$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86ce3032-c278-3e5c-abb9-03af9cc46a2c.roa File: 86ce3032-c278-3e5c-abb9-03af9cc46a2c.roa (raw, json) Hash identifier: qaRhlJ4N6VJDB+xpa1gtJxhQJgFCyXLw4x+vtq6eEVE= Subject key identifier: 4D:DD:57:31:D3:E1:35:EB:15:98:A0:9A:B0:06:B8:84:3F:AA:BF:48 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE6FD1E535AE92D536022A900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86ce3032-c278-3e5c-abb9-03af9cc46a2c.roa Signing time: Mon 18 Aug 2025 23:26:41 +0000 ROA not before: Mon 18 Aug 2025 23:26:41 +0000 ROA not after: Mon 17 Nov 2025 00:26:41 +0000 asID: 31898 IP address blocks: 2603:c000:1e00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:fd:1e:53:5a:e9:2d:53:60:22:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 23:26:41 2025 GMT Not After : Nov 17 00:26:41 2025 GMT Subject: CN=776b08df-ca67-48e8-b4f7-3ebb9bf7e1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:58:b2:85:14:32:2f:4f:59:8e:2e:c5:44: 0f:93:1c:c7:7d:85:4a:30:a5:cb:9a:7f:d1:d0:da: d6:38:ca:ee:7f:81:e6:f0:e9:8f:0f:d2:e6:41:67: 79:a4:c5:7b:92:db:20:d3:33:c0:e9:e4:84:06:39: 8f:c6:84:1b:50:8d:38:d1:6e:10:24:2c:ad:bb:37: 80:d8:a2:9f:b6:01:e9:6d:23:63:d6:c6:39:57:c3: b2:a0:f9:a3:76:c3:24:52:29:e9:60:25:6e:23:51: fa:da:bb:20:b6:1a:42:92:35:44:4b:cb:77:28:db: 11:d6:7f:de:ea:be:77:dd:50:68:63:74:79:2b:7d: bb:b4:99:8c:0b:dc:ee:0d:dd:ba:b0:ca:b9:63:e3: 5f:bb:2a:af:0a:f1:f2:22:56:97:e2:49:10:6f:a9: df:e3:19:75:3d:63:a8:2a:32:06:c2:73:36:88:09: 3d:94:f5:c1:68:14:7b:e2:24:af:e8:53:24:74:ed: d1:00:0f:3b:cc:23:79:10:40:16:fe:3a:e4:20:81: fe:63:c4:21:d2:47:64:5f:ff:64:53:bc:c0:12:eb: 66:80:6a:5f:1d:aa:36:b9:be:17:d2:99:34:34:37: 8b:d6:46:fa:f1:45:69:43:eb:bc:4d:e8:dd:54:7e: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DD:57:31:D3:E1:35:EB:15:98:A0:9A:B0:06:B8:84:3F:AA:BF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86ce3032-c278-3e5c-abb9-03af9cc46a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:1e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c4:0a:52:88:e9:6f:64:5a:90:15:e8:af:5b:ee:2b:d7:af: a6:e5:e9:41:8f:e6:b9:dc:c3:17:b3:91:25:6d:85:c0:84:2a: 17:03:9e:6a:5b:fb:41:ad:42:ea:65:5e:91:d4:0f:c2:2d:ed: f1:0e:af:23:6b:21:ca:1d:8d:84:6d:fe:cc:d6:35:c4:da:c2: 79:b3:bf:6d:ec:a3:a5:99:4e:d9:69:aa:35:c0:cf:89:b1:5c: d5:c5:e6:b9:59:c3:aa:db:f9:de:45:87:04:16:50:b7:a9:f5: de:23:01:97:19:4d:1a:bb:6f:31:09:5a:d9:eb:aa:22:26:e5: 11:60:de:46:65:c3:49:46:32:1e:65:16:bd:1e:96:bf:25:66: 5d:91:b5:c3:11:51:49:29:fd:f0:b7:0d:4c:5f:7c:c4:ec:d4: 2f:b5:10:ee:af:97:8e:7d:ab:ea:18:e4:e1:30:6e:83:2b:f9: 45:a0:18:ac:74:50:9a:e9:05:fd:4a:e2:1d:14:aa:2d:6a:2a: 74:04:cc:ec:c8:2e:68:a0:6f:96:12:58:58:e3:05:f4:e6:82: 64:d9:6b:79:a1:21:a8:f1:fa:29:68:06:8a:ba:57:f1:fe:56: c9:a3:43:8c:3e:b4:15:ff:6d:01:24:8d:0f:98:ae:b6:d6:c7: f2:5e:69:4d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErm/R5TWuktU2AiqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODIzMjY0MVoXDTI1MTExNzAwMjY0MVowLzEtMCsGA1UEAxMk Nzc2YjA4ZGYtY2E2Ny00OGU4LWI0ZjctM2ViYjliZjdlMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqVYsoUUMi9PWY4uxUQPkxzHfYVKMKXLmn/R 0NrWOMruf4Hm8OmPD9LmQWd5pMV7ktsg0zPA6eSEBjmPxoQbUI040W4QJCytuzeA 2KKftgHpbSNj1sY5V8OyoPmjdsMkUinpYCVuI1H62rsgthpCkjVES8t3KNsR1n/e 6r533VBoY3R5K327tJmMC9zuDd26sMq5Y+NfuyqvCvHyIlaX4kkQb6nf4xl1PWOo KjIGwnM2iAk9lPXBaBR74iSv6FMkdO3RAA87zCN5EEAW/jrkIIH+Y8Qh0kdkX/9k U7zAEutmgGpfHao2ub4X0pk0NDeL1kb68UVpQ+u8TejdVH7LFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE3dVzHT4TXrFZigmrAGuIQ/qr9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODZjZTMwMzItYzI3OC0z ZTVjLWFiYjktMDNhZjljYzQ2YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAB4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADcQKUojpb2RakBXor1vuK9evpuXpQY/mudzDF7ORJW2FwIQqFwOe alv7Qa1C6mVekdQPwi3t8Q6vI2shyh2NhG3+zNY1xNrCebO/beyjpZlO2WmqNcDP ibFc1cXmuVnDqtv53kWHBBZQt6n13iMBlxlNGrtvMQla2euqIiblEWDeRmXDSUYy HmUWvR6WvyVmXZG1wxFRSSn98LcNTF98xOzUL7UQ7q+Xjn2r6hjk4TBugyv5RaAY rHRQmukF/UriHRSqLWoqdATM7MguaKBvlhJYWOMF9OaCZNlreaEhqPH6KWgGirpX 8f5WyaNDjD60Ff9tASSND5iuttbH8l5pTQ== -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:57 2025 by rpki-client