$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e3259312-95eb-3e31-b8c6-1c6d6cfd2c0d.roa File: e3259312-95eb-3e31-b8c6-1c6d6cfd2c0d.roa (raw, json) Hash identifier: BHKe+k0y1IQolrgMnM2kQelet9kXRkckx9vm4kFcLLY= Subject key identifier: D7:C1:7E:96:CA:BF:19:69:E4:84:A2:60:25:00:8B:B1:4D:E1:08:B2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB441749C67E739FE2001320 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e3259312-95eb-3e31-b8c6-1c6d6cfd2c0d.roa Signing time: Wed 20 Aug 2025 12:12:55 +0000 ROA not before: Wed 20 Aug 2025 12:12:55 +0000 ROA not after: Tue 18 Nov 2025 13:12:55 +0000 asID: 31898 IP address blocks: 2603:c018:a000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:44:17:49:c6:7e:73:9f:e2:00:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 12:12:55 2025 GMT Not After : Nov 18 13:12:55 2025 GMT Subject: CN=5b4a01bd-3edf-465d-a026-7fb18a1fa42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:c2:16:1d:00:7a:f2:09:40:f1:a7:40:a1: 78:60:a3:6a:a9:fa:6c:4b:9b:7e:e4:bb:0e:ef:26: 87:0f:00:a3:f8:36:f1:2c:85:00:1f:ea:3e:38:b7: 54:dc:18:ad:dc:31:a6:83:e3:68:44:3b:58:5b:ea: 21:77:9b:21:25:a0:e0:96:c9:c2:85:80:15:75:e5: 19:b1:12:e3:db:70:51:07:85:1d:a5:de:b3:1e:ad: 54:f7:50:9b:5b:fb:8a:eb:53:78:9d:0b:ce:4e:44: 3f:78:1f:fb:66:20:69:54:93:b1:73:50:b5:01:8f: bf:91:68:a7:83:14:51:20:ac:67:20:ab:10:cd:26: 7a:86:a9:ab:09:a7:eb:3e:81:32:8c:f5:bc:2a:5b: 23:bb:6d:e9:16:61:ad:fe:ca:5a:a9:f9:c2:30:2e: 4b:59:c8:4b:03:19:f1:0c:55:18:aa:38:bc:03:4a: 97:f0:41:9e:a2:d6:ee:4c:67:22:28:bb:de:e8:4f: 38:87:65:f5:e0:ff:a0:58:8b:a2:e3:90:45:4a:f1: 98:a7:24:a2:a7:74:3d:e6:4d:c7:eb:17:77:bf:11: 79:4f:3a:7e:a5:01:c3:b5:c1:9f:df:02:6c:e7:be: 4a:ff:c5:fe:b2:ed:fc:96:28:be:d7:e4:37:c9:7d: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C1:7E:96:CA:BF:19:69:E4:84:A2:60:25:00:8B:B1:4D:E1:08:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e3259312-95eb-3e31-b8c6-1c6d6cfd2c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c018:a000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:23:b7:83:70:d4:43:40:6e:03:04:3e:de:2b:f8:6d:94:0c: 7b:cd:d0:45:57:8f:49:56:b4:5c:e1:b8:97:76:51:99:51:bd: 23:85:b8:b3:d2:06:0c:bd:a9:d6:5c:1f:19:ed:68:55:8e:8e: 90:73:18:e4:31:5f:5e:8f:4e:b2:0c:b0:92:b9:b6:a1:8f:cd: dd:67:35:a4:8f:79:63:3e:0d:b2:9b:15:88:01:a0:0b:a5:ab: 1f:9e:ed:ba:d1:7e:8d:6c:4f:36:e0:70:3e:8c:fd:06:e5:28: 4a:8e:b9:4c:b9:13:b9:d6:fc:e7:fc:e9:9f:1a:c8:c4:45:45: 7f:c3:76:0c:d1:ee:96:a0:b5:bd:ee:d7:a3:31:1e:9b:06:85: b1:34:f1:f9:7c:5f:f9:0e:ca:66:8e:db:52:ed:7e:64:97:d9: 09:68:92:85:26:ed:47:9d:8f:f8:de:5f:63:49:cf:2c:53:b3: 2e:69:6b:ef:ec:1e:cf:19:9b:07:54:b8:e8:f6:b2:5f:9b:a2: 09:de:74:36:0e:21:95:1d:aa:43:b7:cc:45:d7:a4:3f:f8:92: 0c:f0:7d:2f:57:af:9a:63:b3:1f:b3:75:af:8b:b0:eb:9f:62: 88:1f:fa:0f:a3:97:52:a5:4c:81:d1:e9:1b:d9:bc:d3:24:55: 37:8e:be:8c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErrRBdJxn5zn+IAEyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEyMTI1NVoXDTI1MTExODEzMTI1NVowLzEtMCsGA1UEAxMk NWI0YTAxYmQtM2VkZi00NjVkLWEwMjYtN2ZiMThhMWZhNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXDCFh0AevIJQPGnQKF4YKNqqfpsS5t+5LsO 7yaHDwCj+DbxLIUAH+o+OLdU3Bit3DGmg+NoRDtYW+ohd5shJaDglsnChYAVdeUZ sRLj23BRB4Udpd6zHq1U91CbW/uK61N4nQvOTkQ/eB/7ZiBpVJOxc1C1AY+/kWin gxRRIKxnIKsQzSZ6hqmrCafrPoEyjPW8Klsju23pFmGt/spaqfnCMC5LWchLAxnx DFUYqji8A0qX8EGeotbuTGciKLve6E84h2X14P+gWIui45BFSvGYpySip3Q95k3H 6xd3vxF5Tzp+pQHDtcGf3wJs575K/8X+su38lii+1+Q3yX2YSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNfBfpbKvxlp5ISiYCUAi7FN4QiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTMyNTkzMTItOTVlYi0z ZTMxLWI4YzYtMWM2ZDZjZmQyYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAGKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQCO3g3DUQ0BuAwQ+3iv4bZQMe83QRVePSVa0XOG4l3ZRmVG9I4W4 s9IGDL2p1lwfGe1oVY6OkHMY5DFfXo9Osgywkrm2oY/N3Wc1pI95Yz4NspsViAGg C6WrH57tutF+jWxPNuBwPoz9BuUoSo65TLkTudb85/zpnxrIxEVFf8N2DNHulqC1 ve7XozEemwaFsTTx+Xxf+Q7KZo7bUu1+ZJfZCWiShSbtR52P+N5fY0nPLFOzLmlr 7+wezxmbB1S46PayX5uiCd50Ng4hlR2qQ7fMRdekP/iSDPB9L1evmmOzH7N1r4uw 659iiB/6D6OXUqVMgdHpG9m80yRVN46+jA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:14 2025 by rpki-client