$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03592b87-d45b-30a9-a699-41ce1ac93c63.roa File: 03592b87-d45b-30a9-a699-41ce1ac93c63.roa (raw, json) Hash identifier: aCFOilWoH5rVsdinl7sJcIS0VRWR2u4simo2IDAVE5I= Subject key identifier: 8F:C9:03:39:2B:D4:F5:67:F6:CC:99:D7:94:3A:89:86:2F:7F:0F:3D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F49746A381A08F00C8C6F9030 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03592b87-d45b-30a9-a699-41ce1ac93c63.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 2603:c0e1:2000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:6a:38:1a:08:f0:0c:8c:6f:90:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c57375b7-fb2c-4e7a-89c2-5dd33d831c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:1d:c2:6c:88:76:54:09:e2:22:39:af:62: dc:74:a5:62:57:39:02:d5:6e:c1:de:82:9d:16:01: 95:32:05:89:5a:12:88:7b:5d:c4:e3:bf:63:73:ce: f9:eb:8a:78:93:72:39:a5:bf:a7:0c:ae:2b:8e:e8: c3:79:5b:44:07:46:19:a0:b4:69:d3:fe:3f:c0:64: 3e:2e:26:26:88:08:b0:12:a0:6a:23:02:8d:ee:92: c9:e8:66:53:0e:66:25:54:7c:ae:fc:1b:82:e0:a9: ed:33:14:3b:02:0c:f6:89:cd:0b:0b:5d:69:63:d5: 53:e6:3b:94:79:0e:b4:94:0a:30:46:42:85:44:a0: 06:31:a7:a3:41:1d:9f:bf:75:b9:c6:fc:cb:0f:42: 0e:de:10:b0:08:07:4e:cd:1e:92:62:45:87:a9:a4: 0d:ed:7d:84:0f:2f:e2:bc:52:2b:47:9a:fc:58:66: d3:67:11:29:fd:8e:a1:39:f9:db:0e:97:32:68:54: 77:55:d0:aa:d3:e9:8d:0b:32:b8:a2:f5:46:82:2d: b8:e3:f4:cc:03:25:ee:6a:0d:54:23:0c:6d:5b:37: 19:6c:b1:10:a8:ab:82:72:ce:16:df:6b:df:90:78: 95:6e:a9:81:38:d6:45:23:44:49:d6:76:53:ff:c6: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C9:03:39:2B:D4:F5:67:F6:CC:99:D7:94:3A:89:86:2F:7F:0F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/03592b87-d45b-30a9-a699-41ce1ac93c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0e1:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:45:03:94:98:75:d3:e3:8a:2d:a6:97:2c:d7:b5:25:a8:37: 51:06:da:c3:b7:a1:12:eb:22:a7:b9:6c:3e:4f:2e:fc:02:44: d7:ff:1d:18:32:f5:ee:ef:85:c2:ce:4f:ba:b8:a4:20:68:0e: e7:dd:19:34:12:04:04:8c:b4:43:05:1e:26:8d:aa:4b:53:6b: 77:83:f8:b4:f5:eb:82:29:34:13:0c:3f:5b:4a:90:57:30:07: 98:12:a6:5a:f1:64:67:7a:3a:eb:b5:05:cb:3b:b8:08:8a:bc: 56:98:7c:39:5e:37:fd:f0:dd:cd:ca:cc:b9:48:ff:aa:c4:0a: f6:34:62:4b:5b:7d:3f:53:35:83:2c:c5:e5:b9:3f:cf:c0:e6: 7b:49:0b:61:1a:e3:1b:fe:33:e0:60:b5:f0:6e:63:ad:00:a5: f2:75:06:75:20:b2:f2:ea:f0:e0:16:50:b6:0a:83:b9:77:3f: 1a:a5:79:aa:83:c6:96:07:f0:77:1c:cd:c6:54:9b:48:09:22: 31:85:75:81:25:66:a6:91:15:f7:60:69:23:f2:21:39:18:fc: e5:f7:02:6d:bb:e5:fc:7a:db:dd:f6:c1:70:f8:6e:c0:ac:2c: 9f:1d:52:0d:00:a0:2a:75:e6:20:21:f5:60:e2:fd:86:06:f5: 50:32:8f:24 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdGo4GgjwDIxvkDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzU3Mzc1YjctZmIyYy00ZTdhLTg5YzItNWRkMzNkODMxYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsYdwmyIdlQJ4iI5r2LcdKViVzkC1W7B3oKd FgGVMgWJWhKIe13E479jc87564p4k3I5pb+nDK4rjujDeVtEB0YZoLRp0/4/wGQ+ LiYmiAiwEqBqIwKN7pLJ6GZTDmYlVHyu/BuC4KntMxQ7Agz2ic0LC11pY9VT5juU eQ60lAowRkKFRKAGMaejQR2fv3W5xvzLD0IO3hCwCAdOzR6SYkWHqaQN7X2EDy/i vFIrR5r8WGbTZxEp/Y6hOfnbDpcyaFR3VdCq0+mNCzK4ovVGgi244/TMAyXuag1U IwxtWzcZbLEQqKuCcs4W32vfkHiVbqmBONZFI0RJ1nZT/8beYQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI/JAzkr1PVn9syZ15Q6iYYvfw89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDM1OTJiODctZDQ1Yi0z MGE5LWE2OTktNDFjZTFhYzkzYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPA4SAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYkUDlJh10+OKLaaXLNe1Jag3UQbaw7ehEusip7lsPk8u/AJE1/8d GDL17u+Fws5PurikIGgO590ZNBIEBIy0QwUeJo2qS1Nrd4P4tPXrgik0Eww/W0qQ VzAHmBKmWvFkZ3o667UFyzu4CIq8Vph8OV43/fDdzcrMuUj/qsQK9jRiS1t9P1M1 gyzF5bk/z8Dme0kLYRrjG/4z4GC18G5jrQCl8nUGdSCy8urw4BZQtgqDuXc/GqV5 qoPGlgfwdxzNxlSbSAkiMYV1gSVmppEV92BpI/IhORj85fcCbbvl/Hrb3fbBcPhu wKwsnx1SDQCgKnXmICH1YOL9hgb1UDKPJA== -----END CERTIFICATE-----Generated at Sat Sep 26 06:36:29 2026 by rpki-client