$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/146e17d2-e308-3b80-998a-8d73f55ba8c0.roa File: 146e17d2-e308-3b80-998a-8d73f55ba8c0.roa (raw, json) Hash identifier: xY2kUSZMTPSB/17GHeQ53kOmJZhiPY5HyNyrAr9G5YI= Subject key identifier: E0:17:1F:54:C5:29:06:F0:98:3C:26:67:79:28:97:89:56:FE:DA:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B34C7565AB709D1B8CE7C7780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/146e17d2-e308-3b80-998a-8d73f55ba8c0.roa Signing time: Mon 15 Sep 2025 20:11:22 +0000 ROA not before: Mon 15 Sep 2025 20:11:22 +0000 ROA not after: Sun 14 Dec 2025 21:11:22 +0000 asID: 54253 IP address blocks: 2603:c0d4:2100::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:c7:56:5a:b7:09:d1:b8:ce:7c:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 15 20:11:22 2025 GMT Not After : Dec 14 21:11:22 2025 GMT Subject: CN=4ee9251a-6821-4413-af8c-9eb1f90ca304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:36:e2:85:e5:99:8b:9d:22:71:67:f2:c1: 3b:ce:51:dc:0c:d6:2d:8e:df:64:a9:36:df:78:2b: 9e:2a:0b:1f:f8:d9:d3:7e:cd:9c:00:ea:de:31:a7: 9d:4e:2d:ca:6a:ba:62:7d:38:25:12:67:4b:72:63: 97:02:a3:a0:62:50:b8:f1:70:d6:82:57:67:1e:98: c2:6b:0e:b0:54:ef:be:de:2a:6e:bc:b2:35:b6:1b: 7e:89:21:54:66:cc:59:9d:17:c6:b3:09:e4:d0:32: 0f:3e:6b:1e:ec:1d:89:76:81:a6:57:10:ab:38:b9: ab:36:d2:53:12:28:48:aa:92:d2:f8:bd:37:e7:21: 91:fa:d5:60:09:91:b9:ce:07:7c:6c:21:83:a8:c9: fc:41:ac:89:f2:a0:af:a1:38:00:00:b7:27:83:0c: de:ab:cc:b7:2f:1e:da:a7:e1:fe:53:6b:32:01:b1: 00:73:bc:4d:f4:03:07:3c:16:ca:35:69:ee:d9:17: a9:a5:00:c1:01:2e:61:b4:c0:38:0e:29:a7:9f:26: bb:01:3f:60:cf:50:99:86:22:54:8d:17:ae:2f:be: e0:5e:f9:29:60:65:ff:ce:97:c9:d3:ac:16:c2:ae: c0:35:8c:c5:24:6e:ea:73:dd:d2:c4:0a:d6:e2:3d: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:17:1F:54:C5:29:06:F0:98:3C:26:67:79:28:97:89:56:FE:DA:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/146e17d2-e308-3b80-998a-8d73f55ba8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0d4:2100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:47:0e:37:2b:ef:3b:a0:c1:7d:51:19:c0:1d:68:22:f3:33: 3b:2d:2d:34:e9:31:d2:2e:f4:01:6d:18:d9:b0:a5:c8:c2:28: 79:c5:d6:5e:ef:48:55:13:a2:1f:58:a6:8e:bd:24:43:9d:34: 89:fa:16:42:ba:f4:0b:26:e4:e2:47:44:81:4a:98:fb:8f:0d: 93:ba:37:ad:7a:ae:b8:d7:0c:59:94:d5:ad:e0:d4:55:2f:eb: eb:60:46:c5:0f:8e:39:59:99:49:bd:80:b9:73:3b:82:95:84: 6c:c2:91:ca:dc:66:ec:7b:4e:e9:e5:2f:ed:ba:7f:71:50:89: 53:3c:2c:e2:8f:9b:d6:b0:64:6c:5d:93:e8:a7:6b:46:7b:8e: 78:cc:76:60:21:fa:db:e1:57:0a:74:c2:40:14:15:ba:a9:5a: aa:21:65:58:f4:dc:95:af:a6:70:a4:ea:9e:34:47:0b:fb:ad: 84:45:15:91:90:e5:b9:ca:38:96:94:43:76:d6:76:a1:77:a7: a3:81:17:28:71:af:79:8c:ca:9f:6d:f8:e3:6d:8c:9a:aa:a9: 9d:5b:6c:2a:de:f9:2c:25:12:9e:9b:ae:54:b4:99:6c:be:72: 87:28:2a:08:82:a5:43:8a:71:f0:2e:ba:41:02:60:12:a7:ca: 43:97:7f:8a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs0x1ZatwnRuM58d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNTIwMTEyMloXDTI1MTIxNDIxMTEyMlowLzEtMCsGA1UEAxMk NGVlOTI1MWEtNjgyMS00NDEzLWFmOGMtOWViMWY5MGNhMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYw24oXlmYudInFn8sE7zlHcDNYtjt9kqTbf eCueKgsf+NnTfs2cAOreMaedTi3KarpifTglEmdLcmOXAqOgYlC48XDWgldnHpjC aw6wVO++3ipuvLI1tht+iSFUZsxZnRfGswnk0DIPPmse7B2JdoGmVxCrOLmrNtJT EihIqpLS+L035yGR+tVgCZG5zgd8bCGDqMn8QayJ8qCvoTgAALcngwzeq8y3Lx7a p+H+U2syAbEAc7xN9AMHPBbKNWnu2ReppQDBAS5htMA4Dimnnya7AT9gz1CZhiJU jReuL77gXvkpYGX/zpfJ06wWwq7ANYzFJG7qc93SxArW4j2hAwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOAXH1TFKQbwmDwmZ3kol4lW/tqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTQ2ZTE3ZDItZTMwOC0z YjgwLTk5OGEtOGQ3M2Y1NWJhOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA1CEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmkcONyvvO6DBfVEZwB1oIvMzOy0tNOkx0i70AW0Y2bClyMIoecXW Xu9IVROiH1imjr0kQ500ifoWQrr0Cybk4kdEgUqY+48Nk7o3rXquuNcMWZTVreDU VS/r62BGxQ+OOVmZSb2AuXM7gpWEbMKRytxm7HtO6eUv7bp/cVCJUzws4o+b1rBk bF2T6KdrRnuOeMx2YCH62+FXCnTCQBQVuqlaqiFlWPTcla+mcKTqnjRHC/uthEUV kZDluco4lpRDdtZ2oXeno4EXKHGveYzKn234422MmqqpnVtsKt75LCUSnpuuVLSZ bL5yhygqCIKlQ4px8C66QQJgEqfKQ5d/ig== -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:54 2025 by rpki-client