$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/555ffa38-f2d4-3382-ba97-baba02d39826.roa File: 555ffa38-f2d4-3382-ba97-baba02d39826.roa (raw, json) Hash identifier: 21tp3I3ff3q/s2qftNYuoP+IFNbcj+jYHziwb8y84HA= Subject key identifier: 7A:5F:F3:A3:95:0B:6E:4F:9B:2D:15:8B:19:C1:19:8C:A4:40:B5:F1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC094EA9ECC6CCD10DA2FD00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/555ffa38-f2d4-3382-ba97-baba02d39826.roa Signing time: Wed 20 Aug 2025 18:50:17 +0000 ROA not before: Wed 20 Aug 2025 18:50:17 +0000 ROA not after: Tue 18 Nov 2025 19:50:17 +0000 asID: 31898 IP address blocks: 2603:c000:2700::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:09:4e:a9:ec:c6:cc:d1:0d:a2:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:50:17 2025 GMT Not After : Nov 18 19:50:17 2025 GMT Subject: CN=3d5d78e7-b4dd-4589-ac4a-58f3e9d6a4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:31:b5:4f:bb:92:aa:7a:89:51:49:d6:8c:b6: 17:d2:cf:93:0e:3c:84:bb:37:15:3d:a0:1c:ad:54: de:df:c8:5a:d4:bc:9b:d9:de:07:ce:06:ca:1c:e7: 27:4f:9d:19:6a:ca:48:e3:ea:2d:e2:98:5f:26:b1: ec:e4:1b:61:aa:07:0d:a3:66:ea:09:57:aa:b2:30: 8a:a8:a4:64:3f:40:bf:a5:30:a9:50:1e:94:4a:c2: bf:5d:dc:23:4b:40:ba:58:32:fd:5e:d0:0b:ac:8f: 84:f1:66:f2:8a:99:1a:d6:ed:5e:be:bb:3b:32:96: 35:62:dc:73:a7:6a:a8:3a:e8:31:15:4c:ae:b4:8e: 75:6f:b4:7a:93:c4:69:bc:cd:eb:97:4b:9d:87:b9: ab:28:b6:8c:94:e5:ef:24:d8:94:96:61:c6:1d:04: a7:cb:f5:a9:1f:e5:8c:56:83:76:0a:d0:ac:cd:af: bd:52:c6:4d:ec:b8:a3:88:f2:97:27:c5:b7:98:b7: 61:79:e3:f1:75:28:d4:d8:a1:85:67:20:b5:93:12: ac:d5:37:14:5f:9d:40:b7:7e:62:62:a3:a9:20:2a: de:00:d2:a8:06:8c:d1:5a:e4:14:d8:e8:60:58:a5: 05:c6:91:29:ae:32:0c:b9:71:76:ac:d0:66:a4:34: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:F3:A3:95:0B:6E:4F:9B:2D:15:8B:19:C1:19:8C:A4:40:B5:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/555ffa38-f2d4-3382-ba97-baba02d39826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:2700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d2:69:41:d2:64:54:29:51:ef:2b:3b:33:7e:3a:a1:13:27: 0f:d4:a1:46:1a:7f:1c:12:f4:d5:84:d1:6c:cb:d3:cc:63:9b: 80:80:2f:c2:d0:f4:ff:98:89:d3:31:1a:54:c0:37:f3:5f:7c: 2d:31:df:e7:4c:4a:1d:69:ab:d8:f7:5b:e9:46:21:6b:05:76: 78:55:43:f8:45:aa:0e:1d:79:8e:16:d7:1a:7d:1c:94:e1:84: 80:83:e2:97:e5:c6:0c:cf:2a:1e:0c:79:1f:58:a3:7d:cf:6e: 42:e2:a0:af:17:95:45:0f:3e:c0:29:c4:2d:90:77:18:fe:1c: a3:02:2c:4c:ab:c3:5e:6f:e5:5e:68:eb:91:a9:e8:23:7b:56: 99:0a:8f:34:d3:33:f7:5c:8a:1d:ab:46:83:c5:42:09:e7:1a: 40:33:e6:d4:87:5a:c2:7c:9c:0e:7a:c8:97:37:ae:f3:bb:e5: 79:a2:d8:b8:61:d0:9d:7b:42:c2:5e:94:25:20:6d:d6:e6:74: 5d:28:18:05:5b:21:68:fe:3b:da:d8:b1:00:86:19:7c:38:19: 55:8b:c4:60:42:9e:9d:a8:48:9e:ad:1e:92:c9:0b:3f:b6:d7: 00:84:b1:e8:3f:98:7a:0b:fa:f5:d2:96:3d:72:3b:81:40:78: 76:a6:bb:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsCU6p7MbM0Q2i/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4NTAxN1oXDTI1MTExODE5NTAxN1owLzEtMCsGA1UEAxMk M2Q1ZDc4ZTctYjRkZC00NTg5LWFjNGEtNThmM2U5ZDZhNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTG1T7uSqnqJUUnWjLYX0s+TDjyEuzcVPaAc rVTe38ha1Lyb2d4HzgbKHOcnT50ZaspI4+ot4phfJrHs5BthqgcNo2bqCVeqsjCK qKRkP0C/pTCpUB6USsK/XdwjS0C6WDL9XtALrI+E8Wbyipka1u1evrs7MpY1Ytxz p2qoOugxFUyutI51b7R6k8RpvM3rl0udh7mrKLaMlOXvJNiUlmHGHQSny/WpH+WM VoN2CtCsza+9UsZN7LijiPKXJ8W3mLdheePxdSjU2KGFZyC1kxKs1TcUX51At35i YqOpICreANKoBozRWuQU2OhgWKUFxpEprjIMuXF2rNBmpDTjhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHpf86OVC25Pmy0VixnBGYykQLXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTU1ZmZhMzgtZjJkNC0z MzgyLWJhOTctYmFiYTAyZDM5ODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAACcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAD9JpQdJkVClR7ys7M346oRMnD9ShRhp/HBL01YTRbMvTzGObgIAv wtD0/5iJ0zEaVMA38198LTHf50xKHWmr2Pdb6UYhawV2eFVD+EWqDh15jhbXGn0c lOGEgIPil+XGDM8qHgx5H1ijfc9uQuKgrxeVRQ8+wCnELZB3GP4cowIsTKvDXm/l XmjrkanoI3tWmQqPNNMz91yKHatGg8VCCecaQDPm1IdawnycDnrIlzeu87vleaLY uGHQnXtCwl6UJSBt1uZ0XSgYBVshaP472tixAIYZfDgZVYvEYEKenahInq0ekskL P7bXAISx6D+Yegv69dKWPXI7gUB4dqa7Mw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:06 2025 by rpki-client