$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a68177-7135-368a-8ad9-ffb8070899ce.roa File: d3a68177-7135-368a-8ad9-ffb8070899ce.roa (raw, json) Hash identifier: ahkzVpvXEtLSA3Lxbdaj9CrckdVyNGNn/lHl7GRo4rQ= Subject key identifier: 1E:AF:2F:19:01:23:79:57:A1:37:79:05:70:2A:F5:F0:2D:EE:C9:C4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEB657A519096B7748BAC4B60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a68177-7135-368a-8ad9-ffb8070899ce.roa Signing time: Wed 20 Aug 2025 13:20:11 +0000 ROA not before: Wed 20 Aug 2025 13:20:11 +0000 ROA not after: Tue 18 Nov 2025 14:20:11 +0000 asID: 31898 IP address blocks: 2603:c002:9500::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:65:7a:51:90:96:b7:74:8b:ac:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 13:20:11 2025 GMT Not After : Nov 18 14:20:11 2025 GMT Subject: CN=1984e22f-031c-438b-bd6a-c02d05b7a77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:b5:e0:93:c2:2c:4e:97:18:4b:d9:d8:64: 24:2e:2f:52:87:a6:ae:bd:0f:4b:d8:10:bc:10:d6: 9a:1c:fb:fd:0a:6f:3e:8d:dd:63:1e:0d:73:9e:90: 54:84:73:d5:c5:a7:e1:29:12:49:eb:48:38:c3:f0: 96:7e:17:62:8e:dc:44:f3:d8:a2:88:32:fd:ca:9a: a8:a7:8a:f4:25:53:ae:07:bd:89:1e:60:c2:a8:ce: 62:15:9c:e9:2a:b5:38:77:7a:ca:64:3d:94:25:fc: 53:1e:9f:f9:ef:b2:b2:b2:04:0b:06:f4:1f:c2:3d: b2:cd:84:8e:8e:63:e5:59:4a:fd:0c:9b:3a:65:01: 24:ce:d2:cb:54:95:74:d0:e8:f4:26:8a:4e:de:84: 92:10:27:a8:e2:54:a7:dd:98:34:a9:64:c7:ea:3a: ac:62:b4:19:16:ca:39:a4:0c:01:4f:a7:6a:ca:44: a9:53:5b:22:ef:89:f6:4e:43:69:d7:0f:a1:d6:e1: 6f:89:eb:fd:5e:98:f4:dc:d1:87:2e:a6:ff:2a:16: df:f1:f1:68:d2:26:70:4f:21:41:b8:9c:21:1d:5e: 88:c1:97:3e:be:f2:c5:87:8f:2f:50:c1:ac:67:60: 97:cc:fa:84:b2:08:21:d8:46:bb:43:ce:17:8a:76: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AF:2F:19:01:23:79:57:A1:37:79:05:70:2A:F5:F0:2D:EE:C9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a68177-7135-368a-8ad9-ffb8070899ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:9500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bc:f2:87:ef:3a:fd:a8:d1:f3:d0:d1:aa:92:e2:32:f5:f3: 7c:d3:95:8b:a1:fb:b0:e3:01:be:9d:9d:75:68:81:d8:5e:7e: eb:47:b5:81:c2:ac:61:bc:fa:3a:bb:5d:e7:f8:1f:98:e0:d8: fd:7c:3c:ac:bb:87:c2:f4:f6:75:0c:79:3f:0e:21:7d:a8:7b: fe:f1:23:54:70:e4:c9:a8:ac:b8:25:35:ce:ef:ca:27:f3:92: 39:e3:5f:85:9b:9c:55:c9:32:11:2d:08:48:d5:ed:92:29:78: 19:14:9c:fa:81:29:74:56:8a:0f:49:3f:d4:00:cb:27:f0:96: 50:c9:9f:4d:40:4e:5c:bb:fb:83:5f:9d:c6:10:bf:83:0d:60: a2:82:a6:f3:0d:d1:1a:31:00:a7:17:a7:6c:70:15:ed:79:af: dc:c3:d4:53:1d:fa:a9:4f:65:18:b3:3b:7f:2c:d8:61:d3:f2: 1d:d5:a6:ee:69:95:57:91:cf:b3:73:06:66:02:85:72:76:17: 5b:d8:d6:81:9a:02:6d:27:6e:ca:4b:5f:6f:9f:f3:2e:6a:e0: eb:82:e1:8b:9d:ff:94:3b:10:3e:11:b1:d2:20:b9:89:e3:08: d6:97:fc:68:dd:7a:af:ab:a0:80:04:3e:64:ef:e2:17:d6:ba: b9:b2:48:6a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErrZXpRkJa3dIusS2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDEzMjAxMVoXDTI1MTExODE0MjAxMVowLzEtMCsGA1UEAxMk MTk4NGUyMmYtMDMxYy00MzhiLWJkNmEtYzAyZDA1YjdhNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZm14JPCLE6XGEvZ2GQkLi9Sh6auvQ9L2BC8 ENaaHPv9Cm8+jd1jHg1znpBUhHPVxafhKRJJ60g4w/CWfhdijtxE89iiiDL9ypqo p4r0JVOuB72JHmDCqM5iFZzpKrU4d3rKZD2UJfxTHp/577KysgQLBvQfwj2yzYSO jmPlWUr9DJs6ZQEkztLLVJV00Oj0JopO3oSSECeo4lSn3Zg0qWTH6jqsYrQZFso5 pAwBT6dqykSpU1si74n2TkNp1w+h1uFviev9Xpj03NGHLqb/Khbf8fFo0iZwTyFB uJwhHV6IwZc+vvLFh48vUMGsZ2CXzPqEsggh2Ea7Q84XinatuwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB6vLxkBI3lXoTd5BXAq9fAt7snEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDNhNjgxNzctNzEzNS0z NjhhLThhZDktZmZiODA3MDg5OWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAApUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPrzyh+86/ajR89DRqpLiMvXzfNOVi6H7sOMBvp2ddWiB2F5+60e1 gcKsYbz6Ortd5/gfmODY/Xw8rLuHwvT2dQx5Pw4hfah7/vEjVHDkyaisuCU1zu/K J/OSOeNfhZucVckyES0ISNXtkil4GRSc+oEpdFaKD0k/1ADLJ/CWUMmfTUBOXLv7 g1+dxhC/gw1gooKm8w3RGjEApxenbHAV7Xmv3MPUUx36qU9lGLM7fyzYYdPyHdWm 7mmVV5HPs3MGZgKFcnYXW9jWgZoCbSduyktfb5/zLmrg64Lhi53/lDsQPhGx0iC5 ieMI1pf8aN16r6uggAQ+ZO/iF9a6ubJIag== -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:31 2025 by rpki-client