$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c94cf0-13d0-3868-8b63-0d77f1f57e4e.roa File: 86c94cf0-13d0-3868-8b63-0d77f1f57e4e.roa (raw, json) Hash identifier: LZwyeyxfK18oqT+HLeTRP5hCXOMozNfYXNpOQKpjvJM= Subject key identifier: AA:1C:8E:6C:5B:28:1C:50:D7:53:36:B3:50:BA:2E:72:DC:B8:49:3A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE941D27C750E1B5BDA947DC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c94cf0-13d0-3868-8b63-0d77f1f57e4e.roa Signing time: Tue 19 Aug 2025 18:56:44 +0000 ROA not before: Tue 19 Aug 2025 18:56:44 +0000 ROA not after: Mon 17 Nov 2025 19:56:44 +0000 asID: 31898 IP address blocks: 2603:c002:1900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:41:d2:7c:75:0e:1b:5b:da:94:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 18:56:44 2025 GMT Not After : Nov 17 19:56:44 2025 GMT Subject: CN=e17b8ab4-87b3-45e0-a442-82abdc30a514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d3:2c:eb:c8:11:07:f7:30:8c:91:ce:a2:7a: ec:85:72:d0:61:55:9c:9e:2a:5b:b8:93:a7:be:08: 80:e8:b9:3c:da:10:98:b0:17:5f:00:12:33:0c:36: 1f:12:53:ae:a9:ab:c1:ea:ba:c4:e2:be:f4:ed:15: bc:a0:2f:ad:ae:a1:b1:66:a0:df:fb:79:ca:37:d3: c7:3e:c5:2a:9c:d6:65:d0:e8:77:51:d4:03:a3:58: e2:de:aa:9c:e1:45:67:a9:2a:71:d5:77:88:15:25: 2b:bf:07:c7:28:15:3b:8e:32:ce:f5:09:18:c7:18: cf:34:40:20:ad:18:6e:87:fa:1a:2f:f2:0b:66:62: 4b:a7:4d:1a:07:fe:f6:ab:65:5d:fc:5e:f0:3a:52: ad:e7:28:78:cb:db:5e:5e:91:92:3c:47:a5:e7:f3: 7d:70:3b:3b:bb:ff:20:67:37:5b:19:93:7b:10:d3: 46:f2:e5:d5:89:2e:72:ae:04:2b:32:47:5e:0d:c4: f0:a0:60:20:1d:f4:08:22:59:0c:53:9f:67:8b:8d: 35:6b:ef:68:fe:55:9b:88:de:7b:6c:21:71:12:a8: a9:22:d0:29:4d:ba:85:0e:30:de:4b:49:fa:9e:b4: 63:3c:1f:6c:9d:60:47:9f:fb:ca:61:96:f2:bd:91: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1C:8E:6C:5B:28:1C:50:D7:53:36:B3:50:BA:2E:72:DC:B8:49:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86c94cf0-13d0-3868-8b63-0d77f1f57e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:1900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b0:e6:b3:13:12:a8:ce:1e:4c:25:39:fe:46:b3:2f:74:cd: 8e:c5:20:ea:2d:fd:11:e7:da:ab:97:bb:f0:a1:22:95:4d:2b: 21:62:f3:8c:04:3f:75:4e:96:3f:4b:88:b2:f3:5e:fa:00:3a: f8:8d:e3:71:1f:ff:e6:58:bd:60:c2:5f:59:e0:45:c1:8e:42: 9b:e4:20:c0:0d:73:9b:cb:b1:ae:5a:ea:c7:4d:b5:4c:43:83: 03:b0:95:d7:67:31:0a:e1:c7:62:c1:cd:72:31:d5:b9:5d:ac: d7:2c:56:06:2f:ae:b5:ed:42:6a:ae:15:f5:f4:9c:fc:a3:a9: 62:a0:95:2a:c4:18:21:36:b0:35:b8:71:89:14:70:05:fb:f3: e9:5a:a1:f7:d1:38:73:a4:64:00:e4:93:76:7e:e6:65:2d:ef: 1c:61:41:87:65:25:84:af:1f:72:fa:dd:48:f4:23:f8:78:19: 81:a3:ad:b3:14:15:5e:ca:63:ad:ed:9a:ba:5c:31:68:3e:ac: 06:fd:bb:73:8f:31:62:56:30:44:17:08:64:e3:fd:3c:3e:3f: 7b:b7:ce:20:63:e0:25:0a:b7:c5:c5:d8:8a:1f:49:95:8c:b3: a9:16:cc:f8:26:8e:14:0b:d2:d7:68:2d:28:a4:46:2d:50:65: 44:66:27:e0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpQdJ8dQ4bW9qUfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE4NTY0NFoXDTI1MTExNzE5NTY0NFowLzEtMCsGA1UEAxMk ZTE3YjhhYjQtODdiMy00NWUwLWE0NDItODJhYmRjMzBhNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NMs68gRB/cwjJHOonrshXLQYVWcnipbuJOn vgiA6Lk82hCYsBdfABIzDDYfElOuqavB6rrE4r707RW8oC+trqGxZqDf+3nKN9PH PsUqnNZl0Oh3UdQDo1ji3qqc4UVnqSpx1XeIFSUrvwfHKBU7jjLO9QkYxxjPNEAg rRhuh/oaL/ILZmJLp00aB/72q2Vd/F7wOlKt5yh4y9teXpGSPEel5/N9cDs7u/8g ZzdbGZN7ENNG8uXViS5yrgQrMkdeDcTwoGAgHfQIIlkMU59ni401a+9o/lWbiN57 bCFxEqipItApTbqFDjDeS0n6nrRjPB9snWBHn/vKYZbyvZEAcQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKocjmxbKBxQ11M2s1C6LnLcuEk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODZjOTRjZjAtMTNkMC0z ODY4LThiNjMtMGQ3N2YxZjU3ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAhkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACLDmsxMSqM4eTCU5/kazL3TNjsUg6i39Eefaq5e78KEilU0rIWLz jAQ/dU6WP0uIsvNe+gA6+I3jcR//5li9YMJfWeBFwY5Cm+QgwA1zm8uxrlrqx021 TEODA7CV12cxCuHHYsHNcjHVuV2s1yxWBi+ute1Caq4V9fSc/KOpYqCVKsQYITaw NbhxiRRwBfvz6Vqh99E4c6RkAOSTdn7mZS3vHGFBh2UlhK8fcvrdSPQj+HgZgaOt sxQVXspjre2aulwxaD6sBv27c48xYlYwRBcIZOP9PD4/e7fOIGPgJQq3xcXYih9J lYyzqRbM+CaOFAvS12gtKKRGLVBlRGYn4A== -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:09 2025 by rpki-client