$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20b56b5f-11d9-3ce0-ae11-d1fbab7de8ab.roa File: 20b56b5f-11d9-3ce0-ae11-d1fbab7de8ab.roa (raw, json) Hash identifier: GUM3Gt8CTcSwyOmey/00uPc0jSvVJK2ewL8btW7CZOM= Subject key identifier: 8C:8C:65:E8:C1:05:F0:A6:BF:6C:44:62:D1:32:C5:E5:AB:71:5C:63 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC095938DB48DE895FA76C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20b56b5f-11d9-3ce0-ae11-d1fbab7de8ab.roa Signing time: Wed 20 Aug 2025 18:50:22 +0000 ROA not before: Wed 20 Aug 2025 18:50:22 +0000 ROA not after: Tue 18 Nov 2025 19:50:22 +0000 asID: 31898 IP address blocks: 2603:c018:6000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:09:59:38:db:48:de:89:5f:a7:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:50:22 2025 GMT Not After : Nov 18 19:50:22 2025 GMT Subject: CN=60b710d9-ffd5-4a12-ba5e-4b4131eb423d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:01:fd:7d:8e:de:46:42:52:9d:1c:47:77: e6:99:eb:a9:f0:95:58:bb:36:12:9d:3c:9a:c9:46: ba:3b:33:63:60:78:26:43:28:98:a6:f1:e7:a7:96: 17:1f:ac:09:59:70:ba:3d:c9:c1:fb:bb:f3:a7:eb: 2a:e6:ba:e9:17:5a:52:a1:d9:71:c0:21:8d:ff:a8: 48:f5:74:07:64:08:3b:43:bf:26:1d:49:5a:78:b9: bc:2a:2a:93:d2:2f:32:c0:09:66:a1:c2:96:34:a1: 7d:00:f7:41:62:f0:33:d1:c1:27:f1:e4:ef:90:02: 34:b9:ed:96:f6:53:9c:72:ec:26:9d:e3:66:67:82: 68:ba:84:cf:0d:87:84:8e:ef:e4:cd:8e:89:10:2d: e8:19:8c:ef:df:15:27:a2:f0:f5:99:c1:cd:02:4b: a9:1c:d1:ac:ea:d2:d8:9b:eb:65:09:22:3a:ba:38: 03:43:4f:7b:e6:7d:bc:d5:c1:d7:1e:53:ad:56:cd: f2:44:f0:70:f1:88:3f:ff:04:fa:eb:f9:ec:0c:ec: f9:48:fe:af:58:cd:bf:86:89:82:47:60:34:27:04: 36:cd:e8:d1:1f:f7:11:93:22:74:67:fe:af:6c:5c: d6:0c:91:0c:1d:95:5a:0c:c4:d7:d6:7d:d8:2a:4c: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8C:65:E8:C1:05:F0:A6:BF:6C:44:62:D1:32:C5:E5:AB:71:5C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20b56b5f-11d9-3ce0-ae11-d1fbab7de8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c018:6000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:17:52:d7:c0:98:59:22:33:e9:56:a6:39:3c:7f:d4:d3:28: eb:b5:32:92:02:2b:e1:3b:b3:22:6a:0d:36:eb:d2:ca:8f:93: e4:39:bb:a1:9e:e3:48:8f:36:43:91:db:df:1e:53:ce:f8:30: f5:5c:ff:6c:60:f7:2a:78:09:d7:3d:32:f4:92:cc:3e:bc:a6: 16:f0:be:57:36:fe:10:47:92:eb:4f:9c:7e:b7:94:55:c1:2d: a6:94:d2:0b:ad:72:ea:00:f2:93:d9:11:63:eb:2c:89:68:41: 35:fe:03:96:30:15:5a:f4:22:46:26:2a:5c:d1:13:13:ee:68: 8f:24:68:2b:a2:6d:d6:6b:72:70:90:21:24:24:9d:dd:1f:cd: 51:77:27:28:d9:32:c8:94:2d:eb:3c:3a:36:93:bd:41:62:8a: 49:62:63:1b:74:34:a6:a7:96:63:39:f2:40:e5:de:8b:37:3b: d0:c6:cd:58:8e:49:a2:91:9b:99:bd:29:b6:22:23:25:72:e4: a1:da:bc:83:80:72:34:79:1b:1e:0c:55:55:b5:89:7f:db:d6: 01:d8:f5:0f:1f:78:19:ff:1b:e0:d1:9e:f7:84:24:a0:64:ad: 18:8f:92:5e:0f:1e:be:74:be:03:08:c2:2b:93:bc:9f:90:b4: 59:fb:7d:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsCVk420jeiV+nbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4NTAyMloXDTI1MTExODE5NTAyMlowLzEtMCsGA1UEAxMk NjBiNzEwZDktZmZkNS00YTEyLWJhNWUtNGI0MTMxZWI0MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2sB/X2O3kZCUp0cR3fmmeup8JVYuzYSnTya yUa6OzNjYHgmQyiYpvHnp5YXH6wJWXC6PcnB+7vzp+sq5rrpF1pSodlxwCGN/6hI 9XQHZAg7Q78mHUlaeLm8KiqT0i8ywAlmocKWNKF9APdBYvAz0cEn8eTvkAI0ue2W 9lOccuwmneNmZ4JouoTPDYeEju/kzY6JEC3oGYzv3xUnovD1mcHNAkupHNGs6tLY m+tlCSI6ujgDQ0975n281cHXHlOtVs3yRPBw8Yg//wT66/nsDOz5SP6vWM2/homC R2A0JwQ2zejRH/cRkyJ0Z/6vbFzWDJEMHZVaDMTX1n3YKkwDgQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIyMZejBBfCmv2xEYtEyxeWrcVxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjBiNTZiNWYtMTFkOS0z Y2UwLWFlMTEtZDFmYmFiN2RlOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAGGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaBdS18CYWSIz6VamOTx/1NMo67UykgIr4TuzImoNNuvSyo+T5Dm7 oZ7jSI82Q5Hb3x5Tzvgw9Vz/bGD3KngJ1z0y9JLMPrymFvC+Vzb+EEeS60+cfreU VcEtppTSC61y6gDyk9kRY+ssiWhBNf4DljAVWvQiRiYqXNETE+5ojyRoK6Jt1mty cJAhJCSd3R/NUXcnKNkyyJQt6zw6NpO9QWKKSWJjG3Q0pqeWYznyQOXeizc70MbN WI5JopGbmb0ptiIjJXLkodq8g4ByNHkbHgxVVbWJf9vWAdj1Dx94Gf8b4NGe94Qk oGStGI+SXg8evnS+AwjCK5O8n5C0Wft9oQ== -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:57 2025 by rpki-client