$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1cfd2a3-b455-3315-9b97-342138ce37a1.roa File: f1cfd2a3-b455-3315-9b97-342138ce37a1.roa (raw, json) Hash identifier: +RKu6zGwfbXBmNSlr5tw1B4iInnI9zjw/jOQH7y/h2I= Subject key identifier: 8A:F8:D5:41:40:BF:DD:4D:A7:D7:07:91:74:BA:F0:DF:4F:A1:B2:A6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB6571BBE72C64609F78EE40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1cfd2a3-b455-3315-9b97-342138ce37a1.roa Signing time: Wed 20 Aug 2025 13:20:07 +0000 ROA not before: Wed 20 Aug 2025 13:20:07 +0000 ROA not after: Tue 18 Nov 2025 14:20:07 +0000 asID: 31898 IP address blocks: 2603:c002:1500::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:65:71:bb:e7:2c:64:60:9f:78:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:20:07 2025 GMT Not After : Nov 18 14:20:07 2025 GMT Subject: CN=3a13ef48-1806-44d8-a573-6e012e3ee7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:d5:45:f9:b5:b8:a9:cd:32:19:01:97:12: 53:a2:56:44:17:22:93:bb:6b:d4:47:bc:a3:25:cb: 85:cd:41:61:ca:62:78:d6:1e:5c:94:82:eb:52:e7: bf:71:d1:57:ff:81:c2:1f:59:d8:bc:02:30:cf:74: d6:d5:76:36:2d:d5:9c:db:76:02:25:0d:8e:bc:48: 9a:0b:92:0b:bf:e9:90:bc:ec:26:34:74:d9:38:9c: 01:64:f2:d6:b4:40:a2:15:e3:70:45:d2:41:54:22: a8:a1:19:dd:94:25:af:f6:69:7d:41:ac:12:ff:54: 05:ac:6b:7c:98:0e:99:72:78:94:9a:83:9a:b8:b1: 4e:96:4c:25:b2:80:62:81:47:e7:42:77:2d:b3:a5: 70:c8:bb:cb:6f:b0:8f:40:c7:01:30:0a:ce:44:ce: e4:8c:8f:73:d6:78:31:53:d7:01:29:3b:0c:dc:8d: 79:f8:b4:b4:2b:9a:f0:00:5f:52:1d:ed:d9:b2:f3: 41:b0:c4:37:e2:85:b3:be:da:13:42:cf:3b:28:fa: 13:b0:64:1d:ad:22:a4:7a:02:17:6b:37:28:f2:d7: 33:34:af:e0:56:73:f2:38:a6:3b:a1:0f:a3:0a:7b: a2:32:85:90:54:92:39:8b:54:c8:87:af:7d:f9:d0: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F8:D5:41:40:BF:DD:4D:A7:D7:07:91:74:BA:F0:DF:4F:A1:B2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f1cfd2a3-b455-3315-9b97-342138ce37a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:1500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:af:35:69:22:b2:0f:fd:b7:08:54:4a:15:3e:8e:eb:2d:e2: 5e:51:42:28:2a:10:6b:86:65:2e:0d:fb:6d:ed:05:7a:ea:54: c2:35:af:23:1e:c7:54:ad:44:73:83:3f:2c:bf:49:69:f1:2a: 70:76:92:f5:90:4a:bd:e2:9d:6b:c9:6e:00:91:cb:90:4c:3d: ae:93:38:72:f1:ea:49:85:38:9e:37:d1:5c:a7:67:70:8e:61: 86:30:93:b1:a4:0c:89:aa:86:a3:4f:ce:aa:35:99:8d:1e:74: c1:de:8a:9c:05:c3:54:11:39:9f:54:33:f9:4f:99:d3:40:94: 24:e3:d1:73:3c:9c:0a:f6:f8:a0:cb:eb:46:48:9b:6e:d8:32: bc:c3:8f:88:69:8a:43:96:45:0a:6d:43:be:9c:87:25:ae:2c: 2d:c1:24:68:d2:52:4c:a5:e7:50:05:27:ac:35:73:68:85:d1: db:21:c7:8f:fd:19:21:dd:33:61:35:84:0b:1a:0a:40:4c:d3: 29:66:98:09:d4:8c:b5:cd:a3:10:e3:2e:8f:4b:95:55:e4:1c: e0:b2:ee:5d:21:d2:59:01:11:ae:81:aa:af:b3:9f:35:b4:c9: 06:b2:b8:c0:6b:1e:62:3b:46:41:bf:45:3f:9d:e2:6b:ef:49: 76:fc:04:1c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErrZXG75yxkYJ947kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMjAwN1oXDTI1MTExODE0MjAwN1owLzEtMCsGA1UEAxMk M2ExM2VmNDgtMTgwNi00NGQ4LWE1NzMtNmUwMTJlM2VlN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxbVRfm1uKnNMhkBlxJTolZEFyKTu2vUR7yj JcuFzUFhymJ41h5clILrUue/cdFX/4HCH1nYvAIwz3TW1XY2LdWc23YCJQ2OvEia C5ILv+mQvOwmNHTZOJwBZPLWtECiFeNwRdJBVCKooRndlCWv9ml9QawS/1QFrGt8 mA6ZcniUmoOauLFOlkwlsoBigUfnQncts6VwyLvLb7CPQMcBMArORM7kjI9z1ngx U9cBKTsM3I15+LS0K5rwAF9SHe3ZsvNBsMQ34oWzvtoTQs87KPoTsGQdrSKkegIX azco8tczNK/gVnPyOKY7oQ+jCnuiMoWQVJI5i1TIh699+dALewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIr41UFAv91Np9cHkXS68N9PobKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjFjZmQyYTMtYjQ1NS0z MzE1LTliOTctMzQyMTM4Y2UzN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAhUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOa81aSKyD/23CFRKFT6O6y3iXlFCKCoQa4ZlLg37be0FeupUwjWv Ix7HVK1Ec4M/LL9JafEqcHaS9ZBKveKda8luAJHLkEw9rpM4cvHqSYU4njfRXKdn cI5hhjCTsaQMiaqGo0/OqjWZjR50wd6KnAXDVBE5n1Qz+U+Z00CUJOPRczycCvb4 oMvrRkibbtgyvMOPiGmKQ5ZFCm1DvpyHJa4sLcEkaNJSTKXnUAUnrDVzaIXR2yHH j/0ZId0zYTWECxoKQEzTKWaYCdSMtc2jEOMuj0uVVeQc4LLuXSHSWQERroGqr7Of NbTJBrK4wGseYjtGQb9FP53ia+9JdvwEHA== -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:15 2025 by rpki-client