$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02b71ba3-511a-30b1-af49-a5f5e6800058.roa File: 02b71ba3-511a-30b1-af49-a5f5e6800058.roa (raw, json) Hash identifier: aWx5Uva1Zdq7devYkME+cAI9sJ18cEzESbqHjDxL7zI= Subject key identifier: 33:95:41:3D:79:78:22:56:2E:FB:8D:E0:86:6D:9E:44:27:AA:87:5A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDE43A68E547C044A2305A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02b71ba3-511a-30b1-af49-a5f5e6800058.roa Signing time: Fri 15 Aug 2025 17:14:16 +0000 ROA not before: Fri 15 Aug 2025 17:14:16 +0000 ROA not after: Thu 13 Nov 2025 18:14:16 +0000 asID: 31898 IP address blocks: 2603:c002:8f00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:e4:3a:68:e5:47:c0:44:a2:30:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:14:16 2025 GMT Not After : Nov 13 18:14:16 2025 GMT Subject: CN=ae5c33d8-26d2-4adf-98cd-4515cdd97f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:9c:f7:a6:f7:d2:f3:f8:8f:90:97:0e:6f: 1a:e3:d2:03:0a:ab:00:20:dc:37:bc:2d:6b:72:05: c3:52:8b:76:07:3f:ce:3c:54:f2:23:7d:60:9b:0d: c2:df:c5:a8:bb:21:1d:9b:83:f3:d9:47:dc:88:bb: 30:5e:9e:b3:e6:20:1c:f6:f3:26:a3:47:c7:b2:90: 99:4d:fa:87:f6:92:f2:9e:9d:e4:40:88:10:d4:55: 4c:bd:19:4a:e9:92:59:65:24:fb:d5:22:0a:f7:b6: d7:18:1c:3e:5d:39:d4:59:c2:7f:6f:b7:b2:b5:31: 0d:79:2a:5f:91:51:c0:66:c8:ea:01:5a:d4:ec:53: 69:5a:29:ab:29:40:9d:b0:00:72:e7:98:df:16:8c: d6:f8:63:51:2a:a5:54:fa:36:00:b9:9c:f6:ed:a9: 69:3c:92:5d:07:41:10:63:77:8d:53:85:a4:5a:0a: 97:bb:0b:3f:ed:ab:52:0c:b6:c0:54:07:d3:ff:83: 13:5e:b7:24:66:a7:dd:e3:e3:e1:fc:a1:ed:aa:92: c3:a1:a7:c3:35:8c:b3:72:d3:74:d1:23:8c:fe:d5: 90:a5:39:f2:a6:87:6b:5a:7c:b5:3c:ca:a2:66:64: f4:4b:ae:bb:a8:0c:ec:1b:2b:69:b6:a5:da:06:5b: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:95:41:3D:79:78:22:56:2E:FB:8D:E0:86:6D:9E:44:27:AA:87:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02b71ba3-511a-30b1-af49-a5f5e6800058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:8f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:be:87:91:c6:62:f4:a3:c7:92:01:f8:32:6d:9e:40:69:db: b8:ab:58:ad:cc:40:a4:84:12:3e:20:d5:11:60:9a:cb:cc:e8: 4a:95:48:85:65:b8:be:8e:73:67:98:4b:ec:96:53:26:40:ee: 20:ac:23:cd:c0:05:13:8d:d1:6e:c6:e6:20:6c:40:80:28:de: c6:03:ea:57:ff:51:44:39:c9:59:35:05:5b:b3:c1:b3:31:b8: 88:86:97:b0:ec:87:1a:6c:d0:43:87:f1:ca:93:5a:06:08:fc: 79:0c:4a:f5:b4:51:b1:ba:5d:16:a2:23:f2:2b:76:28:a0:f4: ac:56:15:32:09:2f:44:ff:ae:84:10:e4:4d:f8:0b:95:6f:c7: 51:61:44:ff:7a:fd:bf:8f:13:04:c0:3f:b2:93:df:a2:2d:5c: 15:1f:3b:5a:4a:bb:ac:f9:ce:4b:7d:13:58:c4:9b:d0:31:ff: 5c:c5:68:7c:3a:b0:6e:fb:7f:f8:4f:ad:43:29:85:2e:5b:5e: 02:62:bf:7f:b1:46:ca:80:b0:45:90:69:c2:43:51:a9:5f:6d: ee:96:ac:fc:ee:3e:a8:e8:f9:a0:1f:e8:50:05:b7:c4:66:d2: 90:a8:63:c8:f8:a7:fa:57:f9:9c:e7:f6:22:9c:c3:77:74:d8: 74:18:75:dd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErd5Dpo5UfARKIwWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3MTQxNloXDTI1MTExMzE4MTQxNlowLzEtMCsGA1UEAxMk YWU1YzMzZDgtMjZkMi00YWRmLTk4Y2QtNDUxNWNkZDk3ZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbKc96b30vP4j5CXDm8a49IDCqsAINw3vC1r cgXDUot2Bz/OPFTyI31gmw3C38WouyEdm4Pz2UfciLswXp6z5iAc9vMmo0fHspCZ TfqH9pLynp3kQIgQ1FVMvRlK6ZJZZST71SIK97bXGBw+XTnUWcJ/b7eytTENeSpf kVHAZsjqAVrU7FNpWimrKUCdsABy55jfFozW+GNRKqVU+jYAuZz27alpPJJdB0EQ Y3eNU4WkWgqXuws/7atSDLbAVAfT/4MTXrckZqfd4+Ph/KHtqpLDoafDNYyzctN0 0SOM/tWQpTnypodrWny1PMqiZmT0S667qAzsGytptqXaBlvxyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDOVQT15eCJWLvuN4IZtnkQnqodaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDJiNzFiYTMtNTExYS0z MGIxLWFmNDktYTVmNWU2ODAwMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAo8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHr6HkcZi9KPHkgH4Mm2eQGnbuKtYrcxApIQSPiDVEWCay8zoSpVI hWW4vo5zZ5hL7JZTJkDuIKwjzcAFE43RbsbmIGxAgCjexgPqV/9RRDnJWTUFW7PB szG4iIaXsOyHGmzQQ4fxypNaBgj8eQxK9bRRsbpdFqIj8it2KKD0rFYVMgkvRP+u hBDkTfgLlW/HUWFE/3r9v48TBMA/spPfoi1cFR87Wkq7rPnOS30TWMSb0DH/XMVo fDqwbvt/+E+tQymFLlteAmK/f7FGyoCwRZBpwkNRqV9t7pas/O4+qOj5oB/oUAW3 xGbSkKhjyPin+lf5nOf2IpzDd3TYdBh13Q== -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:57 2025 by rpki-client