$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5e51ae1-9650-3b84-81bb-a099538b04e6.roa File: e5e51ae1-9650-3b84-81bb-a099538b04e6.roa (raw, json) Hash identifier: lI+Ex3FVDMGwMFPrOIVJMSi3E56eZ4g5M1W/hEf2YE8= Subject key identifier: 96:EE:63:5B:0A:E7:84:33:7D:6F:C7:EA:5C:DB:F2:BD:C6:FF:CC:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9780AB953BB3A213FDD25AC Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5e51ae1-9650-3b84-81bb-a099538b04e6.roa Signing time: Tue 19 Aug 2025 20:45:59 +0000 ROA not before: Tue 19 Aug 2025 20:45:59 +0000 ROA not after: Mon 17 Nov 2025 21:45:59 +0000 asID: 31898 IP address blocks: 2603:c002:500::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:78:0a:b9:53:bb:3a:21:3f:dd:25:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:45:59 2025 GMT Not After : Nov 17 21:45:59 2025 GMT Subject: CN=8ac87664-904c-4209-a939-57125cc67bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:4a:14:69:cf:ce:ca:5c:ba:d0:2a:e6:ca: 43:62:78:05:85:41:29:02:50:6e:7a:a1:59:3d:41: 4a:bf:4c:d0:11:90:50:fc:1d:32:d7:71:06:0e:ff: 15:8f:39:cb:a4:fd:0c:23:e3:e5:1b:c7:9a:44:2d: 7e:03:46:24:3a:49:13:53:a4:2b:9d:c6:6a:ff:b5: 5a:71:fa:ca:13:60:4f:5f:4c:e6:47:a0:75:91:db: 21:61:ed:77:37:52:9f:09:42:db:6c:a3:93:f5:53: a5:1d:85:d4:31:7d:26:57:7c:05:64:b5:68:c4:9a: 42:52:de:5b:42:35:71:7f:78:78:60:fb:63:71:fc: 21:93:49:92:98:a3:a0:ca:ae:b7:d1:79:db:d3:2c: cb:04:4f:1c:ad:55:85:85:d2:6c:e7:33:e9:fb:6c: b0:3f:3c:d1:ab:46:fd:c7:88:16:98:23:31:65:25: dc:8a:f1:1f:6c:25:8b:5b:b1:ef:2f:a9:40:c0:3f: bc:91:25:9b:1d:df:5c:84:bb:af:f7:b8:01:19:48: 73:66:62:2f:8d:c5:fa:94:8b:1b:5e:57:05:9f:b1: 21:c1:d0:43:9a:d4:af:a6:a7:e8:c3:5e:16:a3:bd: 3d:5e:55:00:d3:f5:26:ba:92:33:6c:e7:ba:7b:cf: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EE:63:5B:0A:E7:84:33:7D:6F:C7:EA:5C:DB:F2:BD:C6:FF:CC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e5e51ae1-9650-3b84-81bb-a099538b04e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f8:21:66:19:94:15:58:f4:51:1d:b6:24:c2:f9:b4:ad:57: c9:10:ba:f5:14:1f:60:40:1e:49:a6:20:ca:f3:6d:5d:7b:ea: f4:fe:f3:49:49:a6:10:81:eb:40:5c:5f:4f:f8:d0:d4:2b:dd: 5f:18:b4:ee:cb:b6:e9:2f:96:72:35:ff:17:16:f3:f1:a0:15: d8:78:07:97:c7:42:f1:7e:f0:4f:65:c1:f0:7b:36:9b:11:5d: 50:97:31:8a:e4:dc:ab:d5:93:4b:2b:7f:79:bb:cb:80:3d:b0: 50:62:58:18:9b:12:af:31:4b:d0:31:5a:cb:f7:52:9b:02:c1: e1:3b:11:75:67:96:57:95:a0:e2:79:63:ea:65:78:b1:1a:d5: 67:91:13:2c:e8:e0:ad:60:66:f3:08:15:86:a2:ef:bd:63:6f: 84:0c:f3:80:40:6c:4e:04:e8:58:69:aa:6e:e6:01:78:51:d7: 62:2a:cf:34:13:ff:2b:a7:de:54:23:3f:62:36:4f:03:c0:15: c4:60:5c:2a:3b:90:e6:ec:06:f5:56:6d:73:bd:58:21:62:f2: 6b:99:b6:32:bf:b6:df:5b:5c:de:e4:52:c1:e5:eb:35:c9:60: c3:5b:00:c7:61:36:b0:31:e0:9d:59:cd:b0:aa:3d:41:56:98: 8a:8d:ff:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpeAq5U7s6IT/dJawwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDU1OVoXDTI1MTExNzIxNDU1OVowLzEtMCsGA1UEAxMk OGFjODc2NjQtOTA0Yy00MjA5LWE5MzktNTcxMjVjYzY3YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXxKFGnPzspcutAq5spDYngFhUEpAlBueqFZ PUFKv0zQEZBQ/B0y13EGDv8VjznLpP0MI+PlG8eaRC1+A0YkOkkTU6QrncZq/7Va cfrKE2BPX0zmR6B1kdshYe13N1KfCULbbKOT9VOlHYXUMX0mV3wFZLVoxJpCUt5b QjVxf3h4YPtjcfwhk0mSmKOgyq630Xnb0yzLBE8crVWFhdJs5zPp+2ywPzzRq0b9 x4gWmCMxZSXcivEfbCWLW7HvL6lAwD+8kSWbHd9chLuv97gBGUhzZmIvjcX6lIsb XlcFn7EhwdBDmtSvpqfow14Wo709XlUA0/UmupIzbOe6e89WZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJbuY1sK54QzfW/H6lzb8r3G/8xYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTVlNTFhZTEtOTY1MC0z Yjg0LTgxYmItYTA5OTUzOGIwNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAgUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWPghZhmUFVj0UR22JML5tK1XyRC69RQfYEAeSaYgyvNtXXvq9P7z SUmmEIHrQFxfT/jQ1CvdXxi07su26S+WcjX/Fxbz8aAV2HgHl8dC8X7wT2XB8Hs2 mxFdUJcxiuTcq9WTSyt/ebvLgD2wUGJYGJsSrzFL0DFay/dSmwLB4TsRdWeWV5Wg 4nlj6mV4sRrVZ5ETLOjgrWBm8wgVhqLvvWNvhAzzgEBsTgToWGmqbuYBeFHXYirP NBP/K6feVCM/YjZPA8AVxGBcKjuQ5uwG9VZtc71YIWLya5m2Mr+231tc3uRSweXr Nclgw1sAx2E2sDHgnVnNsKo9QVaYio3/CQ== -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:16 2025 by rpki-client