$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa File: 0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa (raw, json) Hash identifier: /vT2dcDdR26+mkvXat6lDuxvjlU2V1vNpt1x42BHJG4= Subject key identifier: 43:FB:59:E7:D7:3A:37:08:CA:FF:AA:AE:B4:1A:98:7B:66:28:15:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E04360B2D28D72509E6F47280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 8070 IP address blocks: 2603:1063:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:0b:2d:28:d7:25:09:e6:f4:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=c93a886e-0c82-47b1-b9dd-63cfcd0ca7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:5b:33:a1:7a:ab:13:be:49:34:a7:6b:bd: 9c:98:d9:50:ea:4a:0b:2a:23:28:24:4f:9b:d1:f0: b8:89:1b:3a:01:99:19:4d:cf:df:95:e7:9f:d5:39: 94:66:81:dc:db:d7:3f:cd:2a:4d:dc:e8:80:5f:4b: cc:94:30:cd:a8:0c:78:59:c2:b1:c6:a8:8c:17:a7: 82:7a:47:d4:71:e7:be:21:9b:83:1b:ac:66:1b:4b: 97:03:cd:2c:2a:6b:f5:78:39:60:be:bd:a2:e3:8a: 43:09:b5:0b:42:f0:d4:3d:33:0b:0d:93:37:77:75: 4a:c2:c2:2b:63:68:71:b0:38:e2:44:26:e1:05:e0: 88:43:06:47:4b:c0:3f:63:ca:20:ef:30:22:c0:b3: 4a:a7:0f:81:1e:4f:c3:d3:2c:f8:0c:f4:43:df:73: e8:0c:18:9a:09:55:a7:72:b1:b8:5f:30:33:35:fb: e3:33:2f:62:a3:d2:ba:e8:82:07:68:8a:d2:b9:55: b3:4a:d5:1c:13:a5:00:e5:0e:d8:bf:5b:16:cc:67: 46:c7:eb:f5:80:ef:1c:ea:be:b0:49:63:0b:85:0e: 32:5a:83:41:38:a0:4d:d3:73:c2:fa:b5:16:b6:c1: 1e:d4:79:87:e7:34:4d:3f:5c:3d:4f:75:df:4f:f5: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:59:E7:D7:3A:37:08:CA:FF:AA:AE:B4:1A:98:7B:66:28:15:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2603:1063:2100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:56:19:f6:85:33:8f:86:9e:53:c7:16:75:3a:f3:b7:9f:5b: dd:51:68:8c:d8:a8:9e:b9:3b:3b:33:53:e6:bf:65:f8:49:e6: ea:39:1e:5e:e4:18:c7:92:c2:9b:5e:93:64:94:ef:e5:42:a9: d9:d0:62:c5:e9:50:25:b9:bc:4c:70:75:b3:78:ee:71:a6:f9: e6:68:07:a6:7b:4b:45:98:f6:93:e3:5c:d5:8c:72:04:bd:60: 71:44:14:43:70:b3:9b:76:ba:3f:a9:46:c1:5e:1a:1d:7a:05: 8d:6f:c5:99:1f:e1:57:75:f5:61:7a:95:66:a1:1c:d8:8b:f2: 5b:e4:52:a6:be:27:2d:88:c2:a2:97:f0:b2:04:01:a6:3e:59: b8:74:a2:fa:5a:98:3e:df:c9:f9:b1:65:64:70:d2:1f:04:7c: a2:b1:ff:ba:90:0e:15:60:b0:60:b4:67:0a:b6:56:8c:84:c0: 71:b6:1a:f5:08:65:ac:40:5c:67:aa:1b:37:03:fa:63:6e:a8: 00:e7:c7:78:e3:77:3a:4f:62:02:eb:b7:77:e6:92:49:20:aa: d2:fc:79:75:9d:06:99:46:3d:23:d1:75:f0:b6:78:57:ea:b1: 7c:fa:73:0b:34:03:51:bd:95:75:fd:de:b3:e3:75:7a:5c:df: 24:8f:17:f0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4ENgstKNclCeb0coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YzkzYTg4NmUtMGM4Mi00N2IxLWI5ZGQtNjNjZmNkMGNhN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+9bM6F6qxO+STSna72cmNlQ6koLKiMoJE+b 0fC4iRs6AZkZTc/fleef1TmUZoHc29c/zSpN3OiAX0vMlDDNqAx4WcKxxqiMF6eC ekfUcee+IZuDG6xmG0uXA80sKmv1eDlgvr2i44pDCbULQvDUPTMLDZM3d3VKwsIr Y2hxsDjiRCbhBeCIQwZHS8A/Y8og7zAiwLNKpw+BHk/D0yz4DPRD33PoDBiaCVWn crG4XzAzNfvjMy9io9K66IIHaIrSuVWzStUcE6UA5Q7Yv1sWzGdGx+v1gO8c6r6w SWMLhQ4yWoNBOKBN03PC+rUWtsEe1HmH5zRNP1w9T3XfT/XigwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEP7WefXOjcIyv+qrrQamHtmKBWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGNmYWE3MWItYTNiNS0z ZDhlLTg4MTEtOTk4OWNjYTMzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMQYyEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeVYZ9oUzj4aeU8cWdTrzt59b3VFojNionrk7OzNT5r9l+Enm6jke XuQYx5LCm16TZJTv5UKp2dBixelQJbm8THB1s3jucab55mgHpntLRZj2k+Nc1Yxy BL1gcUQUQ3Czm3a6P6lGwV4aHXoFjW/FmR/hV3X1YXqVZqEc2IvyW+RSpr4nLYjC opfwsgQBpj5ZuHSi+lqYPt/J+bFlZHDSHwR8orH/upAOFWCwYLRnCrZWjITAcbYa 9QhlrEBcZ6obNwP6Y26oAOfHeON3Ok9iAuu3d+aSSSCq0vx5dZ0GmUY9I9F18LZ4 V+qxfPpzCzQDUb2Vdf3es+N1elzfJI8X8A== -----END CERTIFICATE-----Generated at Sat Jun 13 17:51:05 2026 by rpki-client