$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa File: 00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa (raw, json) Hash identifier: nhYegH4Q2O8eM7An8y+BB3Ygooo5c6LEOHeTmt6JOaY= Subject key identifier: A1:9F:75:CC:95:7F:9A:E4:9A:DE:F6:51:EE:50:6B:7E:4E:20:12:1C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE941CCC7821035F62880B080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa Signing time: Tue 19 Aug 2025 18:56:41 +0000 ROA not before: Tue 19 Aug 2025 18:56:41 +0000 ROA not after: Mon 17 Nov 2025 19:56:41 +0000 asID: 31898 IP address blocks: 2603:c000:1900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:41:cc:c7:82:10:35:f6:28:80:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 18:56:41 2025 GMT Not After : Nov 17 19:56:41 2025 GMT Subject: CN=f4a391b8-5346-489a-974c-ef964fdc5dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:b8:91:b7:5c:f9:56:12:d7:28:0c:ca:0e: 2e:ad:51:95:ce:ec:f8:a8:c9:58:62:29:f5:82:68: 8d:2e:3f:4f:22:64:ec:ba:73:a0:1f:be:b3:aa:2a: 40:24:5b:61:2c:7e:c9:83:22:bb:62:f0:b7:19:b6: 8c:fd:a4:8a:c5:90:38:13:ee:a7:3d:48:1e:1a:ed: c4:98:56:f9:4a:e7:9e:71:68:54:84:bf:87:5e:a7: 84:5e:44:c3:3d:30:8a:5f:1e:26:2d:99:54:02:4d: 0e:4c:64:f9:8b:b8:75:84:99:f6:28:42:32:01:9f: d2:3a:16:fe:e3:1d:b5:79:7b:e6:83:53:ce:1b:1a: d1:ba:78:f1:fe:9d:54:69:ff:ea:7a:56:a1:f1:19: d1:45:da:e3:d1:c4:80:2a:56:bf:18:6f:39:b6:ce: 45:7b:b7:af:03:5f:f3:77:9f:93:bf:18:62:e5:92: 47:b1:3b:1e:59:c6:20:10:39:d1:5b:ac:bb:77:76: e8:1b:c2:4f:98:ed:dd:b1:a8:32:75:99:53:fc:3b: 43:ae:b4:d9:6e:9f:fb:4a:fc:b2:6c:fb:37:ab:bc: ec:43:d4:9b:be:c1:46:87:7f:ea:ca:ca:fa:76:fe: 7f:41:22:2b:06:e3:c4:b6:b1:b7:7b:62:31:39:9e: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:75:CC:95:7F:9A:E4:9A:DE:F6:51:EE:50:6B:7E:4E:20:12:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/00c0f95a-ca9d-30ea-991e-8f2a1b5713c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:1900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c7:2b:18:22:37:f5:69:f0:46:a9:af:d5:9d:fb:54:e0:22: 44:b9:ec:4f:22:ef:4c:f9:bf:62:f8:fd:23:c5:eb:bd:10:10: 91:ed:ec:1d:22:f5:cd:30:32:0e:e2:0f:d9:35:0a:35:71:85: 03:a6:aa:59:bc:23:7e:95:ba:6d:59:37:45:c9:25:15:23:67: 2e:bc:4d:67:73:a8:f7:21:12:ad:a0:1b:43:0e:8b:38:a8:e9: db:83:7d:15:b7:e7:54:8e:71:35:91:dd:a1:81:01:9f:d7:4c: 10:45:b6:7d:5f:58:44:7f:96:91:e2:19:3e:c6:62:c2:e8:0b: d9:1c:ef:2e:0b:43:e2:c5:0c:86:3f:7e:d5:66:7f:72:b8:03: 45:c2:13:82:95:b7:2b:b8:9f:b5:08:03:90:c4:bd:17:e3:d3: fa:37:9e:f2:79:b9:32:f7:82:46:45:02:20:fa:59:1b:0a:b9: b0:51:f0:cf:c9:bc:83:8e:7c:b1:31:97:20:f8:cb:f7:6d:4b: a6:cc:19:bb:5e:81:45:50:14:a5:75:60:29:59:bc:7d:17:11: 1e:bd:16:cc:3b:d9:89:23:36:e8:5d:5d:43:ec:fe:91:13:dc: d6:34:eb:e3:49:7d:01:2a:58:38:1e:fb:a7:f2:5d:1e:33:9c: eb:c6:4e:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpQczHghA19iiAsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE4NTY0MVoXDTI1MTExNzE5NTY0MVowLzEtMCsGA1UEAxMk ZjRhMzkxYjgtNTM0Ni00ODlhLTk3NGMtZWY5NjRmZGM1ZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs924kbdc+VYS1ygMyg4urVGVzuz4qMlYYin1 gmiNLj9PImTsunOgH76zqipAJFthLH7JgyK7YvC3GbaM/aSKxZA4E+6nPUgeGu3E mFb5SueecWhUhL+HXqeEXkTDPTCKXx4mLZlUAk0OTGT5i7h1hJn2KEIyAZ/SOhb+ 4x21eXvmg1POGxrRunjx/p1Uaf/qelah8RnRRdrj0cSAKla/GG85ts5Fe7evA1/z d5+Tvxhi5ZJHsTseWcYgEDnRW6y7d3boG8JPmO3dsagydZlT/DtDrrTZbp/7Svyy bPs3q7zsQ9SbvsFGh3/qysr6dv5/QSIrBuPEtrG3e2IxOZ6jEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKGfdcyVf5rkmt72Ue5Qa35OIBIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDBjMGY5NWEtY2E5ZC0z MGVhLTk5MWUtOGYyYTFiNTcxM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAABkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZccrGCI39WnwRqmv1Z37VOAiRLnsTyLvTPm/Yvj9I8XrvRAQke3s HSL1zTAyDuIP2TUKNXGFA6aqWbwjfpW6bVk3RcklFSNnLrxNZ3Oo9yESraAbQw6L OKjp24N9FbfnVI5xNZHdoYEBn9dMEEW2fV9YRH+WkeIZPsZiwugL2RzvLgtD4sUM hj9+1WZ/crgDRcITgpW3K7iftQgDkMS9F+PT+jee8nm5MveCRkUCIPpZGwq5sFHw z8m8g458sTGXIPjL921LpswZu16BRVAUpXVgKVm8fRcRHr0WzDvZiSM26F1dQ+z+ kRPc1jTr40l9ASpYOB77p/JdHjOc68ZOOA== -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:23 2025 by rpki-client