$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cd70602-ae95-364c-aea2-318c0ff46e3f.roa File: 8cd70602-ae95-364c-aea2-318c0ff46e3f.roa (raw, json) Hash identifier: w7aYza22Fsm7MEFQPpAYFTrHPdl90GjmwsTBNCsbYZw= Subject key identifier: C1:54:EF:D0:B0:91:C6:25:87:90:A9:81:53:F4:34:24:07:81:24:03 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE978057A09B68E05D4CBA680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cd70602-ae95-364c-aea2-318c0ff46e3f.roa Signing time: Tue 19 Aug 2025 20:45:56 +0000 ROA not before: Tue 19 Aug 2025 20:45:56 +0000 ROA not after: Mon 17 Nov 2025 21:45:56 +0000 asID: 31898 IP address blocks: 2603:c000:500::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:78:05:7a:09:b6:8e:05:d4:cb:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:45:56 2025 GMT Not After : Nov 17 21:45:56 2025 GMT Subject: CN=21f8d526-da74-4a68-bb98-f2252221410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:b8:40:56:a5:a5:8c:12:3b:22:f5:7a:4f: 4c:93:38:2b:a1:d3:cd:58:45:e1:43:1a:2d:1c:f4: 08:70:e5:35:68:d3:59:f1:a4:e9:44:a8:ec:81:02: d1:27:33:13:45:44:65:3f:b9:9f:69:27:75:04:88: 52:3f:9a:b0:5f:d7:a4:7d:8c:0a:1e:8f:6d:92:63: cf:c1:0f:ae:96:98:b6:6d:14:e4:f7:80:51:7e:a3: 13:62:c6:e5:1d:f1:6b:c7:0c:07:b0:77:b0:a9:4d: 93:5a:a0:26:e0:b7:c7:1d:7d:28:8b:ff:ac:fa:f4: af:b6:4e:f2:01:5a:75:59:ce:7e:dd:78:92:78:13: 48:c9:44:60:06:2f:dc:39:f1:37:2d:d4:d4:03:93: d4:00:31:92:b9:d2:73:6c:8d:cb:aa:82:73:d4:59: 9f:d7:3f:8c:52:5b:45:c5:90:ec:65:b1:61:72:f0: 8e:f0:a7:43:6b:6a:0f:37:e5:c3:fe:9a:e8:16:63: 42:7b:fe:32:2a:db:98:b6:e0:f5:71:b8:8e:89:d2: 47:77:3d:2e:d3:0b:b3:39:3a:e9:9c:a8:0a:e7:34: ea:d4:c2:35:9b:31:02:02:05:be:c8:b0:ac:3b:1e: 92:2a:c7:bc:2f:0a:00:54:cd:7c:21:2e:e5:1b:23: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:EF:D0:B0:91:C6:25:87:90:A9:81:53:F4:34:24:07:81:24:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cd70602-ae95-364c-aea2-318c0ff46e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f9:10:2f:c1:6b:d2:24:1b:6a:7c:63:b2:c3:af:98:08:5e: 0f:ab:9f:8d:bb:75:91:b0:cb:0c:18:e8:d1:23:8b:0a:0b:03: cc:69:8a:e0:14:13:36:3e:e8:21:58:ff:e7:85:23:94:b0:43: 5b:e4:6f:45:86:11:ce:28:54:e5:69:ab:2a:dc:cf:f7:7a:7d: 99:94:00:44:15:0d:d0:7b:24:6a:cd:44:b7:19:80:a9:44:c9: 33:f0:48:74:e5:a6:1c:38:1b:6b:05:4c:30:1b:f3:9d:38:c9: 46:f2:16:35:d4:00:1f:56:8b:45:fb:c7:8d:d2:2d:b1:b1:1b: f2:fc:69:33:dc:39:fe:02:70:99:61:47:67:be:f0:92:e8:2c: 6f:21:38:0c:ce:99:49:e3:38:b3:69:de:fa:d8:7d:a5:5d:9d: e9:0b:46:e4:81:e0:f7:b1:0e:7f:dd:62:31:cd:41:6e:b5:0d: 1b:42:be:12:99:e4:82:ac:d8:f4:cf:84:ce:4a:ea:71:8d:06: 15:bd:88:6e:21:28:20:1d:52:09:2c:3a:a2:50:0e:6e:80:a2: ab:0a:90:43:5e:17:7d:91:b9:53:fd:d9:37:b5:06:59:59:a3: 9f:45:19:5f:fe:1c:eb:61:83:04:9a:f2:71:72:ef:0c:10:31: 6c:4b:71:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpeAV6CbaOBdTLpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDU1NloXDTI1MTExNzIxNDU1NlowLzEtMCsGA1UEAxMk MjFmOGQ1MjYtZGE3NC00YTY4LWJiOTgtZjIyNTIyMjE0MTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrm4QFalpYwSOyL1ek9MkzgrodPNWEXhQxot HPQIcOU1aNNZ8aTpRKjsgQLRJzMTRURlP7mfaSd1BIhSP5qwX9ekfYwKHo9tkmPP wQ+ulpi2bRTk94BRfqMTYsblHfFrxwwHsHewqU2TWqAm4LfHHX0oi/+s+vSvtk7y AVp1Wc5+3XiSeBNIyURgBi/cOfE3LdTUA5PUADGSudJzbI3LqoJz1Fmf1z+MUltF xZDsZbFhcvCO8KdDa2oPN+XD/proFmNCe/4yKtuYtuD1cbiOidJHdz0u0wuzOTrp nKgK5zTq1MI1mzECAgW+yLCsOx6SKse8LwoAVM18IS7lGyPVZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMFU79CwkcYlh5CpgVP0NCQHgSQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGNkNzA2MDItYWU5NS0z NjRjLWFlYTItMzE4YzBmZjQ2ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAAUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAfkQL8Fr0iQbanxjssOvmAheD6ufjbt1kbDLDBjo0SOLCgsDzGmK 4BQTNj7oIVj/54UjlLBDW+RvRYYRzihU5WmrKtzP93p9mZQARBUN0Hskas1EtxmA qUTJM/BIdOWmHDgbawVMMBvznTjJRvIWNdQAH1aLRfvHjdItsbEb8vxpM9w5/gJw mWFHZ77wkugsbyE4DM6ZSeM4s2ne+th9pV2d6QtG5IHg97EOf91iMc1BbrUNG0K+ EpnkgqzY9M+EzkrqcY0GFb2IbiEoIB1SCSw6olAOboCiqwqQQ14XfZG5U/3ZN7UG WVmjn0UZX/4c62GDBJrycXLvDBAxbEtxFQ== -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:40 2025 by rpki-client