$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af530e7-92ed-3e89-a601-827d2f05a05b.roa File: 0af530e7-92ed-3e89-a601-827d2f05a05b.roa (raw, json) Hash identifier: 4p2M8LSUoiTpcZrdJBlE6d9XE4m+RxV2nO2Eqh+V3zI= Subject key identifier: B9:B0:25:45:38:EA:6F:93:10:2D:A4:50:AC:83:25:27:02:30:A8:FF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4988EA40D4108CC799BDCB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af530e7-92ed-3e89-a601-827d2f05a05b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 2603:c0f6::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:ea:40:d4:10:8c:c7:99:bd:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1766f1f4-acc4-4608-94f5-d127da96fcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:a3:b1:08:2d:f4:8f:8e:15:a7:68:2b:57: ba:1a:f1:ec:c0:47:b5:2c:70:82:7f:8b:f0:a6:bd: e6:03:1e:cb:8d:03:24:95:ba:6e:d8:ea:65:f7:ac: ee:1f:d5:53:c7:24:a4:aa:87:ae:a1:2c:7c:0c:d1: 3e:9d:c0:09:0c:cc:ad:11:d4:a1:d7:8e:db:f2:07: b2:5b:19:4b:a0:3f:1c:06:87:fb:ba:6f:14:fa:51: 5f:62:f9:74:b1:de:0e:2a:27:6f:b9:88:e6:38:5b: d0:08:1e:bb:49:89:db:31:2f:31:e7:6f:93:30:6f: d4:ef:3c:04:bd:26:ca:72:0b:f1:93:d3:90:b7:db: 1c:b1:e7:c6:0c:03:b5:27:c7:ed:d3:ee:7f:76:a9: ee:1d:11:cd:f6:e4:6e:c4:ce:0a:36:1a:0f:1e:7c: cb:6c:54:8c:b1:80:5e:01:bc:ec:30:4e:46:d8:c9: 6c:14:5a:59:4b:ea:b1:5f:f1:9a:20:ed:5a:b2:c2: a6:f9:47:80:38:4a:3a:77:c0:4a:72:0c:59:98:1b: 2c:0a:5b:1d:75:8c:13:83:cf:a7:7b:0e:62:98:ab: 1e:48:79:35:05:98:ad:3e:8c:07:74:e7:9e:4f:f4: f7:70:85:27:36:c0:51:75:b8:e3:58:65:7d:08:4f: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B0:25:45:38:EA:6F:93:10:2D:A4:50:AC:83:25:27:02:30:A8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af530e7-92ed-3e89-a601-827d2f05a05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0f6::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4b:69:b0:cf:ff:5d:8a:53:b9:f5:b5:38:79:92:1c:3b:0f: fc:7b:28:ba:68:09:2c:f1:c6:a3:33:5b:5f:1f:ab:59:e2:d4: 53:9e:37:b6:f1:30:41:87:fe:9f:f9:76:33:63:9a:60:51:8e: 6a:4f:f5:c2:77:89:98:bd:7d:d5:4f:bc:a6:54:1c:94:46:fc: 8e:b2:ed:36:7a:d2:51:26:b9:1b:39:8d:57:90:fa:00:23:9d: 7e:fd:d2:ae:4e:93:e2:39:a4:d5:ab:20:05:d6:78:d8:5f:30: 19:72:66:0b:78:14:25:9c:06:2e:de:be:f6:55:f5:2c:6c:7c: f9:4d:8e:9e:01:27:34:9d:dd:17:3f:23:11:66:88:8f:4f:a3: f1:6f:75:ed:e8:8c:cf:d2:3c:47:66:17:a2:be:a2:64:d9:fe: e5:1f:0a:ef:51:66:e1:6c:bc:ad:2b:60:04:5f:1f:25:b0:38: 34:22:e7:a3:80:4d:d1:86:22:ad:5c:4f:14:ba:22:54:e1:b4: f0:62:a4:24:e3:c3:e3:f2:9c:3a:e6:76:09:6e:9f:5a:55:be: 6b:09:79:cd:93:fc:7e:43:b6:b3:53:e0:9c:7d:c7:cd:04:b9: 94:e4:0c:bb:b6:c6:f2:39:0b:88:e4:ed:72:68:11:4d:67:ca: 39:82:a0:dc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiOpA1BCMx5m9y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTc2NmYxZjQtYWNjNC00NjA4LTk0ZjUtZDEyN2RhOTZmY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD+jsQgt9I+OFadoK1e6GvHswEe1LHCCf4vw pr3mAx7LjQMklbpu2Opl96zuH9VTxySkqoeuoSx8DNE+ncAJDMytEdSh147b8gey WxlLoD8cBof7um8U+lFfYvl0sd4OKidvuYjmOFvQCB67SYnbMS8x52+TMG/U7zwE vSbKcgvxk9OQt9scsefGDAO1J8ft0+5/dqnuHRHN9uRuxM4KNhoPHnzLbFSMsYBe AbzsME5G2MlsFFpZS+qxX/GaIO1assKm+UeAOEo6d8BKcgxZmBssClsddYwTg8+n ew5imKseSHk1BZitPowHdOeeT/T3cIUnNsBRdbjjWGV9CE9XAQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLmwJUU46m+TEC2kUKyDJScCMKj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGFmNTMwZTctOTJlZC0z ZTg5LWE2MDEtODI3ZDJmMDVhMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPA9gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAY0tpsM//XYpTufW1OHmSHDsP/HsoumgJLPHGozNbXx+rWeLUU543 tvEwQYf+n/l2M2OaYFGOak/1wneJmL191U+8plQclEb8jrLtNnrSUSa5GzmNV5D6 ACOdfv3Srk6T4jmk1asgBdZ42F8wGXJmC3gUJZwGLt6+9lX1LGx8+U2OngEnNJ3d Fz8jEWaIj0+j8W917eiMz9I8R2YXor6iZNn+5R8K71Fm4Wy8rStgBF8fJbA4NCLn o4BN0YYirVxPFLoiVOG08GKkJOPD4/KcOuZ2CW6fWlW+awl5zZP8fkO2s1PgnH3H zQS5lOQMu7bG8jkLiOTtcmgRTWfKOYKg3A== -----END CERTIFICATE-----Generated at Sun Sep 27 05:54:31 2026 by rpki-client