$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/852598ea-5dba-3b59-a531-3849382f70a2.roa File: 852598ea-5dba-3b59-a531-3849382f70a2.roa (raw, json) Hash identifier: GlylciDFJMoJrE/b3NnFv/oT2BhfOVUSuPR+lgCZKkM= Subject key identifier: 5E:70:E7:06:7B:4E:B2:67:8D:63:F1:AB:46:96:15:B9:B4:D7:72:45 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0AA22F58AD2C6FA917495880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/852598ea-5dba-3b59-a531-3849382f70a2.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c001:4800::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2f:58:ad:2c:6f:a9:17:49:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=71df1dec-1511-40c3-a187-38880541ddd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:54:cf:7f:6f:48:4b:a8:71:0d:46:58:e1: 54:4a:be:85:c6:da:b0:59:fd:99:c7:0a:5c:59:39: cc:f5:2d:fb:e5:d5:75:ec:5f:fb:43:ff:16:6c:c8: 88:d8:d1:26:7c:03:cd:45:6a:d3:7b:52:da:60:9d: c4:c8:77:9f:3b:5c:07:f6:24:87:4b:d7:d5:e0:ac: 4f:c3:f4:55:bc:1b:37:b5:84:88:d8:01:87:4e:89: a3:19:e2:c2:39:a4:4f:bc:b5:e7:de:68:72:7a:a3: 90:5d:dd:dc:36:61:e3:eb:73:53:d2:92:6a:9a:58: e8:f9:63:29:48:89:b4:99:dd:ac:c3:69:13:a8:b7: 25:c2:34:8b:8f:e0:f0:0c:d6:00:51:cc:bd:be:c0: 8a:71:0d:7c:d7:15:a4:c7:83:65:18:1a:bd:a2:96: c9:4d:13:cc:07:2b:fd:42:14:c8:c7:bd:73:31:fd: 13:0a:db:50:45:cb:e9:37:fb:9f:98:7b:19:b0:5e: 87:6a:9a:0d:29:af:24:19:a7:8b:b8:84:81:f2:82: 00:50:5e:e2:90:cc:a2:fb:89:9d:bd:a2:2d:9a:16: 74:ba:92:c3:29:2d:22:c0:b7:31:97:07:00:8a:ca: e5:44:a0:8e:ea:0c:27:dd:c6:73:da:e2:a4:24:de: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:70:E7:06:7B:4E:B2:67:8D:63:F1:AB:46:96:15:B9:B4:D7:72:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/852598ea-5dba-3b59-a531-3849382f70a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c001:4800::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1e:dc:5b:b8:3f:e1:0b:31:d1:30:80:7e:38:65:76:f4:47: 76:c7:d3:cb:f7:52:b5:58:c1:ad:76:e2:17:20:16:cf:b0:6c: b6:0d:f1:ca:a0:72:5c:6c:07:ee:f0:8e:40:8d:7d:01:f6:4c: dc:77:22:94:c6:9a:9b:97:86:a1:89:7c:17:f6:0a:1d:8b:aa: 51:e9:74:90:0d:32:36:47:81:e9:7e:3b:b3:62:4f:9a:c4:f1: ad:8d:a9:a1:1e:e8:4f:49:93:f7:92:0d:df:e1:b0:9c:9f:9d: fe:2a:bb:d1:37:e5:44:1f:79:8e:e7:0e:76:c3:8f:86:3f:16: d8:30:20:94:d3:d0:d5:30:67:74:d3:ae:ed:20:0c:d0:37:a9: 08:17:08:c5:e2:09:21:ef:00:ad:c0:2d:57:8f:44:83:4e:3d: c6:53:72:ca:0a:91:37:24:92:eb:07:15:21:82:af:83:91:f2: 09:a5:3a:f5:a3:96:8e:c4:33:4e:3a:68:c1:e2:24:fb:e1:d8: 4c:65:2c:16:c4:71:10:ee:27:1b:a6:c0:a1:65:58:92:e6:05: a2:90:c5:f1:5b:4d:e2:ff:23:17:14:d1:52:ca:95:70:b6:4c: 73:0d:72:0b:d2:00:07:d8:31:09:63:5f:00:60:5f:4f:37:26: 2c:a5:8b:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8Koi9YrSxvqRdJWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk NzFkZjFkZWMtMTUxMS00MGMzLWExODctMzg4ODA1NDFkZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuklUz39vSEuocQ1GWOFUSr6FxtqwWf2Zxwpc WTnM9S375dV17F/7Q/8WbMiI2NEmfAPNRWrTe1LaYJ3EyHefO1wH9iSHS9fV4KxP w/RVvBs3tYSI2AGHTomjGeLCOaRPvLXn3mhyeqOQXd3cNmHj63NT0pJqmljo+WMp SIm0md2sw2kTqLclwjSLj+DwDNYAUcy9vsCKcQ181xWkx4NlGBq9opbJTRPMByv9 QhTIx71zMf0TCttQRcvpN/ufmHsZsF6HapoNKa8kGaeLuISB8oIAUF7ikMyi+4md vaItmhZ0upLDKS0iwLcxlwcAisrlRKCO6gwn3cZz2uKkJN6grQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF5w5wZ7TrJnjWPxq0aWFbm013JFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODUyNTk4ZWEtNWRiYS0z YjU5LWE1MzEtMzg0OTM4MmY3MGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAUgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkB7cW7g/4Qsx0TCAfjhldvRHdsfTy/dStVjBrXbiFyAWz7Bstg3x yqByXGwH7vCOQI19AfZM3HcilMaam5eGoYl8F/YKHYuqUel0kA0yNkeB6X47s2JP msTxrY2poR7oT0mT95IN3+GwnJ+d/iq70TflRB95jucOdsOPhj8W2DAglNPQ1TBn dNOu7SAM0DepCBcIxeIJIe8ArcAtV49Eg049xlNyygqRNySS6wcVIYKvg5HyCaU6 9aOWjsQzTjpoweIk++HYTGUsFsRxEO4nG6bAoWVYkuYFopDF8VtN4v8jFxTRUsqV cLZMcw1yC9IAB9gxCWNfAGBfTzcmLKWLaQ== -----END CERTIFICATE-----Generated at Tue Sep 22 22:08:02 2026 by rpki-client