$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b624a2c-95e1-304f-b98e-a6ad0c526875.roa File: 3b624a2c-95e1-304f-b98e-a6ad0c526875.roa (raw, json) Hash identifier: 2unc/JWGqPDxRFJNjyNNzYM7Jj9sCuAWEOEs+5hwczE= Subject key identifier: 7A:F2:91:3B:85:1A:DF:1D:72:9B:F3:CD:DA:7E:FB:3C:8E:2B:59:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4987426CE9EA7C6BBCFDCA40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b624a2c-95e1-304f-b98e-a6ad0c526875.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 2603:c068::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:42:6c:e9:ea:7c:6b:bc:fd:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=371abe2a-4312-4703-9268-9065c299a00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:9a:8e:84:ac:67:5d:ec:13:8a:5c:70:a9: 63:bc:4a:de:2b:f1:e5:02:ce:50:d5:90:70:ac:32: b2:3e:4e:45:4c:0e:02:34:90:45:77:21:0e:2e:4d: 0a:02:cc:3a:e7:af:78:bc:3b:ca:a9:0a:34:3c:95: a7:cf:41:e9:1b:80:5b:4a:77:57:a0:a9:6a:57:de: 6f:96:eb:2b:04:9a:b8:6f:d1:51:17:51:f9:55:3a: f3:b6:d9:1a:49:56:13:60:db:2a:18:d5:be:38:f5: bc:a2:40:87:f9:5b:ca:de:b9:3c:30:0c:1c:75:61: f9:e8:3a:f0:3b:4d:04:8d:3d:63:47:f1:46:71:ec: cd:f3:33:95:8c:2c:73:f1:0f:0d:2c:57:5f:7e:19: b5:51:c0:6e:6e:f2:66:fe:cb:ea:f3:96:b8:47:7a: 5c:86:67:2c:b8:e0:24:02:f8:60:03:54:2c:6f:1a: 2f:ba:5d:51:32:4e:48:33:ac:44:97:34:c8:1f:e9: 81:fe:46:34:e9:bd:bd:3a:06:29:6e:ef:72:b7:c5: ac:b8:8b:2d:2f:23:85:e0:6b:52:a2:52:dc:05:2a: 16:01:23:76:a5:d9:00:b4:4d:37:9b:61:e9:7d:7f: 73:41:99:e7:13:69:d8:60:78:7f:9f:9a:57:d6:99: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F2:91:3B:85:1A:DF:1D:72:9B:F3:CD:DA:7E:FB:3C:8E:2B:59:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b624a2c-95e1-304f-b98e-a6ad0c526875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c068::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a9:70:ed:cc:18:22:08:35:f9:f0:02:bf:24:a6:48:71:86: 9b:8a:73:ad:0b:32:2b:a5:ed:a8:f8:da:5e:20:7d:fc:b5:af: 3d:d2:aa:20:bd:6e:c6:6b:86:d4:b4:90:65:8e:c3:de:aa:7c: 80:3a:31:20:52:60:da:a5:cf:58:ea:18:76:1d:bd:17:a0:62: fa:a9:07:8d:c4:51:2b:26:84:70:39:01:d5:36:1f:f8:27:ba: 0a:91:15:d5:47:eb:17:19:26:a2:03:86:2b:45:5b:e6:5e:e5: 3d:3a:3f:a4:ad:1a:29:d0:7a:ec:72:17:19:e8:e0:ce:89:f8: fb:3e:53:6d:1a:cf:43:a6:2f:eb:86:5d:1b:e7:4e:a2:e6:ce: 98:11:e1:5f:e6:04:3f:f6:32:68:03:98:1c:b4:fb:60:cc:bb: 72:1a:75:11:81:9f:1a:eb:f7:a9:7c:97:be:c8:1d:92:89:e7: cc:a7:80:47:08:01:df:c5:67:25:25:a6:8e:69:64:05:0b:e9: e7:ce:b0:5d:ba:df:a4:e6:7e:6c:eb:c7:1c:95:4d:1d:d8:ae: 57:f0:c6:fa:f5:67:8f:5e:0d:7b:58:86:c3:45:12:33:14:ea: d8:94:44:8d:d2:f6:fb:7e:2c:b2:ff:bf:f2:c4:a6:2d:dd:49: 99:81:fe:ee -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jh0Js6ep8a7z9ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzcxYWJlMmEtNDMxMi00NzAzLTkyNjgtOTA2NWMyOTlhMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi32ajoSsZ13sE4pccKljvEreK/HlAs5Q1ZBw rDKyPk5FTA4CNJBFdyEOLk0KAsw65694vDvKqQo0PJWnz0HpG4BbSndXoKlqV95v lusrBJq4b9FRF1H5VTrzttkaSVYTYNsqGNW+OPW8okCH+VvK3rk8MAwcdWH56Drw O00EjT1jR/FGcezN8zOVjCxz8Q8NLFdffhm1UcBubvJm/svq85a4R3pchmcsuOAk AvhgA1Qsbxovul1RMk5IM6xElzTIH+mB/kY06b29OgYpbu9yt8WsuIstLyOF4GtS olLcBSoWASN2pdkAtE03m2HpfX9zQZnnE2nYYHh/n5pX1pk8sQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHrykTuFGt8dcpvzzdp++zyOK1nHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2I2MjRhMmMtOTVlMS0z MDRmLWI5OGUtYTZhZDBjNTI2ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAaAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAI6lw7cwYIgg1+fACvySmSHGGm4pzrQsyK6XtqPjaXiB9/LWvPdKq IL1uxmuG1LSQZY7D3qp8gDoxIFJg2qXPWOoYdh29F6Bi+qkHjcRRKyaEcDkB1TYf +Ce6CpEV1UfrFxkmogOGK0Vb5l7lPTo/pK0aKdB67HIXGejgzon4+z5TbRrPQ6Yv 64ZdG+dOoubOmBHhX+YEP/YyaAOYHLT7YMy7chp1EYGfGuv3qXyXvsgdkonnzKeA RwgB38VnJSWmjmlkBQvp586wXbrfpOZ+bOvHHJVNHdiuV/DG+vVnj14Ne1iGw0US MxTq2JREjdL2+34ssv+/8sSmLd1JmYH+7g== -----END CERTIFICATE-----Generated at Sat Sep 26 14:49:43 2026 by rpki-client