$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa File: 831ef385-6303-3803-89f8-148490b76ee2.roa (raw, json) Hash identifier: cWo1wqrJ1NFjsgWtdoXsTMWDEYu+BihgP6cvm4k0eZY= Subject key identifier: 44:DC:4E:E7:87:87:CB:BC:A7:93:37:EB:68:41:9F:65:58:7B:D3:C0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B29EEDBF1BAEF01706117D540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa Signing time: Thu 11 Sep 2025 22:57:07 +0000 ROA not before: Thu 11 Sep 2025 22:57:07 +0000 ROA not after: Wed 10 Dec 2025 23:57:07 +0000 asID: 54253 IP address blocks: 2603:c080:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:ee:db:f1:ba:ef:01:70:61:17:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 22:57:07 2025 GMT Not After : Dec 10 23:57:07 2025 GMT Subject: CN=7d96bb43-0fe5-4d8e-891b-fbbbc7f49b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:c8:79:96:90:65:70:71:63:fe:cf:42:8a: 99:5c:b6:a0:ed:b9:96:6b:7e:e4:4e:31:f2:07:38: 94:4c:96:ea:8d:46:b0:57:ff:2b:62:96:60:76:32: c1:1e:0a:f7:a3:16:a4:7e:00:a6:29:d9:5a:d3:e8: cd:1b:ee:a6:03:ac:10:65:c6:f1:5d:fa:fd:67:7f: 8b:a0:ca:c7:69:da:c3:1a:56:8f:1e:1c:41:9c:8c: a5:6e:04:e2:de:e2:06:a5:da:5f:6a:c7:12:e5:d2: 3f:78:64:48:ac:a0:06:67:8e:d3:45:c2:8d:07:07: a2:c9:f5:ad:29:7e:97:02:ca:ac:15:a9:2e:3c:61: c3:81:07:c5:4d:89:08:96:20:d3:88:86:d6:d9:e0: 3d:c4:0d:f0:b9:6e:be:1b:d6:e3:c8:1c:cb:0a:71: 11:b4:28:c3:ce:62:ad:77:b2:e0:ab:51:88:cf:a5: b6:8b:f3:50:f4:92:c0:9e:64:4f:df:4e:47:4f:44: 07:75:a6:6f:9d:b5:76:f0:5d:44:15:8f:4c:cf:b9: da:d6:6a:cf:32:e7:51:e8:8c:82:cd:10:5b:c1:cb: 02:69:b0:08:6e:de:6b:67:54:80:46:de:5a:10:4d: 64:9c:00:3c:9d:8a:3a:25:67:dd:1a:1d:da:26:60: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DC:4E:E7:87:87:CB:BC:A7:93:37:EB:68:41:9F:65:58:7B:D3:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/831ef385-6303-3803-89f8-148490b76ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c080:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:87:73:27:8a:a8:16:de:80:a3:f9:12:eb:b9:89:c3:89:6b: 34:55:50:da:1f:84:0c:ba:fa:8f:54:f7:00:34:2d:2d:db:da: e9:62:6a:ca:e7:08:f6:ba:ac:7e:3a:cf:95:94:17:86:dc:9e: 24:45:ba:03:f1:01:e3:b2:66:5a:4d:66:56:4d:d7:69:37:36: eb:da:7d:2e:10:96:9e:97:8c:a5:cd:72:02:d1:ad:9a:de:0e: 99:e5:34:90:32:db:89:fd:68:3a:5d:05:66:ce:ac:e5:80:dc: b2:33:fa:25:3a:cc:79:e4:6a:d5:a5:57:a1:82:3c:78:e2:6d: cb:9c:fd:98:09:7a:f7:dc:58:30:4a:91:dd:aa:0d:b5:c0:7c: bc:9d:1b:d7:c0:ab:7c:1b:02:52:1a:0b:32:94:88:f9:bb:cc: ab:e2:d8:c6:15:c4:6e:ad:b0:50:fa:04:07:62:f9:0d:05:95: 20:85:9c:31:6f:bd:20:d3:84:22:26:78:08:85:2a:e3:4e:ef: 2d:8f:9b:74:34:02:cb:64:30:a4:88:f0:de:cf:a6:ef:4c:83: 2b:7e:d7:2b:c9:66:70:39:b6:68:d5:66:b1:46:f4:19:1f:58: 3e:49:fe:62:93:df:f7:3a:8a:bb:74:ef:3e:65:84:c4:89:2e: c7:3c:03:02 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsp7tvxuu8BcGEX1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDkxMTIyNTcwN1oXDTI1MTIxMDIzNTcwN1owLzEtMCsGA1UEAxMk N2Q5NmJiNDMtMGZlNS00ZDhlLTg5MWItZmJiYmM3ZjQ5YjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjjIeZaQZXBxY/7PQoqZXLag7bmWa37kTjHy BziUTJbqjUawV/8rYpZgdjLBHgr3oxakfgCmKdla0+jNG+6mA6wQZcbxXfr9Z3+L oMrHadrDGlaPHhxBnIylbgTi3uIGpdpfascS5dI/eGRIrKAGZ47TRcKNBweiyfWt KX6XAsqsFakuPGHDgQfFTYkIliDTiIbW2eA9xA3wuW6+G9bjyBzLCnERtCjDzmKt d7Lgq1GIz6W2i/NQ9JLAnmRP305HT0QHdaZvnbV28F1EFY9Mz7na1mrPMudR6IyC zRBbwcsCabAIbt5rZ1SARt5aEE1knAA8nYo6JWfdGh3aJmBX4QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFETcTueHh8u8p5M362hBn2VYe9PAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODMxZWYzODUtNjMwMy0z ODAzLTg5ZjgtMTQ4NDkwYjc2ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAgCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfodzJ4qoFt6Ao/kS67mJw4lrNFVQ2h+EDLr6j1T3ADQtLdva6WJq yucI9rqsfjrPlZQXhtyeJEW6A/EB47JmWk1mVk3XaTc269p9LhCWnpeMpc1yAtGt mt4OmeU0kDLbif1oOl0FZs6s5YDcsjP6JTrMeeRq1aVXoYI8eOJty5z9mAl699xY MEqR3aoNtcB8vJ0b18CrfBsCUhoLMpSI+bvMq+LYxhXEbq2wUPoEB2L5DQWVIIWc MW+9INOEIiZ4CIUq407vLY+bdDQCy2QwpIjw3s+m70yDK37XK8lmcDm2aNVmsUb0 GR9YPkn+YpPf9zqKu3TvPmWExIkuxzwDAg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:15 2025 by rpki-client