$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/54ac3cf1-38b0-36aa-bec5-473798a2d021.roa File: 54ac3cf1-38b0-36aa-bec5-473798a2d021.roa (raw, json) Hash identifier: NoQzsIefF0A3NRinOuFn89O8zkrN51FeBzPLSNPMyFU= Subject key identifier: 04:0C:AF:56:B0:E2:D6:69:42:AB:13:27:C4:E7:96:27:CA:95:AD:D9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CDF6953877D64CF49E600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/54ac3cf1-38b0-36aa-bec5-473798a2d021.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 2603:c058:2900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:df:69:53:87:7d:64:cf:49:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=a4634083-aab2-4fed-8976-f3f88d84f7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:e5:6d:ad:0e:48:4c:91:78:70:c8:a2:c5: e3:55:8f:f2:b9:af:91:c1:8d:03:fc:a1:be:9b:d7: a5:e7:51:db:0f:51:7a:12:e1:fc:7b:4b:57:6b:d8: 31:a4:f0:28:f9:55:56:10:8e:54:40:d1:60:8a:5c: 68:14:d9:4a:78:66:16:82:3a:54:2b:bb:d9:fc:9b: 6e:35:8b:c8:2e:a6:d4:8e:56:13:08:69:85:ca:51: 96:8f:f3:09:af:e2:dc:69:cd:0b:cf:96:08:e8:2f: 5a:cb:1c:2e:31:55:6c:21:27:d2:cd:20:f4:8c:cd: b6:1f:f0:82:bd:fd:54:66:ec:7b:de:11:99:51:f9: 9d:f0:a6:5a:e6:08:3a:10:14:be:d8:97:db:1f:75: ee:2e:69:d5:d8:76:57:ef:6c:f9:84:58:b4:9c:52: d9:eb:68:df:02:f8:b2:58:1e:c3:30:f4:1d:91:ca: e9:e2:70:04:19:56:17:2e:34:4d:61:c7:43:c8:28: 8a:b7:e7:18:00:10:b9:8a:3d:12:13:95:c2:a6:a5: 43:4c:ab:56:f1:27:84:30:19:d3:25:53:ed:8b:36: 28:a5:0a:fa:7e:ea:9f:69:0f:67:c3:ba:60:f3:ed: 89:6a:7a:a6:7c:e9:b1:c5:27:de:45:49:87:85:17: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0C:AF:56:B0:E2:D6:69:42:AB:13:27:C4:E7:96:27:CA:95:AD:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/54ac3cf1-38b0-36aa-bec5-473798a2d021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c058:2900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:24:33:fc:00:cd:ce:e9:a7:94:fb:3d:00:74:8d:1b:9e:1f: 40:d6:ca:af:85:3a:a3:9b:08:09:97:27:48:51:b4:b5:1c:72: 95:4f:a5:6b:87:a2:86:c9:83:25:6d:64:9a:d0:0b:c1:41:b4: 6a:1b:c9:3d:1e:b5:b1:51:e1:ab:0f:32:d6:41:5c:0d:2a:54: 06:35:79:8d:79:f4:5f:09:3e:5f:f3:74:84:57:55:e9:b4:38: 1b:60:90:68:a7:56:fa:95:7e:ba:e8:f5:a0:3c:03:70:30:66: 83:ca:56:84:d0:08:2a:f0:6b:73:dd:13:c2:33:6f:72:e7:cb: da:b2:30:bc:84:e5:be:75:ca:4e:7e:7e:2c:1f:b2:c8:00:b0: 31:74:15:4f:2c:31:44:b5:a8:bd:db:48:05:41:c8:a1:31:01: b6:57:fc:d9:a9:7c:56:d9:d6:b8:38:37:2c:93:62:3f:1e:44: 2f:dc:54:8c:41:26:ef:47:a2:66:9c:05:0d:ad:31:21:5e:60: 65:e0:5d:90:84:5f:f3:43:39:74:c3:03:a5:1b:b3:57:b7:4f: 3d:31:7d:d9:f7:af:e2:c1:56:6c:bc:c0:0f:68:72:0d:f8:6c: 00:23:a3:fd:af:68:35:7a:96:25:98:85:6d:ba:cb:34:4f:5f: c5:7b:aa:0a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPN9pU4d9ZM9J5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YTQ2MzQwODMtYWFiMi00ZmVkLTg5NzYtZjNmODhkODRmN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Llba0OSEyReHDIosXjVY/yua+RwY0D/KG+ m9el51HbD1F6EuH8e0tXa9gxpPAo+VVWEI5UQNFgilxoFNlKeGYWgjpUK7vZ/Jtu NYvILqbUjlYTCGmFylGWj/MJr+Lcac0Lz5YI6C9ayxwuMVVsISfSzSD0jM22H/CC vf1UZux73hGZUfmd8KZa5gg6EBS+2JfbH3XuLmnV2HZX72z5hFi0nFLZ62jfAviy WB7DMPQdkcrp4nAEGVYXLjRNYcdDyCiKt+cYABC5ij0SE5XCpqVDTKtW8SeEMBnT JVPtizYopQr6fuqfaQ9nw7pg8+2JanqmfOmxxSfeRUmHhRdh2wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAQMr1aw4tZpQqsTJ8TnlifKla3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTRhYzNjZjEtMzhiMC0z NmFhLWJlYzUtNDczNzk4YTJkMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAWCkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATCQz/ADNzumnlPs9AHSNG54fQNbKr4U6o5sICZcnSFG0tRxylU+l a4eihsmDJW1kmtALwUG0ahvJPR61sVHhqw8y1kFcDSpUBjV5jXn0Xwk+X/N0hFdV 6bQ4G2CQaKdW+pV+uuj1oDwDcDBmg8pWhNAIKvBrc90TwjNvcufL2rIwvITlvnXK Tn5+LB+yyACwMXQVTywxRLWovdtIBUHIoTEBtlf82al8VtnWuDg3LJNiPx5EL9xU jEEm70eiZpwFDa0xIV5gZeBdkIRf80M5dMMDpRuzV7dPPTF92fev4sFWbLzAD2hy DfhsACOj/a9oNXqWJZiFbbrLNE9fxXuqCg== -----END CERTIFICATE-----Generated at Fri Sep 25 20:52:35 2026 by rpki-client