$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cfd1a00-299c-3be1-8d40-094dbb15ea9a.roa File: 0cfd1a00-299c-3be1-8d40-094dbb15ea9a.roa (raw, json) Hash identifier: uHPkHZlccmnJkIKzAv1EHlk1Ph8buOteR7fI+U1Xi0U= Subject key identifier: B3:65:A4:A5:2B:2B:2E:00:2D:57:BE:DC:AC:94:16:19:BF:1E:BB:09 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC7BCE9A252CAB724D66708 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cfd1a00-299c-3be1-8d40-094dbb15ea9a.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 2603:c001:7000::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:bc:e9:a2:52:ca:b7:24:d6:67:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=fbc9e610-c5bd-4f6e-847c-43b57396b008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4a:9f:a1:3a:69:9c:52:98:3e:ba:93:de:f4: 14:a0:9f:6f:bf:90:2c:10:22:70:81:ce:bd:1b:be: 65:eb:4f:0d:ac:b9:7e:5d:fc:7e:fa:6e:ec:22:cc: 07:0c:3a:86:18:47:4c:4a:8c:26:ea:5b:a4:1d:30: e0:62:42:b0:78:61:13:6e:f7:79:8f:c7:60:88:eb: 1f:a8:c0:9f:46:2d:f6:e5:88:41:75:ec:b0:fc:bb: c4:df:d9:ac:73:a0:db:81:61:d8:50:a6:c0:ea:35: f7:39:95:45:6e:02:14:33:d7:9f:e0:e3:0b:fd:73: f3:1f:75:7d:ed:6b:e0:c7:c2:15:68:39:8d:e3:1b: cd:2f:0f:01:f8:e5:0a:64:5e:34:b4:bd:06:eb:23: 06:e1:47:ce:ab:c4:47:81:85:57:21:c9:6b:01:f7: ee:0a:38:fe:69:4a:13:4d:7d:e8:f0:98:99:ec:fb: 56:24:2f:f8:33:bc:f9:19:94:42:6b:3b:13:9d:be: 3a:89:4d:00:d2:cf:51:85:8e:fa:16:85:28:8d:7e: d5:65:bc:c5:f8:f0:2f:79:80:4d:2f:52:be:10:3f: eb:18:f4:a5:1c:3e:be:76:9f:05:54:c7:d2:1e:ab: 22:55:a5:f3:2f:f2:10:d8:e2:11:d4:bc:46:2b:35: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:65:A4:A5:2B:2B:2E:00:2D:57:BE:DC:AC:94:16:19:BF:1E:BB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0cfd1a00-299c-3be1-8d40-094dbb15ea9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c001:7000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3d:54:b8:43:f8:05:4f:76:60:56:cf:ba:80:a0:a8:b2:d7: a8:e1:2c:41:c4:72:7f:0f:91:17:ae:b6:ae:c0:25:7f:b9:10: b8:79:55:6e:7e:63:86:fa:75:c5:8c:48:37:c4:f4:a0:12:86: 93:68:0c:82:ab:f9:b9:20:65:ec:80:19:de:59:d2:a5:fb:cb: 63:3e:65:70:01:c8:55:99:d2:0b:8e:f1:18:c8:62:03:fb:f3: aa:57:1b:ce:d7:6d:88:24:b5:2a:84:18:85:bd:c8:20:45:db: 90:9c:b8:3f:fd:75:ff:2f:88:6d:a1:ab:78:f3:3c:2e:c8:06: d3:b1:8a:ff:e7:b4:09:95:33:7f:e0:c2:3c:5c:d0:2d:50:6b: 9c:5f:01:65:96:84:de:50:fa:57:53:f5:af:94:78:e2:ad:04: 1c:03:97:b8:4f:c0:af:49:05:c1:76:90:a7:40:42:2e:50:2e: b1:1a:b4:d6:89:38:22:0e:fc:9a:00:31:97:2a:7e:9a:34:7b: 58:67:26:40:68:58:e9:68:a7:4c:d5:12:45:7c:34:7b:95:35: 50:24:3a:c8:6e:1f:50:8d:d1:7f:48:c9:fc:35:03:bf:cf:24: 2f:e0:f3:b1:ba:98:96:58:10:6c:26:3e:b8:83:0f:35:d5:ae: 86:59:98:24 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8cx7zpolLKtyTWZwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZmJjOWU2MTAtYzViZC00ZjZlLTg0N2MtNDNiNTczOTZiMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUqfoTppnFKYPrqT3vQUoJ9vv5AsECJwgc69 G75l608NrLl+Xfx++m7sIswHDDqGGEdMSowm6lukHTDgYkKweGETbvd5j8dgiOsf qMCfRi325YhBdeyw/LvE39msc6DbgWHYUKbA6jX3OZVFbgIUM9ef4OML/XPzH3V9 7Wvgx8IVaDmN4xvNLw8B+OUKZF40tL0G6yMG4UfOq8RHgYVXIclrAffuCjj+aUoT TX3o8JiZ7PtWJC/4M7z5GZRCazsTnb46iU0A0s9RhY76FoUojX7VZbzF+PAveYBN L1K+ED/rGPSlHD6+dp8FVMfSHqsiVaXzL/IQ2OIR1LxGKzV+HQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLNlpKUrKy4ALVe+3KyUFhm/HrsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGNmZDFhMDAtMjk5Yy0z YmUxLThkNDAtMDk0ZGJiMTVlYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAXAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdj1UuEP4BU92YFbPuoCgqLLXqOEsQcRyfw+RF662rsAlf7kQuHlV bn5jhvp1xYxIN8T0oBKGk2gMgqv5uSBl7IAZ3lnSpfvLYz5lcAHIVZnSC47xGMhi A/vzqlcbztdtiCS1KoQYhb3IIEXbkJy4P/11/y+IbaGrePM8LsgG07GK/+e0CZUz f+DCPFzQLVBrnF8BZZaE3lD6V1P1r5R44q0EHAOXuE/Ar0kFwXaQp0BCLlAusRq0 1ok4Ig78mgAxlyp+mjR7WGcmQGhY6WinTNUSRXw0e5U1UCQ6yG4fUI3Rf0jJ/DUD v88kL+DzsbqYllgQbCY+uIMPNdWuhlmYJA== -----END CERTIFICATE-----Generated at Tue Sep 22 00:49:06 2026 by rpki-client