$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa File: 474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa (raw, json) Hash identifier: UcONwPp8oLjyw5C3szAz+2m4UtZvdUVoOMUM6Y30Lgw= Subject key identifier: A7:8A:01:95:EB:1A:E9:8C:13:73:8B:1F:52:FA:60:01:41:C1:1E:F0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE67A5A74FDEE71BF8E3F3000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa Signing time: Mon 18 Aug 2025 19:03:13 +0000 ROA not before: Mon 18 Aug 2025 19:03:13 +0000 ROA not after: Sun 16 Nov 2025 20:03:13 +0000 asID: 31898 IP address blocks: 2603:c002:8e00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:7a:5a:74:fd:ee:71:bf:8e:3f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 19:03:13 2025 GMT Not After : Nov 16 20:03:13 2025 GMT Subject: CN=2042fb5a-99fa-472d-bdaa-50d6f2b6e16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:3c:ab:82:96:8d:14:47:7c:98:15:a5:71: 52:39:f6:a2:07:21:f3:ce:db:f7:33:87:d1:d6:dc: bd:e1:21:e5:a9:29:f2:68:5a:4b:f6:71:4e:2e:2d: 78:4d:5d:64:e3:e6:11:0f:d6:f3:b9:f7:7a:98:7e: 10:fb:0d:d5:76:01:3b:45:f6:93:da:14:1e:ec:c8: 1f:d6:0c:0e:23:ea:95:19:af:fd:a7:a7:49:4f:fe: 08:01:80:6c:a0:04:bc:ed:44:e4:97:81:ca:7a:f6: 54:cd:3e:ce:b1:fd:33:06:3d:f3:b4:d9:c5:ec:fb: 3e:81:2b:9c:94:cd:aa:1c:b5:62:50:80:66:69:7f: de:7f:a3:06:a9:49:e9:f7:ae:c9:d2:76:52:21:c0: 6c:b5:52:99:51:14:48:ec:e7:bb:a3:41:91:a5:c3: 81:9c:a4:58:0e:3b:9e:c0:67:d9:26:bb:af:6f:2e: 91:5e:16:de:0c:d2:19:1d:9f:ac:d3:c6:61:09:4d: be:25:a7:f4:c6:f4:53:43:ef:20:ee:48:e2:e6:b9: d8:5c:7f:86:65:fd:4f:8e:48:07:dc:fd:6d:fd:54: 67:c4:15:a9:e5:9d:5c:bb:0d:f6:75:c6:aa:d2:a5: e1:d1:ce:15:69:7f:92:d8:ac:3e:1e:38:45:0d:b5: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8A:01:95:EB:1A:E9:8C:13:73:8B:1F:52:FA:60:01:41:C1:1E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:8e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:44:96:41:75:5e:25:74:98:ec:74:c7:33:c9:c0:8b:0c:23: 10:fb:36:5d:a0:77:b5:f6:9c:1c:1e:31:20:96:68:0f:16:cc: 57:80:93:97:f2:9c:f7:da:90:6b:1e:d5:ed:00:ab:3e:d5:c9: 5a:7d:61:a0:6d:5a:c9:3a:6f:c7:df:81:ab:85:b8:32:12:5c: 45:52:08:12:e1:e0:b3:47:f7:f0:59:74:1d:a1:f7:6e:fe:b3: e2:08:84:9a:78:60:6a:4b:95:33:27:eb:c3:99:55:b6:01:b1: 87:4e:1f:c7:31:06:68:4a:96:92:11:93:05:55:27:56:68:3c: cb:96:93:02:4f:31:e5:4c:44:4a:04:40:36:4b:67:2c:f1:20: 05:27:fe:45:04:a4:a2:61:12:1f:fc:f0:b6:4d:dd:da:33:51: 0d:58:40:21:35:21:a5:cc:f3:92:ce:ea:da:06:88:79:51:91: 6e:30:19:c3:08:3a:0b:26:33:79:a7:b2:46:ba:21:60:54:7b: bd:46:b1:50:ed:5f:1b:a6:e7:8e:99:a4:e5:aa:36:2f:b0:2c: 76:b4:d7:d2:e6:69:62:e0:32:b1:dd:7d:82:79:cf:46:2f:d3: 96:d1:2d:f2:dd:bd:98:8f:02:c7:cd:1c:b1:2e:0f:2b:e2:ef: 09:e7:5c:1b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErmelp0/e5xv44/MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODE5MDMxM1oXDTI1MTExNjIwMDMxM1owLzEtMCsGA1UEAxMk MjA0MmZiNWEtOTlmYS00NzJkLWJkYWEtNTBkNmYyYjZlMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCs8q4KWjRRHfJgVpXFSOfaiByHzztv3M4fR 1ty94SHlqSnyaFpL9nFOLi14TV1k4+YRD9bzufd6mH4Q+w3VdgE7RfaT2hQe7Mgf 1gwOI+qVGa/9p6dJT/4IAYBsoAS87UTkl4HKevZUzT7Osf0zBj3ztNnF7Ps+gSuc lM2qHLViUIBmaX/ef6MGqUnp967J0nZSIcBstVKZURRI7Oe7o0GRpcOBnKRYDjue wGfZJruvby6RXhbeDNIZHZ+s08ZhCU2+Jaf0xvRTQ+8g7kji5rnYXH+GZf1PjkgH 3P1t/VRnxBWp5Z1cuw32dcaq0qXh0c4VaX+S2Kw+HjhFDbWEbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKeKAZXrGumME3OLH1L6YAFBwR7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDc0ZWUwYmYtMjIzNi0z Y2QzLTkzOWUtM2ZhNGJiOTBhMWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAo4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd0SWQXVeJXSY7HTHM8nAiwwjEPs2XaB3tfacHB4xIJZoDxbMV4CT l/Kc99qQax7V7QCrPtXJWn1hoG1ayTpvx9+Bq4W4MhJcRVIIEuHgs0f38Fl0HaH3 bv6z4giEmnhgakuVMyfrw5lVtgGxh04fxzEGaEqWkhGTBVUnVmg8y5aTAk8x5UxE SgRANktnLPEgBSf+RQSkomESH/zwtk3d2jNRDVhAITUhpczzks7q2gaIeVGRbjAZ wwg6CyYzeaeyRrohYFR7vUaxUO1fG6bnjpmk5ao2L7AsdrTX0uZpYuAysd19gnnP Ri/TltEt8t29mI8Cx80csS4PK+LvCedcGw== -----END CERTIFICATE-----Generated at Wed Aug 20 03:31:30 2025 by rpki-client