$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ba2b349-176e-3857-8292-a1d88ec42b6e.roa File: 0ba2b349-176e-3857-8292-a1d88ec42b6e.roa (raw, json) Hash identifier: BKW5FPpJtoIHowouZqEkG2vorRF8y28FiKi1qGT7yFQ= Subject key identifier: AA:93:B4:01:D3:C5:BA:91:07:AE:0B:C3:EA:E0:A2:24:F5:BE:B2:2D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAE1AF714E54DA01F237540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ba2b349-176e-3857-8292-a1d88ec42b6e.roa Signing time: Thu 21 Aug 2025 17:33:57 +0000 ROA not before: Thu 21 Aug 2025 17:33:57 +0000 ROA not after: Wed 19 Nov 2025 18:33:57 +0000 asID: 31898 IP address blocks: 2603:c000:200::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ae:1a:f7:14:e5:4d:a0:1f:23:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:33:57 2025 GMT Not After : Nov 19 18:33:57 2025 GMT Subject: CN=0e279d1c-784f-4506-9590-4667d90e7481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:6e:bc:d9:71:61:55:fc:70:49:ec:ef:8a: 9b:fd:95:cf:d0:9c:01:a4:22:21:e3:e9:f4:26:57: e3:f6:54:43:af:dc:d5:39:8e:75:32:ea:a1:b9:b0: e5:8a:7d:97:f2:1e:05:73:d7:eb:b0:44:0a:af:35: b7:93:bf:02:13:ad:4d:36:b0:f7:37:75:77:fe:1d: de:cc:60:2a:6f:f0:f2:57:30:19:5c:14:1a:11:7e: 66:e1:a3:55:38:7e:f7:78:bb:8a:64:fa:63:54:a7: 02:bf:0b:52:28:d1:81:f2:d7:e5:0b:40:c9:c5:55: c8:b8:42:e2:c8:38:cc:39:0f:e9:c5:80:b8:f9:66: a7:8d:12:15:76:d7:ed:76:64:f2:28:08:d8:3e:39: 2f:20:9d:9b:ac:cf:46:ca:48:03:48:67:c7:51:c8: 2a:01:1b:86:e2:d1:38:e1:d5:1b:ab:86:95:80:09: e0:1b:41:c3:b3:8d:1e:18:a2:df:67:45:b3:62:7f: 2e:bb:7c:d0:dd:42:71:5b:a6:da:b4:7c:20:68:7a: d8:df:5a:be:2d:32:4f:ec:6b:d8:bc:50:c7:bb:95: e3:e5:6a:69:cc:fb:16:45:97:6f:7d:f5:1c:11:ab: 51:90:63:38:90:21:76:fc:89:6b:7f:05:78:80:a7: 6f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:93:B4:01:D3:C5:BA:91:07:AE:0B:C3:EA:E0:A2:24:F5:BE:B2:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ba2b349-176e-3857-8292-a1d88ec42b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f4:a6:d7:f0:c0:95:9e:75:48:3d:da:9d:42:42:16:52:f0: 3c:47:d0:8d:78:ac:97:75:e7:f7:3a:0e:a3:dd:7c:d9:40:32: 90:a5:46:93:92:e6:11:30:b2:db:96:86:f6:08:36:47:1f:43: d3:39:0f:97:dd:8f:46:b4:1c:dc:cb:15:4a:40:4e:88:13:f0: bf:e9:ec:3b:5e:8d:75:4e:cd:03:f2:8a:a1:57:96:52:df:e2: 5d:de:d7:a4:29:bc:24:d9:7f:69:9b:5d:a5:a4:82:40:f0:b9: 6d:b0:c4:28:fc:4f:9f:64:59:a8:bd:27:26:22:b5:01:14:28: 6c:29:c8:80:4a:a4:7c:3f:55:44:07:e5:68:05:b6:6e:d8:35: de:73:8c:31:d3:a7:d1:2e:f2:d5:95:43:50:ba:36:c8:8a:3e: da:eb:b8:84:9f:52:e6:ff:95:97:51:7c:cf:71:0d:6d:49:bb: ef:4e:35:65:f5:66:b5:bf:9f:fc:8e:36:64:f3:fd:3a:23:37: b5:23:66:8d:55:1a:0c:1a:fa:99:47:d7:cf:43:8d:ab:f8:30: f9:3a:1d:ae:a4:94:a3:0c:9a:17:05:b3:bb:4a:01:17:e8:12: b6:13:0b:60:a9:cf:23:d4:ef:6a:99:35:3b:fb:ca:84:cf:e3: 9a:be:61:0a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErurhr3FOVNoB8jdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzM1N1oXDTI1MTExOTE4MzM1N1owLzEtMCsGA1UEAxMk MGUyNzlkMWMtNzg0Zi00NTA2LTk1OTAtNDY2N2Q5MGU3NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zBuvNlxYVX8cEns74qb/ZXP0JwBpCIh4+n0 Jlfj9lRDr9zVOY51MuqhubDlin2X8h4Fc9frsEQKrzW3k78CE61NNrD3N3V3/h3e zGAqb/DyVzAZXBQaEX5m4aNVOH73eLuKZPpjVKcCvwtSKNGB8tflC0DJxVXIuELi yDjMOQ/pxYC4+WanjRIVdtftdmTyKAjYPjkvIJ2brM9GykgDSGfHUcgqARuG4tE4 4dUbq4aVgAngG0HDs40eGKLfZ0WzYn8uu3zQ3UJxW6batHwgaHrY31q+LTJP7GvY vFDHu5Xj5WppzPsWRZdvffUcEatRkGM4kCF2/IlrfwV4gKdvkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKqTtAHTxbqRB64Lw+rgoiT1vrItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGJhMmIzNDktMTc2ZS0z ODU3LTgyOTItYTFkODhlYzQyYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEfSm1/DAlZ51SD3anUJCFlLwPEfQjXisl3Xn9zoOo9182UAykKVG k5LmETCy25aG9gg2Rx9D0zkPl92PRrQc3MsVSkBOiBPwv+nsO16NdU7NA/KKoVeW Ut/iXd7XpCm8JNl/aZtdpaSCQPC5bbDEKPxPn2RZqL0nJiK1ARQobCnIgEqkfD9V RAflaAW2btg13nOMMdOn0S7y1ZVDULo2yIo+2uu4hJ9S5v+Vl1F8z3ENbUm77041 ZfVmtb+f/I42ZPP9OiM3tSNmjVUaDBr6mUfXz0ONq/gw+TodrqSUowyaFwWzu0oB F+gSthMLYKnPI9Tvapk1O/vKhM/jmr5hCg== -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:13 2025 by rpki-client