$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa File: cf7322cd-659f-31c1-827f-bb470449d31d.roa (raw, json) Hash identifier: 20lU0rO9D9w5rlNMGRF5GuLXsAlAeCdGfsMnhzN6r1I= Subject key identifier: 8A:06:85:31:DE:CD:8D:BA:97:45:45:11:71:32:20:9D:CA:31:60:FE Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584B36BC4D2B4AC8E45AF25F0040 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 209242 IP address blocks: 2606:2c0:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4d:2b:4a:c8:e4:5a:f2:5f:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=f1578dee-bace-4119-b433-1a62dd7c70a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:66:51:e6:5d:1c:4d:af:4d:64:47:39:d5:a6: 94:d7:d6:4e:f3:dd:db:55:2e:8f:1e:5f:a6:19:61: df:b6:fc:61:46:3e:b0:2b:4d:d3:4c:0a:55:c8:ba: 50:3f:b3:8a:b9:1e:4e:54:67:1b:7d:13:c5:59:67: e9:02:40:94:e5:26:15:eb:67:a5:a5:c2:07:66:64: 27:bc:1b:8d:83:73:6f:7b:d5:1c:34:29:11:a0:ca: 1f:ef:7d:ce:c0:93:24:c5:3d:61:6a:d6:eb:59:21: 20:e9:80:af:ac:3e:56:ce:8b:fa:bf:4c:43:61:30: 06:ef:21:4a:11:2c:7b:c4:2c:90:55:7a:c8:e7:40: d5:3d:05:2d:9f:d7:c3:7c:ea:3a:23:2d:8b:3b:0c: 38:d7:50:a7:09:07:d4:da:7c:98:09:2e:99:ad:f1: fb:38:92:d0:38:69:1a:6a:b2:9e:f4:fd:b8:51:62: a9:31:de:22:92:c7:ea:9e:0b:17:fa:7c:10:21:7b: c0:23:e3:dc:09:58:86:ea:67:7d:6c:21:18:7e:c7: b8:ae:ec:18:ab:30:50:3b:32:65:29:f1:ea:75:1c: ab:82:9c:68:dd:b6:c8:4a:35:94:19:06:e8:0d:2e: 52:f4:10:1f:ed:45:2e:d6:f9:76:d7:04:be:ec:74: 39:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:06:85:31:DE:CD:8D:BA:97:45:45:11:71:32:20:9D:CA:31:60:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/cf7322cd-659f-31c1-827f-bb470449d31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv6: 2606:2c0:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:30:21:7d:34:28:74:86:8d:a2:08:e5:28:78:36:7a:4e:c4: e7:a5:19:cc:45:dd:41:1a:40:b2:38:60:d1:4a:f9:76:4d:c6: 31:c6:d1:a4:a1:a1:0b:1a:45:b5:00:3b:56:6a:7a:45:a3:02: 44:bd:67:bc:26:a2:3f:78:e7:20:26:09:d5:aa:d5:98:d0:77: 15:51:ee:a9:57:4a:e0:62:59:05:ef:7a:ea:49:f9:33:3c:9a: c2:9e:ba:7e:ca:46:0b:bc:61:5e:60:39:6b:bb:59:20:cd:42: a3:ff:72:e0:a2:6b:a4:1e:e3:4a:8b:c6:30:10:45:66:20:2e: 60:56:3a:94:2a:e8:74:54:67:ae:90:4e:99:80:b8:36:d3:39: 3d:32:3c:74:40:29:a4:ce:eb:3c:a7:67:8b:f2:7b:46:56:9e: 14:d2:d5:97:d7:ce:8f:e8:1a:c0:cb:e0:44:24:ce:9c:11:b8: 4f:dd:93:f9:58:52:5a:ad:50:2a:50:c8:4a:06:11:ce:ac:89: 8d:28:5a:75:88:e9:76:00:ce:1d:96:21:87:64:66:d2:c2:ef: b1:cb:34:2d:7b:63:80:ea:d7:00:ba:8e:d2:84:c2:db:11:41: fc:65:ec:0e:65:fa:c9:6c:06:01:d2:e2:8b:10:a0:c3:69:a6: e0:de:1d:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs2vE0rSsjkWvJfAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjE1NzhkZWUtYmFjZS00MTE5LWI0MzMtMWE2MmRkN2M3MGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWZR5l0cTa9NZEc51aaU19ZO893bVS6PHl+m GWHftvxhRj6wK03TTApVyLpQP7OKuR5OVGcbfRPFWWfpAkCU5SYV62elpcIHZmQn vBuNg3Nve9UcNCkRoMof733OwJMkxT1hatbrWSEg6YCvrD5Wzov6v0xDYTAG7yFK ESx7xCyQVXrI50DVPQUtn9fDfOo6Iy2LOww411CnCQfU2nyYCS6ZrfH7OJLQOGka arKe9P24UWKpMd4iksfqngsX+nwQIXvAI+PcCViG6md9bCEYfse4ruwYqzBQOzJl KfHqdRyrgpxo3bbISjWUGQboDS5S9BAf7UUu1vl21wS+7HQ5kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIoGhTHezY26l0VFEXEyIJ3KMWD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvY2Y3MzIyY2QtNjU5Zi0z MWMxLTgyN2YtYmI0NzA0NDlkMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYCwAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIwIX00KHSGjaII5Sh4NnpOxOelGcxF3UEaQLI4YNFK+XZNxjHG 0aShoQsaRbUAO1ZqekWjAkS9Z7wmoj945yAmCdWq1ZjQdxVR7qlXSuBiWQXveupJ +TM8msKeun7KRgu8YV5gOWu7WSDNQqP/cuCia6Qe40qLxjAQRWYgLmBWOpQq6HRU Z66QTpmAuDbTOT0yPHRAKaTO6zynZ4vye0ZWnhTS1ZfXzo/oGsDL4EQkzpwRuE/d k/lYUlqtUCpQyEoGEc6siY0oWnWI6XYAzh2WIYdkZtLC77HLNC17Y4Dq1wC6jtKE wtsRQfxl7A5l+slsBgHS4osQoMNppuDeHQg= -----END CERTIFICATE-----Generated at Thu Sep 18 03:28:10 2025 by rpki-client