$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7ec97e-5778-3e22-86f9-945ac6e6f383.roa File: ff7ec97e-5778-3e22-86f9-945ac6e6f383.roa (raw, json) Hash identifier: OzoXBOGpsYzyrrQgDSFx3XKuov7+5CiyZT/zfWxFluY= Subject key identifier: 72:93:D4:1D:AC:AC:06:80:1E:31:EF:EB:F9:8D:FF:81:EA:9E:B8:D0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD449C3D443953947CB6B000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7ec97e-5778-3e22-86f9-945ac6e6f383.roa Signing time: Tue 26 Aug 2025 22:58:31 +0000 ROA not before: Tue 26 Aug 2025 22:58:31 +0000 ROA not after: Mon 24 Nov 2025 23:58:31 +0000 asID: 31898 IP address blocks: 2603:c002:b410::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:9c:3d:44:39:53:94:7c:b6:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:58:31 2025 GMT Not After : Nov 24 23:58:31 2025 GMT Subject: CN=34c22b02-3c1b-4b21-a5e5-d43126648222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:63:42:ee:04:3c:74:e4:84:27:74:f6:a9: 7b:75:b1:fa:46:d8:45:43:04:4b:c6:3b:fb:c4:b6: 6c:d0:2c:45:53:cf:28:1c:bc:66:f0:76:bc:0c:74: d0:10:92:c1:87:d4:cc:d2:66:cb:10:75:b2:df:36: 79:fc:49:be:13:fe:f2:fd:d9:94:86:f5:97:3c:a9: e3:67:07:79:49:d3:6b:8a:d3:7f:b7:e2:76:2d:85: ac:89:6b:65:74:0e:8c:54:5f:22:13:c3:0e:b1:07: 54:33:65:a6:48:3d:fe:c5:8f:59:fe:de:f6:29:97: f1:92:88:a1:e0:b0:3e:06:34:59:b0:ad:7e:8c:0c: 3c:9f:75:37:1a:b2:02:58:e9:ba:18:37:2c:b9:5e: df:2f:5a:f4:93:cd:51:4b:12:b5:7f:fb:a8:92:7f: 3b:00:4a:61:82:74:72:ee:75:a2:a7:d9:67:8e:8d: ca:6a:6d:c1:82:22:87:c5:6c:6c:40:6f:8a:8b:98: e2:a9:48:8a:00:e5:a6:b4:0b:3b:36:bb:f5:21:32: 87:1c:c3:d9:88:bb:7e:f5:6d:14:2e:ba:00:61:4f: c4:54:f2:3a:8a:31:79:6c:e4:52:47:8f:eb:d9:35: 69:a9:23:cc:2c:69:24:72:39:eb:af:cd:08:5b:6e: 50:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:93:D4:1D:AC:AC:06:80:1E:31:EF:EB:F9:8D:FF:81:EA:9E:B8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7ec97e-5778-3e22-86f9-945ac6e6f383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:b410::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:39:39:fc:dd:81:d1:22:90:98:e5:56:5e:af:24:c6:e8:1d: 87:f8:f7:1d:92:8e:4b:6a:37:32:8c:6a:20:27:f6:a5:5c:0f: 48:d4:42:e1:b2:5e:3b:51:7c:fd:12:08:9d:4b:5c:2d:b8:86: 50:cb:12:60:bd:3f:54:e0:17:8f:e4:40:c8:7c:3d:b4:0d:37: b4:1b:58:b8:4e:2d:a7:73:ef:e4:f9:59:ad:bb:dd:c8:0a:a9: 64:a6:40:08:49:8a:ef:af:f7:eb:06:18:60:6a:d3:e5:b8:10: 1a:a3:dc:fe:6e:51:0c:64:c3:7e:e0:80:b0:ef:f8:20:76:a7: 59:83:9c:0a:04:e9:1e:a1:9a:df:79:e5:57:57:f4:de:68:e4: 6e:fe:88:05:71:e0:2a:01:94:40:fe:51:e1:48:02:e5:e2:77: e2:3c:a5:94:09:7b:48:0e:2f:f0:47:f0:74:77:0b:85:bc:81: 6b:ad:b7:62:d3:99:a1:74:95:48:a6:f8:ee:3c:b3:39:1e:0b: 6f:f9:53:e6:e4:e0:c4:0d:b1:27:f9:4e:52:19:bc:ef:09:26: 8d:db:8c:8e:75:16:02:70:cb:e5:ba:7f:87:cb:df:ad:0e:02: 78:03:bc:17:c8:10:c3:b6:a2:20:91:a0:41:5d:03:92:ec:a6: 78:09:71:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr9RJw9RDlTlHy2sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTgzMVoXDTI1MTEyNDIzNTgzMVowLzEtMCsGA1UEAxMk MzRjMjJiMDItM2MxYi00YjIxLWE1ZTUtZDQzMTI2NjQ4MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGljQu4EPHTkhCd09ql7dbH6RthFQwRLxjv7 xLZs0CxFU88oHLxm8Ha8DHTQEJLBh9TM0mbLEHWy3zZ5/Em+E/7y/dmUhvWXPKnj Zwd5SdNritN/t+J2LYWsiWtldA6MVF8iE8MOsQdUM2WmSD3+xY9Z/t72KZfxkoih 4LA+BjRZsK1+jAw8n3U3GrICWOm6GDcsuV7fL1r0k81RSxK1f/uokn87AEphgnRy 7nWip9lnjo3Kam3BgiKHxWxsQG+Ki5jiqUiKAOWmtAs7Nrv1ITKHHMPZiLt+9W0U LroAYU/EVPI6ijF5bORSR4/r2TVpqSPMLGkkcjnrr80IW25QiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKT1B2srAaAHjHv6/mN/4HqnrjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmY3ZWM5N2UtNTc3OC0z ZTIyLTg2ZjktOTQ1YWM2ZTZmMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAArQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAo5OfzdgdEikJjlVl6vJMboHYf49x2SjktqNzKMaiAn9qVcD0jU QuGyXjtRfP0SCJ1LXC24hlDLEmC9P1TgF4/kQMh8PbQNN7QbWLhOLadz7+T5Wa27 3cgKqWSmQAhJiu+v9+sGGGBq0+W4EBqj3P5uUQxkw37ggLDv+CB2p1mDnAoE6R6h mt955VdX9N5o5G7+iAVx4CoBlED+UeFIAuXid+I8pZQJe0gOL/BH8HR3C4W8gWut t2LTmaF0lUim+O48szkeC2/5U+bk4MQNsSf5TlIZvO8JJo3bjI51FgJwy+W6f4fL 360OAngDvBfIEMO2oiCRoEFdA5LspngJcf8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:21 2025 by rpki-client