$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfb59c64-46d3-3ef8-9268-81757d9a133d.roa File: dfb59c64-46d3-3ef8-9268-81757d9a133d.roa (raw, json) Hash identifier: NbLKlZE+JxEzmFDvxWlQMMrGvzAnZ1NPrGHPZlBAxbQ= Subject key identifier: B5:BB:71:E1:24:11:23:8A:03:1B:10:D5:F4:E5:22:AA:99:5F:BC:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB658B1E0D19D22646DE6C10 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfb59c64-46d3-3ef8-9268-81757d9a133d.roa Signing time: Wed 20 Aug 2025 13:20:19 +0000 ROA not before: Wed 20 Aug 2025 13:20:19 +0000 ROA not after: Tue 18 Nov 2025 14:20:19 +0000 asID: 31898 IP address blocks: 2603:c025:4000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:65:8b:1e:0d:19:d2:26:46:de:6c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:20:19 2025 GMT Not After : Nov 18 14:20:19 2025 GMT Subject: CN=579aa449-9d97-4a56-bae0-1faba36c9788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bd:1d:6a:5d:d8:c6:f8:75:73:23:53:0c:8d: 64:61:7a:42:0e:0b:56:f7:4c:1f:ea:2c:6d:2a:53: e4:9d:fd:93:d7:46:08:69:73:bf:e4:11:46:5d:07: 47:15:49:61:7f:75:06:a3:08:20:c8:80:4a:d8:02: 5b:59:ba:25:39:93:34:19:b6:5a:ec:db:a3:a1:fa: b0:1f:b4:5d:3a:81:be:58:38:bd:54:ad:ec:d6:0b: 78:73:b5:52:26:fe:e9:ce:4d:0d:bd:98:a3:7b:a3: 51:43:c4:7b:35:8b:00:ac:3d:2f:9c:5c:5a:1a:79: 06:73:5c:fd:31:df:2d:fa:9d:c0:d7:01:c7:29:1f: 49:73:ff:51:28:13:5e:41:ff:d0:07:fa:e7:d7:3d: 19:5a:42:19:55:fd:55:f3:5a:37:33:e1:7d:73:9f: a4:b6:9a:74:49:e2:11:d5:6a:d7:44:c5:25:c5:2c: d8:f8:89:30:cf:45:ae:d7:ee:3c:7e:a6:89:86:bb: 8f:f1:57:da:95:49:c8:bd:2f:cd:3a:f6:f5:20:0f: 51:48:b2:bb:61:2c:71:1b:1c:d9:16:84:79:17:e9: ba:72:0f:d3:d4:5d:9a:ed:c6:c5:d4:e9:79:62:05: 20:7d:1e:e1:aa:5f:8e:3f:bd:45:97:3b:42:e4:6b: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BB:71:E1:24:11:23:8A:03:1B:10:D5:F4:E5:22:AA:99:5F:BC:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dfb59c64-46d3-3ef8-9268-81757d9a133d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c025:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ca:83:0c:51:24:5c:78:2c:f8:f0:a4:38:5a:a3:64:2d:37: eb:dc:1f:6a:f9:de:18:ab:79:88:f7:5f:2e:6f:d1:41:d4:87: df:23:b7:6f:46:c2:fe:cd:8b:7e:48:87:6b:72:bd:47:ab:f8: 45:77:dd:31:cc:bd:94:16:13:08:4e:5a:b2:42:b2:9f:ea:e2: b3:92:1e:14:8f:74:32:b0:3f:a2:42:b5:e4:f0:34:8c:f8:7f: 1a:40:9b:88:67:f3:25:9f:92:12:ce:ff:33:0b:96:b4:fe:6e: 60:a5:3b:34:6d:90:ec:93:a3:7b:72:15:c6:6a:a7:67:2c:d6: a5:dd:bb:84:5d:c6:00:3d:c5:62:f9:e7:39:ce:b7:39:a2:68: 51:dc:f5:05:bd:10:f2:d1:80:bb:c9:09:5a:14:97:b1:0f:ef: e2:3f:98:e9:96:0e:a8:13:df:97:50:80:dd:7b:ed:8a:8d:c1: af:1e:8d:44:17:24:30:11:4a:ee:4f:ce:3d:13:5a:f1:d6:3b: 3f:75:40:80:40:6b:9d:f2:ca:d7:e2:7e:8c:c2:ee:38:a8:66: 12:d6:b6:47:27:88:95:3f:ff:cc:21:e7:fc:dd:59:c4:ec:d5: ef:c5:65:d2:49:d3:7e:74:55:3a:56:8a:be:05:26:3c:3e:14: 3b:3f:99:2a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErrZYseDRnSJkbebBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMjAxOVoXDTI1MTExODE0MjAxOVowLzEtMCsGA1UEAxMk NTc5YWE0NDktOWQ5Ny00YTU2LWJhZTAtMWZhYmEzNmM5Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb0dal3Yxvh1cyNTDI1kYXpCDgtW90wf6ixt KlPknf2T10YIaXO/5BFGXQdHFUlhf3UGowggyIBK2AJbWbolOZM0GbZa7Nujofqw H7RdOoG+WDi9VK3s1gt4c7VSJv7pzk0NvZije6NRQ8R7NYsArD0vnFxaGnkGc1z9 Md8t+p3A1wHHKR9Jc/9RKBNeQf/QB/rn1z0ZWkIZVf1V81o3M+F9c5+ktpp0SeIR 1WrXRMUlxSzY+Ikwz0Wu1+48fqaJhruP8VfalUnIvS/NOvb1IA9RSLK7YSxxGxzZ FoR5F+m6cg/T1F2a7cbF1Ol5YgUgfR7hql+OP71FlztC5GvMuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLW7ceEkESOKAxsQ1fTlIqqZX7yBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGZiNTljNjQtNDZkMy0z ZWY4LTkyNjgtODE3NTdkOWExMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAJUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQMqDDFEkXHgs+PCkOFqjZC0369wfavneGKt5iPdfLm/RQdSH3yO3 b0bC/s2LfkiHa3K9R6v4RXfdMcy9lBYTCE5askKyn+ris5IeFI90MrA/okK15PA0 jPh/GkCbiGfzJZ+SEs7/MwuWtP5uYKU7NG2Q7JOje3IVxmqnZyzWpd27hF3GAD3F YvnnOc63OaJoUdz1Bb0Q8tGAu8kJWhSXsQ/v4j+Y6ZYOqBPfl1CA3Xvtio3Brx6N RBckMBFK7k/OPRNa8dY7P3VAgEBrnfLK1+J+jMLuOKhmEta2RyeIlT//zCHn/N1Z xOzV78Vl0knTfnRVOlaKvgUmPD4UOz+ZKg== -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:16 2025 by rpki-client