$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa File: 08f6aa16-461b-3fb9-9426-623d068e71e1.roa (raw, json) Hash identifier: IYLAR7ENnD7sQgea31ApAJhDiT+h8V/nsjQ7zELL1Ks= Subject key identifier: 57:6C:97:DA:17:23:B3:8B:AE:C4:79:9C:9C:D1:D4:0E:2C:C1:E4:18 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE8C5FE976A7002E0B7A7E1C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa Signing time: Tue 19 Aug 2025 14:47:14 +0000 ROA not before: Tue 19 Aug 2025 14:47:14 +0000 ROA not after: Mon 17 Nov 2025 15:47:14 +0000 asID: 31898 IP address blocks: 2603:c002:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:c5:fe:97:6a:70:02:e0:b7:a7:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 14:47:14 2025 GMT Not After : Nov 17 15:47:14 2025 GMT Subject: CN=66287bec-33bf-46e5-a8a2-88d4eecf2e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:7d:a8:9d:a0:22:fc:f1:12:39:dc:e5:db: 55:83:8e:d9:06:11:22:d4:09:ca:01:d0:3f:77:aa: 18:dc:b2:82:54:90:13:bf:a3:ef:64:11:ef:b2:0c: 90:6d:c9:95:ee:4d:e7:6a:e7:98:03:6a:aa:58:5b: 9f:65:48:52:ba:11:c6:f3:d4:64:8a:0e:c3:49:92: 8d:f6:3e:8d:7f:9a:33:43:02:2f:30:0d:fe:45:cd: c0:c3:7d:42:f5:57:a4:1d:67:f7:dc:09:73:9e:f1: c2:01:55:e4:e4:f2:1c:d5:a9:b3:76:43:3c:8b:95: 9c:5e:2c:36:48:39:c6:73:36:62:63:81:0a:58:27: dd:3f:39:34:f6:cf:8e:68:63:96:bb:de:67:17:0e: 98:5e:42:95:35:8f:f7:ab:8c:2c:39:6d:4b:79:8e: f1:02:6c:60:be:84:4b:2d:13:71:46:d1:f9:a4:10: d5:bc:cb:07:5b:d3:c8:d0:a3:ec:c5:4d:d7:dd:45: 0e:dc:45:c8:09:f2:4a:b4:7a:f8:a1:3e:f0:98:96: 2b:e9:c4:e0:46:10:fe:8b:1d:a4:42:87:8a:f8:3f: a0:23:e7:f4:56:e5:10:2b:16:63:06:58:3f:db:22: 52:3a:9d:63:e9:70:fe:16:8a:1b:7c:00:86:82:f2: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6C:97:DA:17:23:B3:8B:AE:C4:79:9C:9C:D1:D4:0E:2C:C1:E4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c7:1f:6b:b7:b0:e2:c6:a8:f7:61:26:c9:fd:4e:75:f9:60: 46:f1:46:07:25:90:e7:c1:1c:8e:f4:06:72:ef:1b:df:45:3d: e4:91:ca:b6:00:83:10:37:11:3d:41:49:b5:00:ea:78:22:4d: 7c:9e:77:f5:59:fd:0d:e9:db:b3:25:5d:04:dd:35:7e:4a:a2: 35:87:75:fd:11:a4:83:cc:b9:58:3b:1e:26:a9:78:09:b4:9e: ec:f0:ba:59:3c:ba:c5:aa:4a:f2:94:55:7e:bf:5d:cc:22:ab: 15:74:b9:60:03:71:5e:a0:8f:15:1e:02:88:05:d1:ca:ba:4c: f5:70:2e:58:13:77:1b:33:ba:4e:ca:7f:9d:db:f6:65:d4:96: fe:3b:df:38:39:fa:a0:d7:55:e0:13:d1:23:d9:2e:86:18:6d: f2:8b:2e:66:dd:aa:ac:31:67:4e:d9:24:88:aa:cf:74:14:68: 2b:a0:9c:06:80:cf:ea:24:87:73:ae:e9:2e:f8:1a:c4:dc:b0: f3:e3:ac:dc:51:39:1c:b3:a4:ca:88:79:b2:a4:c8:6e:a5:fc: 17:ae:9b:f5:5c:58:3d:fc:ea:4e:b9:46:cd:e2:f3:f2:3b:38: f5:2c:5e:55:62:9a:50:eb:4f:14:42:22:8d:a4:64:28:e6:d6: 17:e7:7d:be -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEroxf6XanAC4Len4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE0NDcxNFoXDTI1MTExNzE1NDcxNFowLzEtMCsGA1UEAxMk NjYyODdiZWMtMzNiZi00NmU1LWE4YTItODhkNGVlY2YyZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E99qJ2gIvzxEjnc5dtVg47ZBhEi1AnKAdA/ d6oY3LKCVJATv6PvZBHvsgyQbcmV7k3naueYA2qqWFufZUhSuhHG89Rkig7DSZKN 9j6Nf5ozQwIvMA3+Rc3Aw31C9VekHWf33AlznvHCAVXk5PIc1amzdkM8i5WcXiw2 SDnGczZiY4EKWCfdPzk09s+OaGOWu95nFw6YXkKVNY/3q4wsOW1LeY7xAmxgvoRL LRNxRtH5pBDVvMsHW9PI0KPsxU3X3UUO3EXICfJKtHr4oT7wmJYr6cTgRhD+ix2k QoeK+D+gI+f0VuUQKxZjBlg/2yJSOp1j6XD+FoobfACGgvIAkwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFdsl9oXI7OLrsR5nJzR1A4sweQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDhmNmFhMTYtNDYxYi0z ZmI5LTk0MjYtNjIzZDA2OGU3MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAiAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAL8cfa7ew4sao92Emyf1OdflgRvFGByWQ58EcjvQGcu8b30U95JHK tgCDEDcRPUFJtQDqeCJNfJ539Vn9DenbsyVdBN01fkqiNYd1/RGkg8y5WDseJql4 CbSe7PC6WTy6xapK8pRVfr9dzCKrFXS5YANxXqCPFR4CiAXRyrpM9XAuWBN3GzO6 Tsp/ndv2ZdSW/jvfODn6oNdV4BPRI9kuhhht8osuZt2qrDFnTtkkiKrPdBRoK6Cc BoDP6iSHc67pLvgaxNyw8+Os3FE5HLOkyoh5sqTIbqX8F66b9VxYPfzqTrlGzeLz 8js49SxeVWKaUOtPFEIijaRkKObWF+d9vg== -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:22 2025 by rpki-client