$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cfbe63c-36cc-37cd-9746-bb78c54f49f9.roa File: 3cfbe63c-36cc-37cd-9746-bb78c54f49f9.roa (raw, json) Hash identifier: VxGQXSHYoUsM8CcMqqueKpw8JfCL527LX2m8ECwBZsw= Subject key identifier: C3:DD:F1:9F:A0:09:F6:CC:11:79:73:0F:D7:EC:E0:29:F1:2A:EE:DE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDFCE8463FF2CF9A47C5FCE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cfbe63c-36cc-37cd-9746-bb78c54f49f9.roa Signing time: Thu 21 Aug 2025 11:36:55 +0000 ROA not before: Thu 21 Aug 2025 11:36:55 +0000 ROA not after: Wed 19 Nov 2025 12:36:55 +0000 asID: 31898 IP address blocks: 2603:c000:2500::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:fc:e8:46:3f:f2:cf:9a:47:c5:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 11:36:55 2025 GMT Not After : Nov 19 12:36:55 2025 GMT Subject: CN=99db10fa-982f-499c-a875-0248122c672e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:d5:d7:25:72:8d:e1:36:2d:03:23:20:be: 97:8f:d8:f4:93:6f:c5:c3:06:cd:da:f8:b8:7a:a8: e4:df:46:4a:23:ac:a4:74:2a:f8:11:ab:da:8f:9a: 2a:26:bb:7e:6d:76:8e:ad:5d:e0:b1:23:ea:74:4e: dc:28:71:ea:de:af:18:46:76:32:1f:fd:27:a0:a3: e2:32:07:ce:57:bd:9e:db:fc:c7:4b:74:51:6e:b3: f8:09:e7:b0:20:f2:a6:0a:8a:12:3f:6e:c3:64:1a: ab:a9:f3:aa:24:a8:aa:28:78:cf:e5:30:86:3c:5d: d2:d6:60:97:70:61:86:75:39:e5:24:5b:01:c1:21: 8c:d4:ef:06:0b:11:aa:bd:af:42:63:7e:2d:0e:a4: fe:63:dc:47:69:cb:0d:60:a8:97:6a:56:04:77:56: 26:ff:ba:db:72:75:c3:e1:c6:9d:ce:3d:e7:9f:b4: 62:dc:a9:e2:cc:0f:13:ae:1f:2f:df:3e:3b:87:c6: 67:6d:a3:3d:d0:16:4c:a1:07:2c:38:b4:b9:d4:02: ad:c7:3c:47:95:7b:7c:98:8f:86:23:2b:b1:78:67: 52:61:29:8f:e0:c0:91:3e:1a:b4:51:b9:c7:81:08: 23:18:bb:9f:84:7b:61:3b:88:b4:60:b5:88:5d:5b: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DD:F1:9F:A0:09:F6:CC:11:79:73:0F:D7:EC:E0:29:F1:2A:EE:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cfbe63c-36cc-37cd-9746-bb78c54f49f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:2500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:63:74:9d:e5:65:76:99:29:d7:f6:63:9f:74:3b:0a:6c:7b: e4:9f:37:77:c6:3b:76:a1:c0:97:66:bc:45:2d:47:98:0a:97: 0a:b1:59:82:36:cf:f2:0d:65:9e:82:00:28:7e:a2:27:fa:c2: 80:46:14:60:1c:bd:20:52:f3:38:23:fc:57:72:91:d6:59:e2: 94:ad:51:e1:eb:c3:d9:7e:ec:19:fa:06:2a:15:d5:ca:c6:9b: 49:d8:4b:64:87:85:a2:d6:4b:3f:a3:4d:c2:da:2f:69:0f:7a: 75:bb:3b:cb:01:ce:22:67:8e:4d:c0:86:14:ff:f1:31:71:64: e7:bc:f7:e5:af:66:8d:b4:45:b4:c7:c2:86:91:14:43:3e:dd: 76:d5:07:fe:55:b8:8b:01:6f:f4:cd:e9:8d:e5:10:3d:a0:e1: 3d:ad:40:00:11:b8:44:15:54:0a:ed:7f:9c:cb:77:95:16:67: 01:1c:fd:dd:83:05:20:d1:22:b3:41:46:8c:2b:96:60:fa:c5: a0:2f:ee:d4:51:ff:e0:a2:68:d9:84:d6:74:e2:8a:26:f2:0c: 8b:42:41:2c:b3:9e:00:79:bc:07:8f:4d:f8:17:8d:fb:fa:0d: 59:47:2d:3c:0b:c6:c8:78:c0:ad:2c:70:77:0f:c5:ae:80:2d: ad:6a:48:50 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErt/OhGP/LPmkfF/OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTExMzY1NVoXDTI1MTExOTEyMzY1NVowLzEtMCsGA1UEAxMk OTlkYjEwZmEtOTgyZi00OTljLWE4NzUtMDI0ODEyMmM2NzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnDV1yVyjeE2LQMjIL6Xj9j0k2/FwwbN2vi4 eqjk30ZKI6ykdCr4Eavaj5oqJrt+bXaOrV3gsSPqdE7cKHHq3q8YRnYyH/0noKPi MgfOV72e2/zHS3RRbrP4CeewIPKmCooSP27DZBqrqfOqJKiqKHjP5TCGPF3S1mCX cGGGdTnlJFsBwSGM1O8GCxGqva9CY34tDqT+Y9xHacsNYKiXalYEd1Ym/7rbcnXD 4cadzj3nn7Ri3KnizA8Trh8v3z47h8ZnbaM90BZMoQcsOLS51AKtxzxHlXt8mI+G IyuxeGdSYSmP4MCRPhq0UbnHgQgjGLufhHthO4i0YLWIXVtdlwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMPd8Z+gCfbMEXlzD9fs4CnxKu7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2NmYmU2M2MtMzZjYy0z N2NkLTk3NDYtYmI3OGM1NGY0OWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAACUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOGN0neVldpkp1/Zjn3Q7Cmx75J83d8Y7dqHAl2a8RS1HmAqXCrFZ gjbP8g1lnoIAKH6iJ/rCgEYUYBy9IFLzOCP8V3KR1lnilK1R4evD2X7sGfoGKhXV ysabSdhLZIeFotZLP6NNwtovaQ96dbs7ywHOImeOTcCGFP/xMXFk57z35a9mjbRF tMfChpEUQz7ddtUH/lW4iwFv9M3pjeUQPaDhPa1AABG4RBVUCu1/nMt3lRZnARz9 3YMFINEis0FGjCuWYPrFoC/u1FH/4KJo2YTWdOKKJvIMi0JBLLOeAHm8B49N+BeN +/oNWUctPAvGyHjArSxwdw/FroAtrWpIUA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:53 2025 by rpki-client