$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef2a54a-a6f2-35e8-8184-f686e321f41f.roa File: 1ef2a54a-a6f2-35e8-8184-f686e321f41f.roa (raw, json) Hash identifier: OqQ98nPeRURCPPz1ZqKIIMb5zR4mS6b5hBOvdVcjW98= Subject key identifier: 41:F4:B0:1D:5C:80:EF:0D:0B:7D:52:2A:EC:CC:7D:BE:40:C0:6A:F2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDB949AE2D5B97278A15C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef2a54a-a6f2-35e8-8184-f686e321f41f.roa Signing time: Thu 21 Aug 2025 10:29:46 +0000 ROA not before: Thu 21 Aug 2025 10:29:46 +0000 ROA not after: Wed 19 Nov 2025 11:29:46 +0000 asID: 31898 IP address blocks: 2603:c002:8700::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:db:94:9a:e2:d5:b9:72:78:a1:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:29:46 2025 GMT Not After : Nov 19 11:29:46 2025 GMT Subject: CN=60695d44-7fa2-4477-a982-0d08be851cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:19:ef:cc:99:e4:42:b4:ff:68:c0:5e:3f: 2b:61:b1:c2:aa:d4:a4:f2:22:f5:7d:21:d3:98:73: 98:f0:9a:b6:ec:df:ca:a8:e1:0b:04:e2:d0:ea:3b: 05:c1:80:b2:1c:cc:68:9f:e8:9a:61:35:ad:4a:8d: 85:31:ca:e8:ad:34:d1:37:4d:d6:b9:9c:16:17:9c: 29:90:36:c9:8b:c3:bb:19:fe:a4:63:58:e7:e3:65: 0a:2e:13:e8:2a:99:64:68:35:c7:31:46:aa:c4:7d: 7b:1a:85:aa:d7:cf:92:ee:d0:8a:e7:34:f3:86:a9: 6c:05:2b:83:1c:1d:c6:f6:5c:a2:6f:92:f7:96:e2: ce:af:ff:64:c9:54:c6:f8:55:04:d0:e6:3a:98:69: 0d:e3:cb:f7:3c:02:4b:6f:e1:e6:66:15:1f:39:ee: e3:ef:5c:79:8f:f8:66:e8:47:56:77:ff:14:f0:e4: d3:bc:3a:50:e1:c3:18:f2:48:13:f1:89:0f:4b:bf: 98:af:e5:97:f1:b8:e0:33:b4:25:2e:d1:34:2f:27: 98:cc:69:50:9e:f2:1e:a7:a4:a4:f7:fd:24:95:3b: 30:cc:ce:45:8e:39:89:82:a1:c1:ce:69:67:75:77: 35:58:55:56:5d:e5:cd:8b:41:0f:ed:ba:fc:cf:05: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F4:B0:1D:5C:80:EF:0D:0B:7D:52:2A:EC:CC:7D:BE:40:C0:6A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ef2a54a-a6f2-35e8-8184-f686e321f41f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:8700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:47:4a:46:a1:7e:8b:42:c3:d2:57:41:e6:d4:13:2b:c5:8c: 9d:44:55:f9:2a:d9:64:b6:1e:10:6d:e6:90:2d:c0:b8:d2:a5: e1:d8:a3:82:73:ca:9b:f1:e1:d6:cf:b4:f7:07:3d:7a:ae:cf: d2:1b:13:07:a5:a7:33:3d:6d:11:bd:a6:c9:03:f5:6e:cd:9a: 4c:21:9f:07:40:87:61:84:7d:6f:af:5c:fd:4e:ca:62:69:6e: 60:61:f4:0f:94:1f:ae:3d:7d:3a:63:3b:a9:83:1f:da:78:78: 94:1d:10:9d:16:8d:db:87:57:ff:9a:6c:77:82:cf:ef:56:f1: 57:5f:04:cb:a2:36:85:fb:c5:5b:11:8c:e5:25:2b:fb:fb:bb: 53:88:e2:85:c3:98:2c:29:cd:60:63:dd:34:fc:62:03:6e:22: 94:d0:d2:41:9d:18:8c:ec:a1:8f:e3:5e:c1:d8:37:ce:b7:eb: da:8e:27:90:05:98:1e:4e:34:6b:35:fb:6e:9d:05:31:13:1b: 59:1e:b0:a9:16:72:8b:e2:03:d3:58:cb:0f:3f:92:ab:e2:a8: e6:fc:ee:e4:61:29:69:0e:c9:25:b6:94:6b:ed:fa:21:ec:62: 08:0a:b5:0c:dd:4d:01:cd:11:3d:e8:3c:09:17:d4:b9:53:e0: a7:b0:6d:c0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErt25Sa4tW5cnihXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjk0NloXDTI1MTExOTExMjk0NlowLzEtMCsGA1UEAxMk NjA2OTVkNDQtN2ZhMi00NDc3LWE5ODItMGQwOGJlODUxY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhUZ78yZ5EK0/2jAXj8rYbHCqtSk8iL1fSHT mHOY8Jq27N/KqOELBOLQ6jsFwYCyHMxon+iaYTWtSo2FMcrorTTRN03WuZwWF5wp kDbJi8O7Gf6kY1jn42UKLhPoKplkaDXHMUaqxH17GoWq18+S7tCK5zTzhqlsBSuD HB3G9lyib5L3luLOr/9kyVTG+FUE0OY6mGkN48v3PAJLb+HmZhUfOe7j71x5j/hm 6EdWd/8U8OTTvDpQ4cMY8kgT8YkPS7+Yr+WX8bjgM7QlLtE0LyeYzGlQnvIep6Sk 9/0klTswzM5FjjmJgqHBzmlndXc1WFVWXeXNi0EP7br8zwVzmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEH0sB1cgO8NC31SKuzMfb5AwGryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVmMmE1NGEtYTZmMi0z NWU4LTgxODQtZjY4NmUzMjFmNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAocw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAI0dKRqF+i0LD0ldB5tQTK8WMnURV+SrZZLYeEG3mkC3AuNKl4dij gnPKm/Hh1s+09wc9eq7P0hsTB6WnMz1tEb2myQP1bs2aTCGfB0CHYYR9b69c/U7K YmluYGH0D5Qfrj19OmM7qYMf2nh4lB0QnRaN24dX/5psd4LP71bxV18Ey6I2hfvF WxGM5SUr+/u7U4jihcOYLCnNYGPdNPxiA24ilNDSQZ0YjOyhj+Newdg3zrfr2o4n kAWYHk40azX7bp0FMRMbWR6wqRZyi+ID01jLDz+Sq+Ko5vzu5GEpaQ7JJbaUa+36 IexiCAq1DN1NAc0RPeg8CRfUuVPgp7BtwA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:30 2025 by rpki-client