$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8eb8cd1-3093-30a4-93ba-ae29ef794471.roa File: d8eb8cd1-3093-30a4-93ba-ae29ef794471.roa (raw, json) Hash identifier: aaSpREcG44k0c+LPnmddhf7sG9OCx50DhsEi+OnGSKo= Subject key identifier: 4C:38:E4:92:80:F0:77:C3:B2:0F:94:AB:38:43:30:C3:71:CA:53:A6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0EF0BC48CD3AF25C1FC7280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8eb8cd1-3093-30a4-93ba-ae29ef794471.roa Signing time: Fri 22 Aug 2025 12:56:25 +0000 ROA not before: Fri 22 Aug 2025 12:56:25 +0000 ROA not after: Thu 20 Nov 2025 13:56:25 +0000 asID: 31898 IP address blocks: 2603:c001:1a00::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:ef:0b:c4:8c:d3:af:25:c1:fc:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 12:56:25 2025 GMT Not After : Nov 20 13:56:25 2025 GMT Subject: CN=4b5787e9-b5ff-4656-9ee5-63ec03f6c1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:35:ae:25:3a:7e:a8:0f:18:69:39:86:c6: e5:18:db:8a:00:f3:58:39:19:83:f7:33:b5:6c:7b: c6:14:95:14:ee:8f:9c:76:84:88:7c:1d:19:6e:5a: 41:91:09:59:c8:dd:8b:c1:e2:8e:cb:fe:2a:3e:52: 20:de:8b:92:0d:4d:6e:3f:32:9e:04:54:e9:bc:a3: 10:5d:8c:e6:64:eb:b2:64:c3:a1:57:d4:73:2b:59: 2f:a2:97:50:35:05:a1:0d:e0:26:5b:97:4e:f0:35: 53:7c:32:13:6a:13:f6:1a:eb:4a:91:84:6c:a3:ce: d5:80:5a:0f:1e:6f:c0:cf:bf:7e:04:c7:c2:06:3e: 26:4b:ee:2f:2e:cd:ec:22:1e:2c:7e:23:b6:51:0c: d2:a2:1b:90:e8:93:f8:ea:5d:2c:16:19:0f:52:72: 2c:3a:78:9b:0e:87:8c:2d:77:02:c7:7f:ce:be:4f: 8d:bf:d8:5e:82:55:10:31:22:0a:8b:55:df:b8:24: fb:50:24:06:5b:60:1d:d6:14:45:fa:6a:e7:a2:40: 9f:81:4d:f4:ca:0e:e0:6d:df:98:aa:44:b7:ef:65: 36:f4:df:0e:5e:68:17:4b:cd:ae:d6:bf:3c:75:0f: c0:37:37:10:e4:80:1c:3b:03:7f:8c:15:ef:b2:7a: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:38:E4:92:80:F0:77:C3:B2:0F:94:AB:38:43:30:C3:71:CA:53:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8eb8cd1-3093-30a4-93ba-ae29ef794471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c001:1a00::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:9a:09:b2:e1:86:70:ee:f8:5d:7d:65:71:01:b2:fc:76:20: 98:28:cf:97:c5:e7:78:05:08:49:f4:78:80:64:ed:93:8d:1e: 49:2d:03:e9:e2:a2:b0:4c:cc:f1:ca:2f:18:62:b1:e4:ba:41: 49:f8:61:b8:38:dd:4e:f2:c9:cf:71:13:d7:5e:8a:78:2b:6f: 0d:f4:8b:b0:c1:f4:ad:1f:0e:81:a1:1b:98:43:cb:23:04:9e: c8:fb:ba:36:af:cb:6e:5d:31:76:f6:d3:23:cd:9d:ce:cf:ed: ae:ca:d5:98:8d:43:a4:6d:2b:b9:4d:7d:33:65:64:ff:25:75: 4a:b8:74:c7:f5:5a:99:12:55:3e:ee:71:7c:bf:71:0e:34:ea: b0:35:5d:c7:fd:85:a5:a7:13:f7:e4:c7:16:c4:7a:d9:21:4d: 0c:37:2c:26:8b:8e:fa:15:63:23:43:84:4c:b7:a1:47:ab:f9: 30:55:6b:36:42:52:e6:ff:5e:b1:30:57:0d:ba:a8:1d:50:8f: a2:22:45:74:72:67:4f:73:e1:3a:16:1b:39:6a:66:4d:65:4a: e6:1b:d7:f4:d8:ae:f1:fe:0c:09:f9:53:50:c5:38:e5:3b:1d: a4:6c:63:6c:35:92:ae:2b:9e:29:b5:88:db:39:b0:3b:01:e7: e3:91:8b:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErw7wvEjNOvJcH8coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjEyNTYyNVoXDTI1MTEyMDEzNTYyNVowLzEtMCsGA1UEAxMk NGI1Nzg3ZTktYjVmZi00NjU2LTllZTUtNjNlYzAzZjZjMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9A1riU6fqgPGGk5hsblGNuKAPNYORmD9zO1 bHvGFJUU7o+cdoSIfB0ZblpBkQlZyN2LweKOy/4qPlIg3ouSDU1uPzKeBFTpvKMQ XYzmZOuyZMOhV9RzK1kvopdQNQWhDeAmW5dO8DVTfDITahP2GutKkYRso87VgFoP Hm/Az79+BMfCBj4mS+4vLs3sIh4sfiO2UQzSohuQ6JP46l0sFhkPUnIsOnibDoeM LXcCx3/Ovk+Nv9heglUQMSIKi1XfuCT7UCQGW2Ad1hRF+mrnokCfgU30yg7gbd+Y qkS372U29N8OXmgXS82u1r88dQ/ANzcQ5IAcOwN/jBXvsnqutwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEw45JKA8HfDsg+UqzhDMMNxylOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDhlYjhjZDEtMzA5My0z MGE0LTkzYmEtYWUyOWVmNzk0NDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAARow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqJoJsuGGcO74XX1lcQGy/HYgmCjPl8XneAUISfR4gGTtk40eSS0D 6eKisEzM8covGGKx5LpBSfhhuDjdTvLJz3ET116KeCtvDfSLsMH0rR8OgaEbmEPL IwSeyPu6Nq/Lbl0xdvbTI82dzs/trsrVmI1DpG0ruU19M2Vk/yV1Srh0x/VamRJV Pu5xfL9xDjTqsDVdx/2FpacT9+THFsR62SFNDDcsJouO+hVjI0OETLehR6v5MFVr NkJS5v9esTBXDbqoHVCPoiJFdHJnT3PhOhYbOWpmTWVK5hvX9Niu8f4MCflTUMU4 5TsdpGxjbDWSriueKbWI2zmwOwHn45GLFQ== -----END CERTIFICATE-----Generated at Sat Aug 23 15:49:54 2025 by rpki-client