$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa File: ffcf3028-3ee2-3714-a697-77e69a103ad2.roa (raw, json) Hash identifier: jZF7fX0DgvgdxnT+FK7megJkp1gijf5pxeIdz0/WcXE= Subject key identifier: 56:3F:F7:31:8D:BE:B8:67:42:54:16:57:D3:23:43:F3:FB:59:D8:BE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD445F178761B005104A4680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa Signing time: Tue 26 Aug 2025 22:58:02 +0000 ROA not before: Tue 26 Aug 2025 22:58:02 +0000 ROA not after: Mon 24 Nov 2025 23:58:02 +0000 asID: 31898 IP address blocks: 2603:c002:3300::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:5f:17:87:61:b0:05:10:4a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:58:02 2025 GMT Not After : Nov 24 23:58:02 2025 GMT Subject: CN=a06d2fc4-4df0-4fc3-b5ba-1d99db8000b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:2c:59:83:97:26:7b:6f:ef:01:11:c2:10: ef:c8:f8:87:70:44:35:f2:36:f5:a1:cb:fe:1f:21: ca:06:42:eb:eb:e2:21:fa:06:0b:8f:e4:2f:64:77: f0:41:02:a6:78:84:f6:b4:78:c0:ba:56:60:be:eb: ec:0a:4b:5d:88:b7:13:bc:07:57:dd:bc:8e:f3:8e: a7:09:bb:62:dc:3a:53:b4:53:2b:28:b7:39:2c:48: ad:df:d6:12:9b:51:81:b6:89:e2:e1:85:57:12:9f: 07:de:42:71:36:c4:d4:25:69:3f:53:7f:27:92:94: 6d:fe:19:fa:e5:1d:fb:ae:7f:c1:0f:f0:5c:65:8c: 60:fe:bc:28:4b:10:c2:2e:a3:42:0e:4e:e9:2c:24: 6a:96:a0:af:80:9a:70:aa:b6:1f:39:03:b0:49:3a: 9f:b3:dd:e3:c4:ae:91:f5:95:a2:5b:f1:88:4c:8a: 90:be:6e:57:38:fc:40:c3:5c:5a:9b:52:71:12:ff: 86:03:51:f5:3c:38:cc:a6:46:23:73:08:82:20:ac: 76:a9:52:d6:14:55:97:58:0c:70:bd:e0:c7:9c:e0: 9c:74:fb:4b:e2:18:a3:7e:49:78:23:fc:6f:4d:a6: 4c:fe:5d:2b:1f:c6:c4:59:c7:85:85:9b:2b:0b:d6: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3F:F7:31:8D:BE:B8:67:42:54:16:57:D3:23:43:F3:FB:59:D8:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:3300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:53:ee:25:22:1c:a2:4c:ee:c2:8c:24:c4:22:a1:c6:09:6b: e1:10:1f:1e:06:2a:59:34:40:96:9e:20:53:c5:b2:b4:71:9f: b0:d6:84:82:fe:a9:9a:8d:24:1b:02:ae:f5:de:76:74:49:43: 7e:fd:f5:49:cb:8b:ae:de:f1:f4:3d:f9:f7:e8:0d:c5:56:17: 88:08:22:77:8b:63:bc:6d:23:a0:49:a6:a6:f7:19:1b:31:ad: f8:87:4b:76:b9:50:e1:f2:4d:3c:42:22:4d:c6:66:8a:65:07: ef:64:e6:0f:6b:39:a0:98:2d:9d:a2:d4:29:6e:f7:0a:91:4b: 92:a3:7b:93:b3:de:95:b5:57:04:30:46:43:05:3b:7f:0b:c6: 6c:55:6c:9f:46:ec:a1:f7:f3:0f:b5:fa:e8:12:cb:de:d3:bb: f9:fb:65:90:94:a0:c9:23:92:ea:9d:14:1f:5a:eb:fc:e1:9a: 52:5d:6d:ee:b9:88:cc:98:27:3f:f8:b2:d9:61:cf:3f:14:be: 97:f0:77:77:7f:df:36:e7:a5:21:9c:ce:b0:10:bd:93:ae:f2: a5:d1:e9:fd:45:18:00:e5:00:76:a2:e7:2c:9b:23:e1:b4:f1: 86:6f:8e:85:5e:04:5d:4b:24:32:01:6b:92:04:f7:c6:8b:3b: ca:b0:81:0a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr9RF8Xh2GwBRBKRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTgwMloXDTI1MTEyNDIzNTgwMlowLzEtMCsGA1UEAxMk YTA2ZDJmYzQtNGRmMC00ZmMzLWI1YmEtMWQ5OWRiODAwMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZssWYOXJntv7wERwhDvyPiHcEQ18jb1ocv+ HyHKBkLr6+Ih+gYLj+QvZHfwQQKmeIT2tHjAulZgvuvsCktdiLcTvAdX3byO846n Cbti3DpTtFMrKLc5LEit39YSm1GBtoni4YVXEp8H3kJxNsTUJWk/U38nkpRt/hn6 5R37rn/BD/BcZYxg/rwoSxDCLqNCDk7pLCRqlqCvgJpwqrYfOQOwSTqfs93jxK6R 9ZWiW/GITIqQvm5XOPxAw1xam1JxEv+GA1H1PDjMpkYjcwiCIKx2qVLWFFWXWAxw veDHnOCcdPtL4hijfkl4I/xvTaZM/l0rH8bEWceFhZsrC9bX7wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFY/9zGNvrhnQlQWV9MjQ/P7Wdi+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmZjZjMwMjgtM2VlMi0z NzE0LWE2OTctNzdlNjlhMTAzYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAjMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOVPuJSIcokzuwowkxCKhxglr4RAfHgYqWTRAlp4gU8WytHGfsNaE gv6pmo0kGwKu9d52dElDfv31ScuLrt7x9D359+gNxVYXiAgid4tjvG0joEmmpvcZ GzGt+IdLdrlQ4fJNPEIiTcZmimUH72TmD2s5oJgtnaLUKW73CpFLkqN7k7PelbVX BDBGQwU7fwvGbFVsn0bsoffzD7X66BLL3tO7+ftlkJSgySOS6p0UH1rr/OGaUl1t 7rmIzJgnP/iy2WHPPxS+l/B3d3/fNuelIZzOsBC9k67ypdHp/UUYAOUAdqLnLJsj 4bTxhm+OhV4EXUskMgFrkgT3xos7yrCBCg== -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:33 2025 by rpki-client