$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d00231a-c1e9-32e9-8bcd-2e46d52b09a0.roa File: 2d00231a-c1e9-32e9-8bcd-2e46d52b09a0.roa (raw, json) Hash identifier: 2PnhuEGiXAe+H6+SJmFhqI06wFvZcb5ZDA8Jc4zFg8c= Subject key identifier: F0:80:61:63:91:F9:9A:26:09:B4:70:9E:83:9F:0C:9D:3D:FB:C0:F3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CE6876A871D9771765C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d00231a-c1e9-32e9-8bcd-2e46d52b09a0.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c002:9800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e6:87:6a:87:1d:97:71:76:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=3739d52f-310c-4d2a-b2d1-fbaf7356c712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:97:f8:f2:5c:11:f5:12:94:02:52:36:7c: a0:08:70:5f:35:ef:3d:59:b9:b9:88:94:c6:3d:e4: 01:58:37:33:99:48:c0:4c:0a:32:2c:08:61:c5:90: c2:30:ef:92:79:c0:50:b0:34:04:4f:d6:5d:dd:59: ff:8a:bd:89:ca:60:67:7f:91:dc:e8:6a:d2:c6:8b: 92:6e:57:fa:37:6b:49:36:68:36:ed:4e:e2:c3:22: 63:f2:f9:0e:8f:df:b6:4d:a4:76:7d:60:0a:3d:03: 7c:80:1d:9f:5e:29:b9:9d:48:8f:13:db:d8:39:4e: 97:c8:a3:6e:56:89:1e:34:c9:c5:21:00:45:50:9f: da:dc:7f:50:10:58:48:24:82:28:e2:9d:47:89:e8: 04:be:76:3e:77:2a:6b:c4:c8:4d:dd:9d:2a:97:11: 37:8a:4f:e4:05:47:2d:dd:d3:05:a2:26:11:0c:a7: e5:a2:8c:33:59:48:90:1b:d7:75:ad:24:36:a4:28: 23:8f:ad:6f:60:76:0c:0a:e5:dc:5d:f0:af:bb:6f: ae:9a:79:b1:be:e4:6e:c7:e9:1d:0e:7b:e7:f0:2e: 5b:bf:6e:10:52:3c:e2:0e:42:e7:5c:8c:3c:58:d5: 14:88:33:05:ed:99:87:ca:20:54:cc:ab:9d:a7:c6: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:80:61:63:91:F9:9A:26:09:B4:70:9E:83:9F:0C:9D:3D:FB:C0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2d00231a-c1e9-32e9-8bcd-2e46d52b09a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:9800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f1:e1:93:9b:fc:67:4a:d6:d0:96:3d:82:c3:1e:3a:60:b1: 21:0a:ed:86:20:39:c5:d0:cf:a5:45:c0:0c:bf:ed:3f:88:19: 64:67:e5:17:8c:0b:0a:05:55:1c:f8:82:c8:51:1c:83:8d:72: 16:66:96:75:41:0a:2c:48:44:59:d9:29:7e:46:50:99:98:25: 20:c3:81:a5:7a:21:87:dc:3b:59:fe:37:45:fb:ca:37:e4:59: 12:86:13:8d:60:d7:83:f5:7f:a0:c8:14:7b:8f:2a:53:74:81: 31:2b:e0:6f:e0:24:8c:c3:35:43:31:a7:a7:53:25:55:7e:35: 08:00:1a:f0:af:9e:9b:ff:27:26:25:52:73:28:c8:7f:b2:ba: 8d:43:ae:16:f0:64:96:cc:5e:89:72:e8:22:6c:c6:4c:9e:a0: 5f:de:dd:c8:9c:98:9d:ed:f5:c9:1a:a0:bb:6e:dd:21:22:81: 79:eb:17:27:01:a4:65:fe:9d:9a:83:e1:ec:7c:4e:80:51:6e: 50:5d:95:85:cf:99:18:71:64:5d:76:b1:62:a7:e4:ce:43:9d: b8:81:43:b0:5a:fd:8a:e8:d8:21:55:ad:75:77:63:62:7c:ed: 84:b6:2a:9a:5e:23:d6:b8:f7:6f:70:2f:40:4f:3f:65:75:3a: 12:de:25:d1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8NbOaHaocdl3F2XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MzczOWQ1MmYtMzEwYy00ZDJhLWIyZDEtZmJhZjczNTZjNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzmX+PJcEfUSlAJSNnygCHBfNe89Wbm5iJTG PeQBWDczmUjATAoyLAhhxZDCMO+SecBQsDQET9Zd3Vn/ir2JymBnf5Hc6GrSxouS blf6N2tJNmg27U7iwyJj8vkOj9+2TaR2fWAKPQN8gB2fXim5nUiPE9vYOU6XyKNu VokeNMnFIQBFUJ/a3H9QEFhIJIIo4p1HiegEvnY+dyprxMhN3Z0qlxE3ik/kBUct 3dMFoiYRDKfloowzWUiQG9d1rSQ2pCgjj61vYHYMCuXcXfCvu2+umnmxvuRux+kd Dnvn8C5bv24QUjziDkLnXIw8WNUUiDMF7ZmHyiBUzKudp8YqUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPCAYWOR+ZomCbRwnoOfDJ09+8DzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmQwMDIzMWEtYzFlOS0z MmU5LThiY2QtMmU0NmQ1MmIwOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAApgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHfHhk5v8Z0rW0JY9gsMeOmCxIQrthiA5xdDPpUXADL/tP4gZZGfl F4wLCgVVHPiCyFEcg41yFmaWdUEKLEhEWdkpfkZQmZglIMOBpXohh9w7Wf43RfvK N+RZEoYTjWDXg/V/oMgUe48qU3SBMSvgb+AkjMM1QzGnp1MlVX41CAAa8K+em/8n JiVScyjIf7K6jUOuFvBklsxeiXLoImzGTJ6gX97dyJyYne31yRqgu27dISKBeesX JwGkZf6dmoPh7HxOgFFuUF2Vhc+ZGHFkXXaxYqfkzkOduIFDsFr9iujYIVWtdXdj YnzthLYqml4j1rj3b3AvQE8/ZXU6Et4l0Q== -----END CERTIFICATE-----Generated at Mon Sep 21 23:47:43 2026 by rpki-client