$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baebfd32-ad1e-3849-a7be-5366f3c760d1.roa File: baebfd32-ad1e-3849-a7be-5366f3c760d1.roa (raw, json) Hash identifier: 4silP0nrFVt7p7YZm80GXBirvOdTd6FM/bNMLFLopfg= Subject key identifier: 6B:E4:A2:6E:F0:B6:F0:B0:3B:81:1D:9D:DC:02:9A:76:53:63:13:B0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDFCF04905C253EC60617B70 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baebfd32-ad1e-3849-a7be-5366f3c760d1.roa Signing time: Thu 21 Aug 2025 11:36:59 +0000 ROA not before: Thu 21 Aug 2025 11:36:59 +0000 ROA not after: Wed 19 Nov 2025 12:36:59 +0000 asID: 31898 IP address blocks: 2603:c001:4a00::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:fc:f0:49:05:c2:53:ec:60:61:7b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 11:36:59 2025 GMT Not After : Nov 19 12:36:59 2025 GMT Subject: CN=3b97256d-74d1-4037-b18c-f02cd5da9645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b8:ec:f6:35:66:99:a7:73:f4:e5:7c:1c:2a: f4:39:ec:89:50:29:32:97:1b:38:01:63:a6:0d:84: 39:6a:00:ff:b8:9e:3d:cb:4c:4d:fe:bd:d3:06:05: 96:e0:e9:bc:d2:96:e7:7c:6e:8b:da:30:09:7d:56: b4:37:c3:ee:3a:59:19:95:65:57:5f:cc:2e:b5:81: fd:e6:8b:08:dc:91:a1:51:a5:be:ad:f2:73:13:41: 71:8b:10:8d:7b:49:05:de:de:4a:b8:15:9e:ae:36: be:28:33:ae:82:04:19:65:d2:ae:9a:ce:22:79:22: 4d:92:46:ed:8e:c1:02:50:cb:d1:c5:06:45:a4:c7: 2f:33:2f:a6:f9:62:19:3a:d1:f4:2a:f6:e5:12:33: 3b:87:0e:88:f0:7f:0f:a5:b4:8c:25:c4:3f:fd:9f: 89:4f:43:57:08:51:4f:f0:84:c9:11:89:06:f2:62: 09:d1:fa:cd:c9:3a:7e:ee:c2:e2:a7:fa:09:54:86: 9f:f9:96:1b:22:bb:7b:62:58:9d:f8:ec:69:df:13: 0d:e4:41:5b:27:8c:49:d7:3a:90:03:b2:a9:1f:46: 18:1d:be:a4:e0:81:70:b5:01:30:fc:a9:ca:c7:d2: f7:2d:46:fc:2a:7e:38:01:c2:c4:77:11:ef:f4:54: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E4:A2:6E:F0:B6:F0:B0:3B:81:1D:9D:DC:02:9A:76:53:63:13:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/baebfd32-ad1e-3849-a7be-5366f3c760d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c001:4a00::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7e:9d:43:84:a2:07:ea:bc:1b:3a:50:1d:01:9b:a7:a7:79: ec:20:70:9a:71:8f:0d:45:9d:a7:c6:74:d1:88:5e:21:44:b4: a5:9d:9c:04:aa:c9:df:35:ce:b0:3d:29:f7:a1:73:50:bf:b7: d2:1e:cb:17:7c:3a:86:6f:1b:2a:22:36:65:fc:f0:69:b8:3f: b8:9c:4d:41:41:48:14:60:b7:70:8d:ac:40:a3:80:af:f0:05: ac:4b:a6:2c:1c:20:af:1e:bb:02:cf:c7:cd:b8:88:f8:36:18: d2:0a:c1:64:31:cf:e3:46:e5:01:ce:ad:77:3e:cb:67:53:ff: 10:7b:91:a0:a2:2e:c1:5b:95:fd:e8:7e:68:ec:35:7f:e8:9b: 5c:f6:2f:ac:ea:67:c9:dd:58:68:a1:d2:a8:9f:17:6c:25:dc: a9:1f:d3:e9:63:b7:fd:33:64:49:49:d3:f6:82:cf:e7:eb:92: 1f:5a:cb:83:57:89:9b:88:18:a5:5f:76:06:42:ac:e4:e2:72: d6:d5:41:1e:49:24:98:89:84:56:0a:00:bf:21:ab:f6:b0:6c: 50:a9:4c:cb:b0:f1:3a:7d:fb:99:40:a0:67:3b:44:4a:8b:1e: 36:4e:7d:31:94:13:ca:c3:5b:69:46:43:85:09:40:68:da:7d: 26:da:ab:df -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErt/PBJBcJT7GBhe3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTExMzY1OVoXDTI1MTExOTEyMzY1OVowLzEtMCsGA1UEAxMk M2I5NzI1NmQtNzRkMS00MDM3LWIxOGMtZjAyY2Q1ZGE5NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLjs9jVmmadz9OV8HCr0OeyJUCkylxs4AWOm DYQ5agD/uJ49y0xN/r3TBgWW4Om80pbnfG6L2jAJfVa0N8PuOlkZlWVXX8wutYH9 5osI3JGhUaW+rfJzE0FxixCNe0kF3t5KuBWerja+KDOuggQZZdKums4ieSJNkkbt jsECUMvRxQZFpMcvMy+m+WIZOtH0KvblEjM7hw6I8H8PpbSMJcQ//Z+JT0NXCFFP 8ITJEYkG8mIJ0frNyTp+7sLip/oJVIaf+ZYbIrt7Ylid+Oxp3xMN5EFbJ4xJ1zqQ A7KpH0YYHb6k4IFwtQEw/KnKx9L3LUb8Kn44AcLEdxHv9FSF2wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGvkom7wtvCwO4EdndwCmnZTYxOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmFlYmZkMzItYWQxZS0z ODQ5LWE3YmUtNTM2NmYzYzc2MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAUow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlH6dQ4SiB+q8GzpQHQGbp6d57CBwmnGPDUWdp8Z00YheIUS0pZ2c BKrJ3zXOsD0p96FzUL+30h7LF3w6hm8bKiI2Zfzwabg/uJxNQUFIFGC3cI2sQKOA r/AFrEumLBwgrx67As/HzbiI+DYY0grBZDHP40blAc6tdz7LZ1P/EHuRoKIuwVuV /eh+aOw1f+ibXPYvrOpnyd1YaKHSqJ8XbCXcqR/T6WO3/TNkSUnT9oLP5+uSH1rL g1eJm4gYpV92BkKs5OJy1tVBHkkkmImEVgoAvyGr9rBsUKlMy7DxOn37mUCgZztE SoseNk59MZQTysNbaUZDhQlAaNp9Jtqr3w== -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:39 2025 by rpki-client