$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b08e581-4bda-3bd0-8a3c-1303cb878f3b.roa File: 3b08e581-4bda-3bd0-8a3c-1303cb878f3b.roa (raw, json) Hash identifier: pkLoqi/60kxhnMWrrj0GpViCU31GRlsgAM7Ey937tYk= Subject key identifier: 3E:5F:B3:21:EB:C0:B5:53:1B:54:5A:1D:A5:94:0D:3D:EB:BC:00:2B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B37DC9574A60B6575FBA95040 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b08e581-4bda-3bd0-8a3c-1303cb878f3b.roa Signing time: Tue 16 Sep 2025 22:41:36 +0000 ROA not before: Tue 16 Sep 2025 22:41:36 +0000 ROA not after: Mon 15 Dec 2025 23:41:36 +0000 asID: 54253 IP address blocks: 2603:c0e0:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:dc:95:74:a6:0b:65:75:fb:a9:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 16 22:41:36 2025 GMT Not After : Dec 15 23:41:36 2025 GMT Subject: CN=4b237ad8-4dec-4812-b423-41c7f0d56291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:00:92:85:c6:47:c7:24:9c:05:16:4e:da: a1:ac:a2:71:28:6a:d3:b0:47:fb:ba:02:2d:86:77: 86:d9:36:9a:4d:24:3b:4e:bb:11:9c:4a:e8:6b:51: e2:83:be:e2:69:68:68:64:9f:89:ea:88:0e:ab:e2: 2e:a9:fb:81:ca:24:e4:ed:55:f7:20:c4:58:7d:5e: ed:0f:0e:45:a5:b0:e4:89:0e:e3:71:63:46:ef:2d: ca:60:d6:ac:1d:39:81:0c:bf:67:26:13:77:63:c5: 9e:96:e7:1c:33:c9:9b:b0:c8:ab:9b:4e:ef:e6:e2: 37:1d:dd:c5:d9:34:1e:84:57:0b:3d:94:53:09:a6: 52:f0:cd:00:b6:28:29:c2:a7:66:88:64:c9:64:e5: 95:4d:23:c7:57:4e:0b:e6:85:9f:3f:e1:a6:b3:19: 32:9f:26:38:30:6a:2b:ca:4d:66:b8:2d:6f:cf:6d: 88:04:b7:e0:c3:46:ac:5b:1b:5f:af:ea:cd:7d:d5: b2:26:b5:28:cd:cd:64:de:b1:dd:60:a6:ae:9b:05: 7c:e6:f1:3e:ff:ba:7b:26:5b:4a:50:28:6d:15:92: ae:01:5b:f7:55:e3:b7:17:0d:7e:b1:87:24:b8:e9: 6e:2f:df:59:5b:07:5c:78:14:6c:35:e7:36:7a:d4: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5F:B3:21:EB:C0:B5:53:1B:54:5A:1D:A5:94:0D:3D:EB:BC:00:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b08e581-4bda-3bd0-8a3c-1303cb878f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0e0:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:93:34:9a:e6:ab:c3:93:ea:99:15:85:1c:a9:a1:66:48:18: b6:96:7b:15:34:22:b1:ec:a8:9e:92:0f:5f:19:48:3b:6c:f3: 8b:68:4b:e9:87:45:10:d6:29:46:a4:58:a7:b6:19:fa:77:23: fb:ef:1c:0d:5d:91:87:6e:00:99:13:ae:92:bf:83:7b:88:5a: 0f:2c:f5:61:07:c0:4e:1d:96:23:6b:9f:79:9d:18:41:99:9b: f9:a0:32:28:60:8c:07:09:05:3f:10:bd:ac:90:1e:25:90:af: 41:5e:91:a0:78:f0:2c:34:bf:8f:e9:53:23:e0:37:4d:d0:5a: 55:bb:5a:a2:f7:c5:53:02:b3:92:d0:20:a5:7c:70:e1:f1:8e: 25:fd:f1:c2:1f:5d:89:26:32:ea:ce:42:09:63:e0:16:3f:09: 61:f1:d8:cb:95:e8:a6:ea:a7:d5:06:0d:84:da:25:07:c1:d9: c5:e7:eb:0b:a8:b3:07:bd:24:b9:92:d3:00:b3:05:b7:55:ab: d3:c6:86:e1:aa:e6:27:fd:5a:cc:84:34:17:a5:d3:f1:0f:65: 57:fb:cc:fd:e8:76:cf:83:af:ad:5f:2b:73:9a:28:fe:f8:d3: a9:bf:44:28:56:d2:02:1c:67:16:40:65:44:93:e1:74:d3:4f: 63:f8:a0:fc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs33JV0pgtldfupUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxNjIyNDEzNloXDTI1MTIxNTIzNDEzNlowLzEtMCsGA1UEAxMk NGIyMzdhZDgtNGRlYy00ODEyLWI0MjMtNDFjN2YwZDU2MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0oAkoXGR8cknAUWTtqhrKJxKGrTsEf7ugIt hneG2TaaTSQ7TrsRnEroa1Hig77iaWhoZJ+J6ogOq+IuqfuByiTk7VX3IMRYfV7t Dw5FpbDkiQ7jcWNG7y3KYNasHTmBDL9nJhN3Y8WeluccM8mbsMirm07v5uI3Hd3F 2TQehFcLPZRTCaZS8M0AtigpwqdmiGTJZOWVTSPHV04L5oWfP+GmsxkynyY4MGor yk1muC1vz22IBLfgw0asWxtfr+rNfdWyJrUozc1k3rHdYKaumwV85vE+/7p7JltK UChtFZKuAVv3VeO3Fw1+sYckuOluL99ZWwdceBRsNec2etQvlQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD5fsyHrwLVTG1RaHaWUDT3rvAArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2IwOGU1ODEtNGJkYS0z YmQwLThhM2MtMTMwM2NiODc4ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA4CAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGZM0muarw5PqmRWFHKmhZkgYtpZ7FTQiseyonpIPXxlIO2zzi2hL 6YdFENYpRqRYp7YZ+ncj++8cDV2Rh24AmROukr+De4haDyz1YQfATh2WI2ufeZ0Y QZmb+aAyKGCMBwkFPxC9rJAeJZCvQV6RoHjwLDS/j+lTI+A3TdBaVbtaovfFUwKz ktAgpXxw4fGOJf3xwh9diSYy6s5CCWPgFj8JYfHYy5Xopuqn1QYNhNolB8HZxefr C6izB70kuZLTALMFt1Wr08aG4armJ/1azIQ0F6XT8Q9lV/vM/eh2z4OvrV8rc5oo /vjTqb9EKFbSAhxnFkBlRJPhdNNPY/ig/A== -----END CERTIFICATE-----Generated at Tue Nov 4 22:54:22 2025 by rpki-client