$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a60c765a-7f01-3363-af6b-4c4c2f468cef.roa File: a60c765a-7f01-3363-af6b-4c4c2f468cef.roa (raw, json) Hash identifier: /9kWb2davh2fPpa6yyZP0kXqZJPzgpyyVEgUoSZKvqQ= Subject key identifier: C3:0E:6D:6B:5D:6C:AE:FB:2C:DE:CC:70:68:45:FC:EB:82:61:A1:83 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC0956ACB6BAE0BC77E19E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a60c765a-7f01-3363-af6b-4c4c2f468cef.roa Signing time: Wed 20 Aug 2025 18:50:21 +0000 ROA not before: Wed 20 Aug 2025 18:50:21 +0000 ROA not after: Tue 18 Nov 2025 19:50:21 +0000 asID: 31898 IP address blocks: 2603:c002:a700::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:09:56:ac:b6:ba:e0:bc:77:e1:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:50:21 2025 GMT Not After : Nov 18 19:50:21 2025 GMT Subject: CN=e4a5bd06-2a7e-497e-a48c-fbec82ced80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:76:35:37:52:45:28:4f:7d:22:64:2e:b3: 2b:42:e4:b2:8f:6a:f6:82:26:2a:8d:dc:83:46:8d: 1d:d4:00:0c:ea:4a:4e:3a:59:e4:42:4b:c6:48:9a: 34:72:9a:f6:2f:53:94:c0:74:ae:99:c1:2b:41:ee: af:ca:b2:b6:e5:4b:f9:8b:3f:91:f1:83:1c:a9:37: 5d:f6:2a:06:e8:c3:b0:5a:22:73:02:49:58:87:6f: 44:14:43:ca:36:9b:ab:7f:d3:47:b8:39:99:62:e2: 8b:e1:d8:b3:16:31:33:28:da:5d:af:6a:3b:f0:f3: 66:d9:16:a2:9c:e6:f1:6d:e7:c4:f2:ef:f4:9c:fd: c7:e0:5b:db:84:e8:2b:17:90:d2:00:de:60:f9:c5: b0:f6:5c:61:54:48:93:46:4c:c6:65:13:83:ea:44: d3:f7:c7:ec:49:e0:18:84:e2:61:89:22:a0:56:23: 89:97:80:59:ea:16:6c:a4:39:51:9b:77:d8:2f:03: 0d:2a:73:f6:4f:14:9b:6f:93:6d:62:f8:8c:24:91: f2:b4:f7:4a:d2:46:61:67:ad:b9:1b:57:69:ff:d6: c7:35:bf:43:52:ae:6c:96:da:ee:af:81:e7:0a:3f: c3:2c:e8:e2:73:4f:0e:c2:c8:13:75:ca:10:b4:f6: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0E:6D:6B:5D:6C:AE:FB:2C:DE:CC:70:68:45:FC:EB:82:61:A1:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a60c765a-7f01-3363-af6b-4c4c2f468cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:a700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ce:73:25:62:4f:13:c1:9f:bc:0f:0d:46:a7:a4:04:0b:7a: ea:95:c1:f7:20:bd:d8:21:f4:dc:f6:85:ee:72:e9:86:39:b2: ea:ee:8b:95:87:e6:61:9a:02:23:2f:09:c8:96:f0:ba:31:14: 54:e1:dc:f0:47:18:13:b3:d1:c0:d4:72:21:e3:27:c7:b4:68: 51:02:4c:41:4d:2b:33:e1:f1:8d:97:de:4f:82:49:96:b1:52: 60:2e:b6:3d:d3:61:10:2e:bd:e7:4b:36:a2:f6:ca:55:7d:d0: 0a:cc:10:08:0f:9c:a8:a1:17:8e:ec:8c:f3:99:86:77:17:62: 70:f2:bd:74:d0:5e:07:36:48:8f:ce:b7:e9:40:a7:0d:4b:1c: 7f:1a:75:11:af:cc:b6:e7:96:6d:20:9f:3b:71:62:a5:13:6e: 84:2a:13:3c:24:9a:93:79:51:c9:00:03:0a:fe:51:59:24:d7: d4:af:39:66:2f:c2:41:18:ab:05:15:e0:5a:ce:60:c3:d8:a1: 60:04:14:5d:c4:de:d0:cc:cf:da:13:bc:a6:72:e1:0a:be:3e: 2c:b4:f3:f8:c9:18:bb:a5:c3:97:de:a8:a2:d5:c1:a8:46:9f: b3:55:83:59:9b:bf:9f:c9:03:ca:73:9b:c0:2c:2c:c5:99:e8: 9b:de:19:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsCVastrrgvHfhnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4NTAyMVoXDTI1MTExODE5NTAyMVowLzEtMCsGA1UEAxMk ZTRhNWJkMDYtMmE3ZS00OTdlLWE0OGMtZmJlYzgyY2VkODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn512NTdSRShPfSJkLrMrQuSyj2r2giYqjdyD Ro0d1AAM6kpOOlnkQkvGSJo0cpr2L1OUwHSumcErQe6vyrK25Uv5iz+R8YMcqTdd 9ioG6MOwWiJzAklYh29EFEPKNpurf9NHuDmZYuKL4dizFjEzKNpdr2o78PNm2Rai nObxbefE8u/0nP3H4FvbhOgrF5DSAN5g+cWw9lxhVEiTRkzGZROD6kTT98fsSeAY hOJhiSKgViOJl4BZ6hZspDlRm3fYLwMNKnP2TxSbb5NtYviMJJHytPdK0kZhZ625 G1dp/9bHNb9DUq5sltrur4HnCj/DLOjic08OwsgTdcoQtPYatwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMMObWtdbK77LN7McGhF/OuCYaGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTYwYzc2NWEtN2YwMS0z MzYzLWFmNmItNGM0YzJmNDY4Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAqcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXc5zJWJPE8GfvA8NRqekBAt66pXB9yC92CH03PaF7nLphjmy6u6L lYfmYZoCIy8JyJbwujEUVOHc8EcYE7PRwNRyIeMnx7RoUQJMQU0rM+HxjZfeT4JJ lrFSYC62PdNhEC6950s2ovbKVX3QCswQCA+cqKEXjuyM85mGdxdicPK9dNBeBzZI j8636UCnDUscfxp1Ea/MtueWbSCfO3FipRNuhCoTPCSak3lRyQADCv5RWSTX1K85 Zi/CQRirBRXgWs5gw9ihYAQUXcTe0MzP2hO8pnLhCr4+LLTz+MkYu6XDl96ootXB qEafs1WDWZu/n8kDynObwCwsxZnom94Z7Q== -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:01 2025 by rpki-client