$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20368f59-5a35-3073-a755-f50a0029b947.roa File: 20368f59-5a35-3073-a755-f50a0029b947.roa (raw, json) Hash identifier: GRmpLzkEQMvq59KRiwd4T7vfUZc3zq7AwwMnO1mobYA= Subject key identifier: E2:37:71:8B:52:48:C7:61:73:3D:AF:58:D1:51:B7:B8:1E:EE:57:A3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9A249C5A40774F7FDE26100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20368f59-5a35-3073-a755-f50a0029b947.roa Signing time: Tue 19 Aug 2025 22:11:06 +0000 ROA not before: Tue 19 Aug 2025 22:11:06 +0000 ROA not after: Mon 17 Nov 2025 23:11:06 +0000 asID: 31898 IP address blocks: 2603:c002:9b00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:a2:49:c5:a4:07:74:f7:fd:e2:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 22:11:06 2025 GMT Not After : Nov 17 23:11:06 2025 GMT Subject: CN=ceed4a09-83be-4040-9565-d0ff9a32fdb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f3:bb:13:e7:fb:4c:58:a0:ea:dd:67:cf:93: 15:a8:76:5e:74:b2:e6:95:b9:29:6d:3d:4b:e6:8c: 30:be:0a:d1:36:8d:50:5f:5a:cc:43:73:43:ab:c7: 86:7a:db:83:95:79:25:ae:f1:45:22:bb:3d:27:30: bd:88:03:41:44:49:56:7f:9c:6f:ab:15:3f:55:4c: 91:cd:63:a4:75:3a:7a:16:6c:b2:37:ea:59:9f:b6: 56:7e:46:bd:53:29:42:8b:6e:12:34:aa:15:de:17: a7:1e:e7:58:8d:78:8d:3b:47:80:bd:c4:b7:8b:d3: 67:6a:ed:3a:c2:0f:aa:9f:fc:1f:2e:56:64:be:09: 11:47:65:92:b4:f5:03:89:f5:05:32:d9:da:db:c3: ff:c8:44:e6:4f:d9:c3:1a:60:58:ac:85:a8:78:bf: d9:2e:73:3d:17:de:be:1e:6a:bd:f4:95:b4:2b:f3: 66:96:95:c7:f4:81:b0:80:5a:3e:69:fe:7e:e1:11: 28:af:89:be:d1:17:6a:20:10:03:85:39:13:d3:49: 1a:4a:e1:eb:73:b3:aa:d6:c1:ad:bc:10:0f:ab:9a: 0d:17:ef:5a:da:e3:9c:35:b0:65:86:4d:1e:42:62: f7:39:6a:7f:57:60:5c:54:7d:72:df:bb:0c:74:18: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:71:8B:52:48:C7:61:73:3D:AF:58:D1:51:B7:B8:1E:EE:57:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20368f59-5a35-3073-a755-f50a0029b947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:9b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e9:3b:9b:58:8d:6e:cb:c3:e7:78:ed:c0:f4:31:70:0b:19: 20:b2:86:51:77:4d:9f:62:93:b7:59:79:75:f5:4a:9d:1c:8e: c7:62:3c:26:81:a0:f2:9b:e5:1c:14:b6:2d:0e:61:2f:38:cc: 78:4c:9e:dc:74:dc:65:6a:ef:40:76:5d:3c:dd:19:15:29:51: 52:76:e6:c5:2f:35:b9:9c:54:f0:c9:3a:07:96:c3:96:9c:e3: e6:22:d4:51:4d:03:e7:90:bf:76:7f:e4:88:94:3e:e6:e3:c9: a4:d3:97:0f:26:f3:fb:6e:e0:93:5c:4b:a7:86:a9:47:b3:5a: c6:3c:66:70:21:27:f7:e4:53:99:35:a1:d5:37:80:a6:fb:fc: 42:9a:e0:23:3a:2d:9b:2d:9f:67:ad:87:05:dc:13:3c:f3:54: f7:ee:43:e0:b1:78:5f:a0:1f:f3:71:88:09:cd:10:4f:32:de: 50:69:d8:96:e2:1e:e4:a4:73:dc:82:1f:85:60:bc:71:ef:ca: 32:fa:2d:04:66:a7:e2:b7:1b:df:2e:9b:a4:c8:fa:55:72:4f: b3:fa:13:65:34:d9:f1:58:a0:a9:72:34:f2:2f:2c:e4:2e:b5: 39:d8:80:94:cf:af:d7:c6:1d:e3:9d:6d:e3:5d:57:35:08:a6: 37:3e:ca:19 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpoknFpAd09/3iYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIyMTEwNloXDTI1MTExNzIzMTEwNlowLzEtMCsGA1UEAxMk Y2VlZDRhMDktODNiZS00MDQwLTk1NjUtZDBmZjlhMzJmZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvO7E+f7TFig6t1nz5MVqHZedLLmlbkpbT1L 5owwvgrRNo1QX1rMQ3NDq8eGetuDlXklrvFFIrs9JzC9iANBRElWf5xvqxU/VUyR zWOkdTp6FmyyN+pZn7ZWfka9UylCi24SNKoV3henHudYjXiNO0eAvcS3i9Nnau06 wg+qn/wfLlZkvgkRR2WStPUDifUFMtna28P/yETmT9nDGmBYrIWoeL/ZLnM9F96+ Hmq99JW0K/NmlpXH9IGwgFo+af5+4REor4m+0RdqIBADhTkT00kaSuHrc7Oq1sGt vBAPq5oNF+9a2uOcNbBlhk0eQmL3OWp/V2BcVH1y37sMdBisBwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOI3cYtSSMdhcz2vWNFRt7ge7lejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjAzNjhmNTktNWEzNS0z MDczLWE3NTUtZjUwYTAwMjliOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAApsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoOk7m1iNbsvD53jtwPQxcAsZILKGUXdNn2KTt1l5dfVKnRyOx2I8 JoGg8pvlHBS2LQ5hLzjMeEye3HTcZWrvQHZdPN0ZFSlRUnbmxS81uZxU8Mk6B5bD lpzj5iLUUU0D55C/dn/kiJQ+5uPJpNOXDybz+27gk1xLp4apR7NaxjxmcCEn9+RT mTWh1TeApvv8QprgIzotmy2fZ62HBdwTPPNU9+5D4LF4X6Af83GICc0QTzLeUGnY luIe5KRz3IIfhWC8ce/KMvotBGan4rcb3y6bpMj6VXJPs/oTZTTZ8VigqXI08i8s 5C61OdiAlM+v18Yd451t411XNQimNz7KGQ== -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:40 2025 by rpki-client