10:e1:e1:ce:0d:85:f7:b1:90:6e:fb:40:eb:52:ab: 11:fe:ca:07:a3:9e:04:49:d1:0d:77:53:c0:93:78:45:5f:17: 37:90:77:dc:04:27:29:dc:c7:1b:cb:2e:ed:cd:b8:8d:f5:81: 4a:25:01:a2:7a:09:b9:06:f1:1b:7e:b5:59:38:f3:50:c0:3a: 0c:4a:4a:c9:da:23:28:30:dd:8b:10:93:1f:30:79:00:0e:3a: a4:aa:b6:ce -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs3e5f6lONUYZSd8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNjE5MjYxMVoXDTI1MTIxNTIwMjYxMVowLzEtMCsGA1UEAxMk OTc3NzM4ZjMtNzNmOC00NDYzLTgwNmQtNTIxNGY1NzIyMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sa3HYbUkSrjMh00jVcOSaGjcRsUcr9t9Qt6 Th8QpyYsNQ8/GTiMM/xLya/Mp8GcNewuxW7+FrCvTlh6wmkcCIhZRNnCR7IoOMym U2b6Eh/fhGwnbmGHHvrdAMOWXoO0dl1esSeTD1bCUeW/ywmztBgbkVP6Jwik0Kip vqdq/9U7Lc1MUK/NSwhuDa+RKSj0wOUP7WQJtDEMiqrWyCUP7qFYwuNJY+IAE/li 4pe0Hld8K4D8LsyVuJXGTeBJ3qDwtFaIWcQvDDt8BPFcSMJ6DG7/YHX4RA6dhLw2 VyKVfJ3UF8nOUx9ocnc13dQc1rr19K5vjIDGqJVK92YuWPaaiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKIAHezIQisBAm7lJYJsDaTVBtIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWY4ZjM0NzItMzNkYy0z MWY0LThkNDYtMWQyN2JkMmQ4NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPA/kAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAESqy/kRwt66LfwFCuhSRUmNi+hXtZyDRvc7YQJZvkT+V20+b5dTY EfFIe5X32tnPUXz0G8FKWDwiAj8Kd3FFa6VUCCsW3xfOjNdAv2E2YLzs78ZE6j5n ntdrA4xxsVlR9n6URpu6OE8r9UhEGIXrh/wEUanSpY/KoO17b7kccBwzYFXwNso0 g0+AMIZ51HeuyJN4q4jdcPqhJTgMLKMlvf2ebL5fEOHhzg2F97GQbvtA61KrEf7K B6OeBEnRDXdTwJN4RV8XN5B33AQnKdzHG8su7c24jfWBSiUBonoJuQbxG361WTjz UMA6DEpKydojKDDdixCTHzB5AA46pKq2zg== -----END CERTIFICATE-----Generated at Thu Oct 9 03:11:02 2025 by rpki-client