$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/78d52719-03f1-37c9-a880-b6023f6e2a1d.roa File: 78d52719-03f1-37c9-a880-b6023f6e2a1d.roa (raw, json) Hash identifier: mHDEpP+mNCKf/kxxk+qKa4WMQvkMXvAlzcuow8lhHOU= Subject key identifier: 84:58:26:E9:0E:11:1B:66:1D:46:59:22:7F:19:B5:93:31:46:6C:69 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1CC798F18882E49D76A65680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/78d52719-03f1-37c9-a880-b6023f6e2a1d.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 2603:c028:4000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:98:f1:88:82:e4:9d:76:a6:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=e498a2a6-c3d1-4508-8a23-8a6a6dff16c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:7e:ac:fb:dc:ee:fd:08:3d:16:0d:27:98: 5d:c8:60:59:0b:c0:d5:14:8e:16:e2:2f:5d:5f:26: 5d:79:03:be:ac:3a:64:e9:56:d9:7e:c0:b1:1b:20: 2a:97:db:a0:13:92:e0:82:81:f7:bb:1d:e8:1a:2f: 91:b8:0b:d3:1e:f8:4e:0a:92:98:c3:24:21:20:f2: b5:26:a4:b1:60:75:ab:5a:f8:3b:76:cc:dd:83:44: e6:0e:38:65:6f:c9:98:c1:44:02:4a:9a:34:ea:38: 69:6a:96:e4:c1:e8:8f:f4:e2:8e:98:c9:63:80:42: 4d:02:42:d2:38:fe:84:9f:70:6c:20:ed:88:d7:4d: f2:9d:77:db:3a:15:4a:b6:51:18:b0:b3:1f:e9:24: b3:4d:e9:a7:e4:ed:bb:2a:7f:f4:51:a3:ef:64:46: 87:a0:36:0e:de:c4:ab:da:25:3d:f7:85:32:02:46: ab:23:70:ab:82:4a:4a:02:8b:21:64:cb:07:a1:de: a5:7f:af:83:8c:44:36:f8:61:59:a5:b4:97:ab:24: e3:38:5c:00:49:43:03:7e:76:7e:39:56:cb:7a:b5: 43:d5:7a:e8:c1:8e:de:4d:71:eb:f7:17:aa:af:68: e7:33:d2:d7:32:ab:8f:85:fd:0a:12:67:5c:33:25: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:58:26:E9:0E:11:1B:66:1D:46:59:22:7F:19:B5:93:31:46:6C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/78d52719-03f1-37c9-a880-b6023f6e2a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c028:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5f:af:42:c2:b5:05:58:23:ca:44:d9:ea:dd:25:a4:11:d5: d0:1c:26:47:2e:6c:01:f8:c4:2b:33:58:5a:eb:9f:20:eb:13: 04:84:1f:72:8e:08:45:d8:9e:9f:03:b4:c2:27:14:48:5b:5b: b7:d1:45:99:cc:eb:3f:33:13:1c:59:4a:bc:bb:b7:b0:55:b5: 5d:0a:d4:b4:54:91:8f:c9:61:3a:68:dd:6b:d4:cf:72:51:cb: ab:ad:37:10:03:27:cb:7f:95:ea:ba:45:6b:6c:c5:47:f5:64: 05:92:15:04:36:7c:12:06:81:e6:67:b7:9c:dd:14:fa:1f:67: a7:33:95:8f:59:96:84:4a:e3:95:c6:bd:f2:23:37:bd:f3:15: 63:a1:a9:31:65:f2:2d:e5:16:47:7c:b6:69:68:de:7b:74:29: a5:8b:7e:26:a2:7d:6f:b7:c9:25:df:66:32:c3:f8:ab:ce:6e: 4a:c2:06:fd:4e:98:bd:08:71:75:3b:a7:61:81:0d:dc:cf:17: 72:8b:98:57:a3:36:3b:10:7c:7e:d5:ed:66:93:50:30:34:05: 05:52:2a:1e:ae:2e:05:6b:c3:6f:7c:05:3d:8c:f8:94:f6:8c: 0a:3a:51:e9:b5:4b:19:db:b1:88:cf:75:57:88:10:8e:f3:73: 00:b8:f4:59 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8cx5jxiILknXamVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZTQ5OGEyYTYtYzNkMS00NTA4LThhMjMtOGE2YTZkZmYxNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEF+rPvc7v0IPRYNJ5hdyGBZC8DVFI4W4i9d XyZdeQO+rDpk6VbZfsCxGyAql9ugE5LggoH3ux3oGi+RuAvTHvhOCpKYwyQhIPK1 JqSxYHWrWvg7dszdg0TmDjhlb8mYwUQCSpo06jhpapbkweiP9OKOmMljgEJNAkLS OP6En3BsIO2I103ynXfbOhVKtlEYsLMf6SSzTemn5O27Kn/0UaPvZEaHoDYO3sSr 2iU994UyAkarI3CrgkpKAoshZMsHod6lf6+DjEQ2+GFZpbSXqyTjOFwASUMDfnZ+ OVbLerVD1XrowY7eTXHr9xeqr2jnM9LXMquPhf0KEmdcMyWRDwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIRYJukOERtmHUZZIn8ZtZMxRmxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzhkNTI3MTktMDNmMS0z N2M5LWE4ODAtYjYwMjNmNmUyYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAKEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaV+vQsK1BVgjykTZ6t0lpBHV0BwmRy5sAfjEKzNYWuufIOsTBIQf co4IRdienwO0wicUSFtbt9FFmczrPzMTHFlKvLu3sFW1XQrUtFSRj8lhOmjda9TP clHLq603EAMny3+V6rpFa2zFR/VkBZIVBDZ8EgaB5me3nN0U+h9npzOVj1mWhErj lca98iM3vfMVY6GpMWXyLeUWR3y2aWjee3QppYt+JqJ9b7fJJd9mMsP4q85uSsIG /U6YvQhxdTunYYEN3M8XcouYV6M2OxB8ftXtZpNQMDQFBVIqHq4uBWvDb3wFPYz4 lPaMCjpR6bVLGduxiM91V4gQjvNzALj0WQ== -----END CERTIFICATE-----Generated at Tue Sep 22 11:22:45 2026 by rpki-client