$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa File: 85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa (raw, json) Hash identifier: S67Fa1G9+mAgco0dKcvyY+7Kcbn6AXYn96AW4L8AKXE= Subject key identifier: 27:57:4D:EB:8F:20:CA:61:E0:12:98:3A:FE:BE:48:69:46:F9:F1:92 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9773999133B17ACC9BC7640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa Signing time: Tue 19 Aug 2025 20:44:20 +0000 ROA not before: Tue 19 Aug 2025 20:44:20 +0000 ROA not after: Mon 17 Nov 2025 21:44:20 +0000 asID: 31898 IP address blocks: 2603:c002:800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:77:39:99:13:3b:17:ac:c9:bc:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:44:20 2025 GMT Not After : Nov 17 21:44:20 2025 GMT Subject: CN=85c285b9-1329-41c9-a787-4a2f2ca13ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:f4:f5:d2:2a:f2:76:db:92:5b:59:09:76: 13:6a:d7:e6:45:42:52:46:3b:d1:58:4a:90:c7:a1: 6e:2f:2a:19:fe:a5:9c:3e:ca:1e:a3:86:0a:20:04: d6:0d:da:a7:8d:af:4c:a1:76:35:1d:e3:b2:c8:c0: 1e:12:3d:5e:4e:4a:bc:3a:30:5c:bf:d0:33:52:b3: d3:9b:22:e8:af:a5:78:4d:3a:a0:68:b2:13:7d:52: 85:17:55:2d:be:f4:8f:2b:67:64:77:5a:7b:72:39: bc:a4:9d:fd:04:d4:ab:24:9a:6f:49:1e:69:3b:27: b0:7d:71:c2:88:fd:97:26:36:b2:75:14:43:92:52: 52:54:45:d7:a3:40:75:36:1e:e5:5b:1b:e7:28:7b: aa:68:ee:c9:b0:12:81:7b:99:2a:ad:32:02:b3:86: 6e:7a:47:64:41:cb:72:ae:61:56:6a:1c:d6:bd:d6: 8d:ab:ac:d2:4e:5d:e1:ef:f3:11:42:c3:ad:63:fd: 6d:20:fc:3d:0d:a2:b9:67:2a:8a:60:25:f4:e2:fe: 66:9b:fe:8e:4c:35:5a:39:f0:46:a6:bc:dd:46:54: 3e:5c:4a:87:94:ba:ba:a7:6e:98:91:58:1c:27:ec: 1b:58:62:5b:3a:73:3a:2d:3d:66:0e:32:b7:03:69: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:57:4D:EB:8F:20:CA:61:E0:12:98:3A:FE:BE:48:69:46:F9:F1:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:e2:ed:0c:d0:95:b0:36:5d:7f:06:c7:0d:2c:32:3b:89:bc: 3e:22:be:ba:0f:a0:ad:c2:89:01:2c:c8:d0:0d:e0:53:e2:a9: 57:b2:a2:0b:5c:f8:66:76:0c:54:f5:94:f6:e6:ae:b7:85:ff: ac:6e:9e:b8:41:f4:b9:20:a1:7a:65:fb:e7:66:30:81:a6:59: aa:11:90:53:db:69:8f:60:4f:c5:cd:7e:5d:5d:45:9f:d2:68: e6:ef:a0:eb:52:c0:b6:eb:19:d6:e2:3f:59:87:e1:b6:e7:29: d9:64:e8:99:e9:de:5c:f6:b6:dd:f2:7a:d4:72:aa:a6:66:af: 96:f3:3f:fd:b1:d7:c4:36:c1:98:d1:29:ff:a4:c3:16:05:31: 86:79:56:a2:16:81:19:e8:92:9d:15:87:5f:82:ca:a1:11:b1: db:8c:5f:ff:e3:22:b6:33:ec:f2:7b:74:65:c4:87:54:34:9c: b3:43:51:55:aa:dc:32:56:88:81:7d:93:02:37:58:54:90:fd: 84:d5:97:58:a3:6a:2b:4a:ee:57:f5:41:21:ec:95:ad:a0:21: 5d:ec:74:7d:47:93:69:29:88:4c:9f:47:aa:d5:9d:81:ff:3d: 8b:65:93:89:e2:bd:13:d0:ee:9a:1f:4e:5c:d3:db:79:f1:ff: d8:37:7a:c8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpdzmZEzsXrMm8dkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDQyMFoXDTI1MTExNzIxNDQyMFowLzEtMCsGA1UEAxMk ODVjMjg1YjktMTMyOS00MWM5LWE3ODctNGEyZjJjYTEzZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPD09dIq8nbbkltZCXYTatfmRUJSRjvRWEqQ x6FuLyoZ/qWcPsoeo4YKIATWDdqnja9MoXY1HeOyyMAeEj1eTkq8OjBcv9AzUrPT myLor6V4TTqgaLITfVKFF1UtvvSPK2dkd1p7cjm8pJ39BNSrJJpvSR5pOyewfXHC iP2XJjaydRRDklJSVEXXo0B1Nh7lWxvnKHuqaO7JsBKBe5kqrTICs4ZuekdkQcty rmFWahzWvdaNq6zSTl3h7/MRQsOtY/1tIPw9DaK5ZyqKYCX04v5mm/6OTDVaOfBG przdRlQ+XEqHlLq6p26YkVgcJ+wbWGJbOnM6LT1mDjK3A2lkVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCdXTeuPIMph4BKYOv6+SGlG+fGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODViZmUzMmEtMWY4YS0z YmU1LTlmZDgtNmUzZGE1NjhiMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAggw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoeLtDNCVsDZdfwbHDSwyO4m8PiK+ug+grcKJASzI0A3gU+KpV7Ki C1z4ZnYMVPWU9uaut4X/rG6euEH0uSChemX752YwgaZZqhGQU9tpj2BPxc1+XV1F n9Jo5u+g61LAtusZ1uI/WYfhtucp2WTomeneXPa23fJ61HKqpmavlvM//bHXxDbB mNEp/6TDFgUxhnlWohaBGeiSnRWHX4LKoRGx24xf/+MitjPs8nt0ZcSHVDScs0NR VarcMlaIgX2TAjdYVJD9hNWXWKNqK0ruV/VBIeyVraAhXex0fUeTaSmITJ9HqtWd gf89i2WTieK9E9Dumh9OXNPbefH/2Dd6yA== -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:22 2025 by rpki-client