$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa File: 474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa (raw, json) Hash identifier: jDdX46yih+ZFERW+80LepgcaAkHBP+JWObzokWwzfwU= Subject key identifier: 96:47:C0:52:69:49:85:FB:A2:B8:7E:20:5B:95:84:1A:B9:E7:B3:51 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093D172A5531E32E7458E400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 2603:c002:8e00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:17:2a:55:31:e3:2e:74:58:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=b9e8d7f0-fcd6-475c-bc80-7acb07a2bef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:d1:fa:91:d4:aa:01:f2:a9:4a:6c:21:28: 2c:b6:ce:b8:81:9c:28:23:12:aa:30:29:38:02:96: 69:8b:eb:bd:fc:ea:a1:27:7f:16:cb:49:99:a9:c5: cc:1e:fd:91:f3:c5:24:54:23:56:61:f2:e0:cf:92: 5f:0d:04:1d:e4:0d:63:68:85:ce:ca:a3:51:8d:4e: b7:1f:d6:ba:3c:0c:5b:8f:96:26:96:8a:08:a9:f9: ba:d4:0a:94:9e:cc:e8:09:a3:23:f8:bf:03:37:b1: e6:90:e0:bb:02:cf:21:9f:97:71:ca:83:50:92:2a: 3e:b5:8c:3c:a3:ba:4f:0d:10:7c:1d:6e:19:3b:58: 25:52:ed:6b:67:c3:3b:30:a9:15:bd:49:78:80:a0: b6:b2:ad:ec:00:15:20:46:46:ad:31:8c:da:a8:08: f5:23:13:b0:28:af:de:c6:87:f7:1d:b6:0a:71:e0: 90:36:e6:d4:64:71:d4:aa:3d:a9:79:e4:b6:c2:45: 90:1e:7f:ed:c3:32:c7:e0:e7:b0:a2:80:67:69:88: 1d:54:fe:f9:a8:c7:b1:9a:ec:32:53:83:c1:81:af: c8:04:a3:1b:2c:22:ab:dd:26:70:9e:57:06:2f:90: b3:e1:bd:2f:a2:b3:4d:0e:7a:ef:16:75:ca:87:54: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:47:C0:52:69:49:85:FB:A2:B8:7E:20:5B:95:84:1A:B9:E7:B3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/474ee0bf-2236-3cd3-939e-3fa4bb90a1eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:8e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a0:75:70:5f:8a:bc:7b:6a:9f:3c:5d:a8:35:df:c0:5c:8d: 30:55:b0:c8:fe:ea:4d:98:23:57:06:bd:fe:ab:9b:03:27:55: 07:cf:70:d1:8d:c5:e3:9b:ac:a8:a7:93:88:e8:fd:4e:90:81: 39:53:21:53:64:0d:b0:94:9c:eb:e5:5e:f8:82:d3:97:f6:8c: 80:67:b0:a2:0e:e4:e5:d8:3e:0b:ff:3b:ec:b8:8a:7a:38:93: 79:33:4a:0f:5e:b9:76:59:9b:d1:d2:8c:b3:58:94:07:87:45: b4:19:7e:ec:4a:64:5f:80:b2:bf:f8:4a:f2:31:b5:53:f6:12: 73:74:4a:ff:33:bc:ce:6a:bc:74:f9:ed:db:36:22:bc:6a:c8: c6:17:11:4e:fc:2e:ca:7e:1c:c9:5f:e0:eb:3e:9f:57:5e:76: c2:94:64:0e:45:ce:3f:5d:3c:0e:3d:ee:a0:73:58:f2:bc:8c: fe:c3:ec:68:0d:40:b5:9a:2e:0d:a4:bd:9c:00:55:31:5d:44: 70:1f:dc:e9:c6:a4:96:65:1b:5e:e5:66:d5:3c:29:b0:4c:99: b7:11:ac:ed:aa:17:6c:6a:c7:cf:30:8f:1a:3e:91:b3:10:f2: d0:23:5b:b1:de:ae:4c:3a:b2:86:b0:cc:80:08:f6:0e:b7:ab: 2f:d5:bb:40 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPRcqVTHjLnRY5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YjllOGQ3ZjAtZmNkNi00NzVjLWJjODAtN2FjYjA3YTJiZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujPR+pHUqgHyqUpsISgsts64gZwoIxKqMCk4 ApZpi+u9/OqhJ38Wy0mZqcXMHv2R88UkVCNWYfLgz5JfDQQd5A1jaIXOyqNRjU63 H9a6PAxbj5YmlooIqfm61AqUnszoCaMj+L8DN7HmkOC7As8hn5dxyoNQkio+tYw8 o7pPDRB8HW4ZO1glUu1rZ8M7MKkVvUl4gKC2sq3sABUgRkatMYzaqAj1IxOwKK/e xof3HbYKceCQNubUZHHUqj2peeS2wkWQHn/twzLH4OewooBnaYgdVP75qMexmuwy U4PBga/IBKMbLCKr3SZwnlcGL5Cz4b0vorNNDnrvFnXKh1SFZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJZHwFJpSYX7orh+IFuVhBq557NRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDc0ZWUwYmYtMjIzNi0z Y2QzLTkzOWUtM2ZhNGJiOTBhMWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAo4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASaB1cF+KvHtqnzxdqDXfwFyNMFWwyP7qTZgjVwa9/qubAydVB89w 0Y3F45usqKeTiOj9TpCBOVMhU2QNsJSc6+Ve+ILTl/aMgGewog7k5dg+C/877LiK ejiTeTNKD165dlmb0dKMs1iUB4dFtBl+7EpkX4Cyv/hK8jG1U/YSc3RK/zO8zmq8 dPnt2zYivGrIxhcRTvwuyn4cyV/g6z6fV152wpRkDkXOP108Dj3uoHNY8ryM/sPs aA1AtZouDaS9nABVMV1EcB/c6caklmUbXuVm1TwpsEyZtxGs7aoXbGrHzzCPGj6R sxDy0CNbsd6uTDqyhrDMgAj2DrerL9W7QA== -----END CERTIFICATE-----Generated at Tue Sep 22 11:02:56 2026 by rpki-client