$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa File: ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa (raw, json) Hash identifier: krVtq9yNQcyIpIt9WV+L08O2Ja3o2YU79M4v4kO6Mlc= Subject key identifier: 16:0B:3E:EF:C9:94:33:30:27:FF:1B:43:D0:AE:26:BE:06:42:D2:C3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE8C6025075E357C115212900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa Signing time: Tue 19 Aug 2025 14:47:16 +0000 ROA not before: Tue 19 Aug 2025 14:47:16 +0000 ROA not after: Mon 17 Nov 2025 15:47:16 +0000 asID: 31898 IP address blocks: 2603:c028::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:c6:02:50:75:e3:57:c1:15:21:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 14:47:16 2025 GMT Not After : Nov 17 15:47:16 2025 GMT Subject: CN=ab6424bd-bc5a-4e9f-a99b-af1a03cb5cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f0:5c:31:c6:42:d5:a9:12:b8:a5:41:f1:44: 35:85:48:8f:a4:3e:57:45:ca:3e:3e:c1:ec:95:8b: 4f:92:46:64:df:ec:a5:8e:76:cf:53:dd:12:ed:c3: 2d:08:7d:96:2d:1f:46:da:c7:14:53:74:95:3c:4a: ad:41:2f:14:2e:6d:ab:d3:17:e4:04:e0:b8:7e:bb: 04:0a:1b:58:b0:e0:58:1a:17:f9:3c:24:99:02:c2: 15:c4:4d:76:6e:b3:67:96:f9:13:12:a7:5b:21:53: 75:4b:3d:8b:d5:35:49:a5:4e:cc:45:a2:af:cd:e1: 51:dc:18:0e:7f:84:e6:f1:80:f1:1c:d1:7a:42:8e: e6:fd:d3:54:fb:d3:89:4e:18:f1:65:8f:80:6a:09: 56:b3:59:c0:47:41:e7:ea:ae:2f:d2:30:49:32:9b: 53:58:fd:79:10:ef:50:57:fa:fb:0b:3a:c2:39:a8: 4a:d9:79:77:55:57:3a:3b:75:37:54:c1:94:f0:26: 81:0e:eb:23:7d:5c:2c:df:60:a1:bc:6f:e1:43:aa: 76:27:43:a8:fa:93:f0:e6:a2:b1:78:37:e1:f9:0c: 71:92:37:1a:1c:63:89:ec:5d:39:47:f1:d9:54:ec: e8:9c:76:14:4d:02:25:f5:4c:1e:98:32:56:2e:ec: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0B:3E:EF:C9:94:33:30:27:FF:1B:43:D0:AE:26:BE:06:42:D2:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c028::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e2:a3:28:d3:95:46:2b:7d:a8:76:1a:4c:8a:84:2c:c2:b4: 8e:3f:89:11:c5:bc:05:bf:be:02:d5:ae:b2:b3:21:03:9d:a2: a7:22:fa:8a:4f:72:5a:0d:ac:ce:2d:d9:7f:61:1e:a8:6f:16: 12:fb:fc:06:44:69:ff:3f:dd:9f:f0:69:ab:7e:dd:a3:a7:65: 92:57:79:7b:4b:2b:42:28:e1:92:7f:52:e4:00:f0:db:c8:01: 94:35:62:e9:15:89:1d:f4:78:bd:af:f6:aa:89:b0:52:0a:0f: 91:1b:79:22:d6:35:e4:92:dc:66:e2:e3:64:84:21:3b:68:6c: 48:e3:f9:3b:f5:4f:be:6e:a4:a6:25:fb:85:d3:ea:e3:74:cf: b4:4c:f3:b7:2a:b0:80:74:24:3d:41:25:db:8f:eb:1e:4a:98: b5:f3:42:8c:d3:29:43:ca:0b:4d:56:94:59:2d:0d:49:66:92: 1f:1c:d1:02:a8:b5:5d:f1:fb:87:9e:fa:d2:50:75:f7:5e:5f: 37:36:09:b3:ce:cb:a9:e1:1f:d2:65:8a:d3:52:7f:04:37:02: 66:7c:07:86:4c:e8:b5:f5:f7:ff:3c:3e:08:c2:ae:28:b8:ee: 58:94:83:15:8b:69:5b:17:dc:e3:55:2b:6c:01:3b:ae:65:f4: 78:2a:5e:54 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEroxgJQdeNXwRUhKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE0NDcxNloXDTI1MTExNzE1NDcxNlowLzEtMCsGA1UEAxMk YWI2NDI0YmQtYmM1YS00ZTlmLWE5OWItYWYxYTAzY2I1Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PBcMcZC1akSuKVB8UQ1hUiPpD5XRco+PsHs lYtPkkZk3+yljnbPU90S7cMtCH2WLR9G2scUU3SVPEqtQS8ULm2r0xfkBOC4frsE ChtYsOBYGhf5PCSZAsIVxE12brNnlvkTEqdbIVN1Sz2L1TVJpU7MRaKvzeFR3BgO f4Tm8YDxHNF6Qo7m/dNU+9OJThjxZY+AaglWs1nAR0Hn6q4v0jBJMptTWP15EO9Q V/r7CzrCOahK2Xl3VVc6O3U3VMGU8CaBDusjfVws32ChvG/hQ6p2J0Oo+pPw5qKx eDfh+QxxkjcaHGOJ7F05R/HZVOzonHYUTQIl9UwemDJWLuyL6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBYLPu/JlDMwJ/8bQ9CuJr4GQtLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE3ZWNiNjEtODgwYi0z YTc3LWJlNDItYWIyODEyYjU5YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAKAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXeKjKNOVRit9qHYaTIqELMK0jj+JEcW8Bb++AtWusrMhA52ipyL6 ik9yWg2szi3Zf2EeqG8WEvv8BkRp/z/dn/Bpq37do6dlkld5e0srQijhkn9S5ADw 28gBlDVi6RWJHfR4va/2qomwUgoPkRt5ItY15JLcZuLjZIQhO2hsSOP5O/VPvm6k piX7hdPq43TPtEzztyqwgHQkPUEl24/rHkqYtfNCjNMpQ8oLTVaUWS0NSWaSHxzR Aqi1XfH7h5760lB1915fNzYJs87LqeEf0mWK01J/BDcCZnwHhkzotfX3/zw+CMKu KLjuWJSDFYtpWxfc41UrbAE7rmX0eCpeVA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:36 2025 by rpki-client