$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9dd67797-12f2-3f92-bd31-77a68e249909.roa File: 9dd67797-12f2-3f92-bd31-77a68e249909.roa (raw, json) Hash identifier: ejS3uHXjCSJOlRpUkX4ajA3VneNyGjlPDAjcqLJJek8= Subject key identifier: 1C:00:3B:C3:3B:D5:8F:61:C2:91:3C:7F:DC:29:8C:39:14:2B:51:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD44B20212AE3C72337A3C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9dd67797-12f2-3f92-bd31-77a68e249909.roa Signing time: Tue 26 Aug 2025 22:58:41 +0000 ROA not before: Tue 26 Aug 2025 22:58:41 +0000 ROA not after: Mon 24 Nov 2025 23:58:41 +0000 asID: 31898 IP address blocks: 2603:c02e:c000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:b2:02:12:ae:3c:72:33:7a:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:58:41 2025 GMT Not After : Nov 24 23:58:41 2025 GMT Subject: CN=1e528b45-45bf-490b-b7f4-bd04e499be10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:fd:f2:40:0b:16:ba:3f:20:b3:b5:af:58: 41:88:f2:8c:2a:89:8d:a8:45:7b:1b:c6:d4:b6:21: ff:ca:65:c4:67:a7:7b:4f:b9:34:75:11:55:4a:b3: 3b:b5:01:48:fd:2b:32:aa:34:aa:16:19:60:d3:3c: 92:4e:d5:ab:0c:26:cb:9f:c8:1a:ba:80:14:c1:0f: 6d:7f:d3:34:c4:51:60:52:5b:5a:d2:c8:97:c7:e5: 17:b2:f8:6f:6d:71:99:47:3f:c3:69:b7:71:24:43: 9c:19:e6:a8:22:aa:fe:c5:40:af:be:d9:e2:af:b4: da:78:f0:30:bc:a7:09:4b:27:82:48:3a:56:ca:a7: a3:a9:73:4a:c5:c4:f6:31:97:b1:d4:b9:3c:7a:f0: 65:11:ce:df:af:d0:24:28:b5:15:9c:48:cb:c5:58: bc:ba:21:93:a5:bf:3d:0f:76:b9:50:bd:17:d1:bf: b4:a8:60:47:62:6b:c1:05:ac:ae:cb:0b:2b:d5:59: f8:07:ce:2f:dc:8a:52:3e:89:da:7c:74:e6:74:77: 99:b1:8a:9f:c9:f7:ab:25:14:a0:b8:12:4f:05:ae: eb:7a:0c:b9:06:cc:0f:67:9d:d7:5a:ec:60:16:32: f7:5c:c2:c5:a2:e8:b1:5f:d2:22:e2:41:70:a4:44: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:00:3B:C3:3B:D5:8F:61:C2:91:3C:7F:DC:29:8C:39:14:2B:51:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9dd67797-12f2-3f92-bd31-77a68e249909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c02e:c000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6c:b6:b2:10:b0:2b:a3:32:aa:87:df:ce:a9:82:65:04:33: 67:85:f8:00:22:a4:8d:11:c2:60:8b:31:1b:a9:4f:a6:d9:45: 13:ec:90:73:95:10:ba:1a:33:20:07:16:f8:d0:92:c0:58:f1: 7c:d8:94:73:d9:8a:dc:07:03:48:57:ef:86:37:41:34:b4:01: 6d:b1:9a:d4:ec:40:cf:9e:54:ed:85:04:3d:1f:da:fb:7d:d8: 00:91:91:0d:06:a9:25:d8:d7:5c:90:4b:59:6b:1a:56:4c:21: 44:6c:cf:c9:89:68:53:a2:42:ef:ae:14:73:9f:56:b7:81:b1: 0f:dd:64:3f:00:16:87:59:24:a0:e4:56:c7:20:06:a9:70:28: 78:ee:a2:94:80:ea:ab:76:b8:8b:67:68:7d:27:e6:bb:f5:6b: 0a:e7:85:c7:37:92:70:0e:98:47:41:4f:87:89:82:c6:70:1d: ee:13:0d:63:23:29:7b:8a:43:6b:f0:e0:77:58:13:91:d1:b3: e4:5b:e7:53:9e:15:05:66:86:85:4d:f3:46:90:0c:a7:71:fe: b5:40:4a:04:92:38:62:b6:44:42:50:b8:4a:1a:68:4f:d1:82: 74:4d:5b:fc:ec:54:81:de:a0:f6:2e:9c:fb:50:dc:d0:29:02: fd:7e:24:c0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr9RLICEq48cjN6PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTg0MVoXDTI1MTEyNDIzNTg0MVowLzEtMCsGA1UEAxMk MWU1MjhiNDUtNDViZi00OTBiLWI3ZjQtYmQwNGU0OTliZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDj98kALFro/ILO1r1hBiPKMKomNqEV7G8bU tiH/ymXEZ6d7T7k0dRFVSrM7tQFI/SsyqjSqFhlg0zySTtWrDCbLn8gauoAUwQ9t f9M0xFFgUlta0siXx+UXsvhvbXGZRz/DabdxJEOcGeaoIqr+xUCvvtnir7TaePAw vKcJSyeCSDpWyqejqXNKxcT2MZex1Lk8evBlEc7fr9AkKLUVnEjLxVi8uiGTpb89 D3a5UL0X0b+0qGBHYmvBBayuywsr1Vn4B84v3IpSPonafHTmdHeZsYqfyferJRSg uBJPBa7regy5BswPZ53XWuxgFjL3XMLFouixX9Ii4kFwpERYwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBwAO8M71Y9hwpE8f9wpjDkUK1HSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWRkNjc3OTctMTJmMi0z ZjkyLWJkMzEtNzdhNjhlMjQ5OTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPALsAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQmy2shCwK6MyqoffzqmCZQQzZ4X4ACKkjRHCYIsxG6lPptlFE+yQ c5UQuhozIAcW+NCSwFjxfNiUc9mK3AcDSFfvhjdBNLQBbbGa1OxAz55U7YUEPR/a +33YAJGRDQapJdjXXJBLWWsaVkwhRGzPyYloU6JC764Uc59Wt4GxD91kPwAWh1kk oORWxyAGqXAoeO6ilIDqq3a4i2dofSfmu/VrCueFxzeScA6YR0FPh4mCxnAd7hMN YyMpe4pDa/Dgd1gTkdGz5FvnU54VBWaGhU3zRpAMp3H+tUBKBJI4YrZEQlC4Shpo T9GCdE1b/OxUgd6g9i6c+1Dc0CkC/X4kwA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:52:12 2025 by rpki-client