$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d557ef7-ae71-32d4-8f06-b24f378d62ad.roa File: 4d557ef7-ae71-32d4-8f06-b24f378d62ad.roa (raw, json) Hash identifier: SXIGc0RSBvmKaX/bQ8g+SPFQroJqvLorim2f2G7FdDo= Subject key identifier: 7A:3B:51:9C:F9:3E:8C:EB:A0:F6:C5:E4:65:9D:6F:C0:97:FB:8D:51 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB184F32220E80A218F14840 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d557ef7-ae71-32d4-8f06-b24f378d62ad.roa Signing time: Wed 20 Aug 2025 10:44:42 +0000 ROA not before: Wed 20 Aug 2025 10:44:42 +0000 ROA not after: Tue 18 Nov 2025 11:44:42 +0000 asID: 31898 IP address blocks: 2603:c02e:8000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:18:4f:32:22:0e:80:a2:18:f1:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 10:44:42 2025 GMT Not After : Nov 18 11:44:42 2025 GMT Subject: CN=bb5ecfc8-1e15-471a-ac66-89ed43aabde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:b0:77:2e:c4:31:70:80:59:d9:d4:e4:10: 28:50:d6:97:6b:b0:83:63:a6:14:de:7c:6e:1b:7b: 74:d2:f3:5b:2d:dc:4e:2e:49:b6:e4:1d:2d:7d:32: 14:c6:4d:dc:e9:7e:af:55:c0:21:e2:11:db:0c:9b: 37:3c:21:c0:08:b5:7c:87:0f:06:80:13:dc:4b:f1: cd:13:86:f7:03:08:f1:5c:a1:39:6b:fd:26:59:65: 3a:25:ef:6c:e9:eb:4c:b4:ce:51:e6:e5:08:77:5b: 37:3c:77:6a:8d:38:07:72:cc:6d:bb:79:3b:ef:36: c7:f2:7c:c3:79:33:2f:5e:e1:d9:87:2a:3e:5f:ef: 90:a5:94:72:6d:67:ec:00:76:55:3c:dd:14:61:be: fd:ef:5c:ad:a5:d7:c2:d1:26:a8:7f:6e:a7:48:56: 99:29:7e:3c:69:af:0c:2c:57:f5:10:88:67:ba:57: 9e:f6:59:d0:fd:15:42:90:2a:94:f6:4e:28:f7:68: 0f:cd:24:92:2f:29:fd:64:72:42:ea:2e:21:e1:bf: 11:53:0c:75:f9:a0:bb:d1:2c:d2:a3:ea:2e:6b:db: 1a:d4:c2:73:fd:62:c2:c8:e1:f0:73:b8:8f:91:73: 4a:87:de:1c:5b:1a:36:ed:e8:2b:8c:18:2f:77:fc: 60:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3B:51:9C:F9:3E:8C:EB:A0:F6:C5:E4:65:9D:6F:C0:97:FB:8D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d557ef7-ae71-32d4-8f06-b24f378d62ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c02e:8000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:23:b0:a8:d8:2a:95:19:c3:28:0e:15:94:12:a7:4d:c3:91: f6:6d:6c:b5:9e:23:0e:55:b5:43:5f:50:0e:68:90:f9:41:16: a9:6c:1f:00:ba:fb:2a:37:51:09:3f:d6:6e:b4:83:57:cb:78: 53:d1:a7:cc:92:cd:61:06:af:8f:b7:fe:e2:bb:bc:25:3f:5c: 44:d9:aa:95:55:58:a6:f9:eb:b2:16:13:f7:dd:1e:d2:ba:fc: c5:92:d8:5c:54:5d:86:7c:46:fe:d8:02:d2:ff:b8:89:9b:c1: 72:25:60:55:63:8a:e8:64:ef:15:c9:e8:06:05:60:26:37:37: e4:38:a1:72:92:29:bf:27:ef:dc:11:f7:fc:6b:56:8b:6c:7e: a0:89:4f:54:73:27:39:ea:b4:4d:80:08:4c:37:4e:94:4b:3b: 4f:f5:31:b1:0c:e1:a0:f1:7f:04:05:bf:3e:87:e7:4a:2d:3d: 20:0c:ee:da:00:61:7d:61:81:72:c7:a0:3d:50:9e:e6:c8:f7: 38:1f:08:0e:88:b4:df:13:dc:81:68:8c:ef:1f:4d:e7:91:ed: 88:b5:fc:f7:03:c4:e4:ef:89:e5:76:f7:68:24:2f:a5:21:24: 12:7e:02:e4:85:ff:0a:13:b0:c3:7e:11:05:e2:ea:0c:91:1a: d3:68:1d:05 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErrGE8yIg6AohjxSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEwNDQ0MloXDTI1MTExODExNDQ0MlowLzEtMCsGA1UEAxMk YmI1ZWNmYzgtMWUxNS00NzFhLWFjNjYtODllZDQzYWFiZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a2wdy7EMXCAWdnU5BAoUNaXa7CDY6YU3nxu G3t00vNbLdxOLkm25B0tfTIUxk3c6X6vVcAh4hHbDJs3PCHACLV8hw8GgBPcS/HN E4b3AwjxXKE5a/0mWWU6Je9s6etMtM5R5uUId1s3PHdqjTgHcsxtu3k77zbH8nzD eTMvXuHZhyo+X++QpZRybWfsAHZVPN0UYb7971ytpdfC0Saof26nSFaZKX48aa8M LFf1EIhnulee9lnQ/RVCkCqU9k4o92gPzSSSLyn9ZHJC6i4h4b8RUwx1+aC70SzS o+oua9sa1MJz/WLCyOHwc7iPkXNKh94cWxo27egrjBgvd/xgVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHo7UZz5PozroPbF5GWdb8CX+41RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGQ1NTdlZjctYWU3MS0z MmQ0LThmMDYtYjI0ZjM3OGQ2MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPALoAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAASOwqNgqlRnDKA4VlBKnTcOR9m1stZ4jDlW1Q19QDmiQ+UEWqWwf ALr7KjdRCT/WbrSDV8t4U9GnzJLNYQavj7f+4ru8JT9cRNmqlVVYpvnrshYT990e 0rr8xZLYXFRdhnxG/tgC0v+4iZvBciVgVWOK6GTvFcnoBgVgJjc35DihcpIpvyfv 3BH3/GtWi2x+oIlPVHMnOeq0TYAITDdOlEs7T/UxsQzhoPF/BAW/PofnSi09IAzu 2gBhfWGBcsegPVCe5sj3OB8IDoi03xPcgWiM7x9N55HtiLX89wPE5O+J5Xb3aCQv pSEkEn4C5IX/ChOww34RBeLqDJEa02gdBQ== -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:57 2025 by rpki-client