$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d69bd2-b032-372b-8b1a-0b8b856333fd.roa File: 23d69bd2-b032-372b-8b1a-0b8b856333fd.roa (raw, json) Hash identifier: g4SB0Qne5c1hOp9jJekDZQ1zWVUZ/hiK5K7ceTcu/yU= Subject key identifier: A1:7B:4E:8E:EA:8F:6F:91:F9:36:F6:97:1F:C8:EC:9C:CE:68:01:27 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F13023C0AB7E6476E7A293340 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d69bd2-b032-372b-8b1a-0b8b856333fd.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:3c:0a:b7:e6:47:6e:7a:29:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=6fcbfad8-945c-4c06-b41f-cacb696b3701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:ad:46:d2:46:20:fd:f5:b3:1c:e3:df:22: ee:3f:94:3b:e2:b1:25:24:d7:7d:f7:76:14:28:b3: 4f:bf:d2:14:70:d7:24:d8:9a:b3:79:43:db:52:b9: fd:88:e0:58:3f:a6:9f:9a:8f:6a:d5:ba:fc:2c:f2: f1:b4:70:ec:09:05:21:9c:6e:d3:7e:c5:10:fe:1f: e8:de:10:e7:47:44:c7:4c:3c:c9:ee:31:eb:0c:10: 0f:ed:dd:ad:51:ed:d1:79:6d:0f:8c:7b:ac:cb:67: 86:92:3b:9f:d5:6e:f6:02:4d:b7:a3:7f:28:a9:86: f5:f3:b0:57:ee:04:83:13:21:8b:4b:66:57:d2:72: 6e:9d:57:fe:23:3d:f7:24:0d:dc:d0:0c:45:8b:81: 6d:cd:16:66:ad:92:6a:21:22:1c:84:c2:ae:35:e8: 85:85:76:fd:b5:e7:7b:10:d2:53:3d:67:a6:58:2c: 93:92:f4:83:af:fd:5e:4f:ca:35:cf:43:6f:85:7c: c8:bc:11:e8:f0:75:b9:00:20:ab:93:be:a3:78:77: c0:4f:93:65:fe:9b:60:70:27:e7:e6:9a:66:49:fd: 82:5e:9d:9a:45:71:cc:b6:9f:44:4b:71:ae:a8:20: 42:aa:4b:3f:bc:64:2e:4c:2e:32:08:d3:bb:76:23: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7B:4E:8E:EA:8F:6F:91:F9:36:F6:97:1F:C8:EC:9C:CE:68:01:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d69bd2-b032-372b-8b1a-0b8b856333fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1c:02:24:7e:e4:0a:73:61:27:2b:f2:21:61:dd:0f:d6:63: e5:98:7e:6f:14:49:a4:3b:09:37:be:a0:13:e2:cb:62:c1:d4: c2:ee:79:4f:ca:b7:1d:6c:48:5f:5a:33:ce:9c:4c:22:9a:17: b0:25:28:e0:4b:61:e3:1f:bd:47:86:dc:4f:62:ec:4a:5a:69: 9c:84:08:3c:47:50:6f:3a:05:7e:45:17:16:c9:ee:e3:34:06: 30:10:37:94:03:94:af:d1:a5:11:62:50:88:f0:41:34:97:ed: 3f:6f:9c:52:5d:94:28:78:87:9a:73:a4:18:c1:0c:04:a1:89: c2:c2:f5:44:96:d5:ea:4e:9f:3e:3b:d6:d3:e8:ba:60:4d:d7: 3b:ab:bd:27:d7:10:15:5c:55:a4:37:89:98:8e:03:40:17:fd: bf:94:61:cc:26:a2:98:1e:8b:27:ae:58:94:2c:4d:61:3e:93: 2b:70:3b:8a:8f:40:bf:b0:7a:51:da:20:ed:a3:9e:56:fd:1d: 0a:16:24:ef:d8:bf:dc:78:9e:04:75:9b:88:fa:b5:bd:97:df: 9b:0e:b5:49:a0:d8:ab:8f:66:83:5b:6a:dd:eb:bd:c3:1b:83: 34:0f:d7:e6:37:c7:9a:cf:fd:4f:09:e5:d0:2a:b6:ee:63:bc: d6:6b:e2:0c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8TAjwKt+ZHbnopM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NmZjYmZhZDgtOTQ1Yy00YzA2LWI0MWYtY2FjYjY5NmIzNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCutRtJGIP31sxzj3yLuP5Q74rElJNd993YU KLNPv9IUcNck2JqzeUPbUrn9iOBYP6afmo9q1br8LPLxtHDsCQUhnG7TfsUQ/h/o 3hDnR0THTDzJ7jHrDBAP7d2tUe3ReW0PjHusy2eGkjuf1W72Ak23o38oqYb187BX 7gSDEyGLS2ZX0nJunVf+Iz33JA3c0AxFi4FtzRZmrZJqISIchMKuNeiFhXb9ted7 ENJTPWemWCyTkvSDr/1eT8o1z0NvhXzIvBHo8HW5ACCrk76jeHfAT5Nl/ptgcCfn 5ppmSf2CXp2aRXHMtp9ES3GuqCBCqks/vGQuTC4yCNO7diPDfQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKF7To7qj2+R+Tb2lx/I7JzOaAEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNkNjliZDItYjAzMi0z NzJiLThiMWEtMGI4Yjg1NjMzM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWxwCJH7kCnNhJyvyIWHdD9Zj5Zh+bxRJpDsJN76gE+LLYsHUwu55 T8q3HWxIX1ozzpxMIpoXsCUo4Eth4x+9R4bcT2LsSlppnIQIPEdQbzoFfkUXFsnu 4zQGMBA3lAOUr9GlEWJQiPBBNJftP2+cUl2UKHiHmnOkGMEMBKGJwsL1RJbV6k6f PjvW0+i6YE3XO6u9J9cQFVxVpDeJmI4DQBf9v5RhzCaimB6LJ65YlCxNYT6TK3A7 io9Av7B6Udog7aOeVv0dChYk79i/3HieBHWbiPq1vZffmw61SaDYq49mg1tq3eu9 wxuDNA/X5jfHms/9Twnl0Cq27mO81mviDA== -----END CERTIFICATE-----Generated at Sun Sep 20 21:54:16 2026 by rpki-client