$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa File: 85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa (raw, json) Hash identifier: bIzT32wNoilL07pDNeMBirFhSmouXx1Lt31DiGZrslc= Subject key identifier: 8A:53:36:1B:66:52:0E:88:37:60:B8:AE:C3:94:4F:1E:8D:BC:C3:FB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD3BBB7DBEE00B743A280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c002:800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d3:bb:b7:db:ee:00:b7:43:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=7176f0b0-024a-48f3-bba2-1aa5524982d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:b9:67:98:72:68:b4:4f:7e:9d:d0:14:e7: 86:b7:97:cf:36:65:9f:1f:8b:f7:6f:4a:12:83:04: bf:79:a2:e3:a4:dd:a2:a5:05:6b:11:05:3a:16:9e: 9c:1e:a9:f5:48:bf:62:5e:09:89:d0:6a:bf:b4:2a: e2:e3:1d:8c:15:e1:c4:e1:64:1c:e8:40:3b:0c:12: fa:d0:62:22:b9:0e:a6:62:16:d6:73:d2:34:07:86: 12:48:32:fe:b0:1c:9a:23:99:a5:d2:3d:b9:a9:17: 31:2f:ce:e2:d2:f4:f5:9c:d5:ba:92:95:7b:a3:4c: 34:3f:92:69:e1:d8:74:f9:78:a6:8f:ff:d0:0c:50: aa:3b:a6:0a:80:8e:86:d5:0a:c3:e7:57:e3:a3:ce: 9d:c8:9c:ab:29:a6:37:47:e5:25:29:64:b1:7d:da: 3c:e1:c1:05:c4:45:66:f5:5e:7a:0a:b4:fc:6f:3a: 4a:81:d9:e3:ea:2c:4d:dc:5b:1d:8e:58:24:96:c8: ff:d5:0f:3a:ab:fb:a4:98:d1:70:18:11:d7:35:70: 48:b3:2d:74:a3:20:c5:de:ef:e0:90:45:b5:0c:17: 10:82:d0:3e:7a:1f:05:15:47:2d:db:f2:66:19:43: f7:80:07:8d:67:e9:60:48:8e:fc:ff:52:9a:5d:74: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:53:36:1B:66:52:0E:88:37:60:B8:AE:C3:94:4F:1E:8D:BC:C3:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e1:33:7b:c7:5a:f3:2f:03:4f:ee:75:03:03:97:e4:b8:17: ba:c2:6e:8b:4b:5e:f8:df:b5:46:95:93:78:25:79:3b:71:1f: d2:22:a4:a8:e8:6f:ad:21:6e:43:47:71:ff:c0:fa:f0:20:2b: 90:61:26:06:25:06:5b:90:e6:54:24:5e:da:64:a8:cd:5e:47: 7e:af:08:d9:21:18:05:91:ed:06:6e:7d:3c:cc:9f:0d:81:54: aa:8f:39:6a:b0:e3:fb:30:57:79:f8:f0:22:15:25:5a:69:48: 86:e4:c7:dd:8b:24:75:cc:dd:18:ee:b6:88:d1:13:3d:a3:cc: 03:5d:9f:07:9d:91:a1:f5:a9:0d:1c:26:b4:01:a9:69:bb:18: 45:ad:e3:f0:98:97:5b:df:30:7b:f5:0f:c0:99:e6:5a:96:c8: ad:25:32:08:61:fb:7a:c7:cd:cb:d4:1f:95:b9:a4:e1:fb:bc: 47:69:c3:a4:ec:35:b0:2d:0c:d5:47:bb:72:4b:ac:2a:bc:e9: ee:07:2a:34:53:80:03:eb:a4:d6:5e:e0:11:61:0e:3f:fd:f7: 58:c4:40:60:29:0e:fd:b9:d9:a5:98:57:f4:b9:e0:3f:e7:18: c7:a0:c6:be:c6:9b:ab:92:a3:d2:d2:a5:1a:3d:ea:fb:5c:88: a0:f5:56:6c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8NbNO7t9vuALdDooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NzE3NmYwYjAtMDI0YS00OGYzLWJiYTItMWFhNTUyNDk4MmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvq5Z5hyaLRPfp3QFOeGt5fPNmWfH4v3b0oS gwS/eaLjpN2ipQVrEQU6Fp6cHqn1SL9iXgmJ0Gq/tCri4x2MFeHE4WQc6EA7DBL6 0GIiuQ6mYhbWc9I0B4YSSDL+sByaI5ml0j25qRcxL87i0vT1nNW6kpV7o0w0P5Jp 4dh0+Ximj//QDFCqO6YKgI6G1QrD51fjo86dyJyrKaY3R+UlKWSxfdo84cEFxEVm 9V56CrT8bzpKgdnj6ixN3Fsdjlgklsj/1Q86q/ukmNFwGBHXNXBIsy10oyDF3u/g kEW1DBcQgtA+eh8FFUct2/JmGUP3gAeNZ+lgSI78/1KaXXQwpwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIpTNhtmUg6IN2C4rsOUTx6NvMP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODViZmUzMmEtMWY4YS0z YmU1LTlmZDgtNmUzZGE1NjhiMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAggw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbuEze8da8y8DT+51AwOX5LgXusJui0te+N+1RpWTeCV5O3Ef0iKk qOhvrSFuQ0dx/8D68CArkGEmBiUGW5DmVCRe2mSozV5Hfq8I2SEYBZHtBm59PMyf DYFUqo85arDj+zBXefjwIhUlWmlIhuTH3YskdczdGO62iNETPaPMA12fB52RofWp DRwmtAGpabsYRa3j8JiXW98we/UPwJnmWpbIrSUyCGH7esfNy9Qflbmk4fu8R2nD pOw1sC0M1Ue7ckusKrzp7gcqNFOAA+uk1l7gEWEOP/33WMRAYCkO/bnZpZhX9Lng P+cYx6DGvsabq5Kj0tKlGj3q+1yIoPVWbA== -----END CERTIFICATE-----Generated at Tue Sep 22 16:33:50 2026 by rpki-client