$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8940e0b4-4d01-3d4b-af90-cd8dca4368b7.roa File: 8940e0b4-4d01-3d4b-af90-cd8dca4368b7.roa (raw, json) Hash identifier: cN6NaM5B0jqXaZl0PtrUTdSJT54mXTwRZRFgtV1Uq5k= Subject key identifier: CA:61:A7:61:03:E0:FC:80:8D:AC:8E:9F:10:E5:B6:FB:2D:C0:33:EF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B6253D2A99E2ECC11113CA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8940e0b4-4d01-3d4b-af90-cd8dca4368b7.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c020:4000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:53:d2:a9:9e:2e:cc:11:11:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=a197cf02-20b0-4f9c-8b17-fbb0c4ab96d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:7c:b1:37:a2:5e:66:c2:61:e4:e3:51:32: fd:39:1c:3d:ae:75:92:a5:6f:3e:3d:8f:f1:2a:73: 11:d0:2e:6b:ff:e2:2c:89:a3:c7:e6:17:ca:dd:59: 9f:b4:de:74:4a:c7:14:ea:87:87:b4:c7:75:24:ce: c2:08:3f:62:81:07:37:ea:6b:31:f5:06:16:68:e4: ea:c1:b0:d3:3f:cf:2b:f2:af:dd:93:b9:12:51:3e: e4:27:05:1a:54:be:86:b1:ae:8b:03:3b:c3:8e:77: f6:14:7f:ff:95:a9:59:e4:06:7c:36:64:1f:e0:92: 1f:8d:85:31:65:c3:61:65:19:77:20:d5:ad:95:b6: 1f:6a:d6:16:9a:77:fa:d3:72:ff:b6:88:93:8e:a7: bf:6b:d0:70:3e:92:c6:1b:c6:01:69:19:03:c9:7b: 02:2f:78:f4:f3:d0:e5:54:06:10:de:81:24:f2:ff: 63:25:a4:73:74:77:7f:bd:d6:62:72:3a:31:92:e5: 52:c2:b7:40:e4:01:51:cf:ef:15:52:00:12:c2:2c: 70:85:76:16:79:8f:71:57:b9:15:d3:d5:d3:c9:c4: cf:35:84:f0:9d:b1:9d:be:f0:b4:66:dd:76:b6:e6: f2:79:8d:e8:36:da:a9:43:4d:3d:8d:f8:fc:8e:f6: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:A7:61:03:E0:FC:80:8D:AC:8E:9F:10:E5:B6:FB:2D:C0:33:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8940e0b4-4d01-3d4b-af90-cd8dca4368b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c020:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:19:96:59:5c:ba:5a:bb:03:59:e0:60:b7:d3:fb:5b:e6:f3: cc:dd:c4:16:42:d9:01:9f:db:de:57:60:88:3c:52:8d:ec:3f: 9c:67:df:b2:0c:02:ad:b5:8b:6b:79:08:69:da:95:a9:c0:10: d0:7e:fc:28:f6:71:a3:de:a4:5c:54:67:0a:90:f8:c3:96:c6: 38:2c:0e:bb:33:d6:65:7b:c9:30:6a:df:47:e1:d8:41:1b:42: f6:f7:a5:9a:18:b7:12:fe:6d:33:f8:0b:4a:0a:c1:34:5f:77: c4:9f:1b:06:e7:15:81:c2:4c:9d:e0:13:e8:72:48:6b:53:f8: 06:ce:ca:3b:dd:8b:bf:f3:0e:d8:36:07:bd:19:ce:20:03:e7: f5:15:9d:22:3f:e1:fa:ac:f1:15:01:9d:d7:0d:c5:d2:e2:6a: 9e:17:26:77:ec:5b:c3:1d:59:a1:81:29:0e:32:4e:88:89:3d: 8f:b1:a7:39:57:42:6d:99:6a:90:7a:98:cb:d9:93:93:a5:b0: f1:3b:94:2b:43:53:d6:28:ea:fa:ce:4d:26:ee:0c:9f:53:13: df:4c:40:cc:aa:60:f9:ae:37:31:ed:bf:07:49:b0:a8:61:f8: aa:c5:2c:28:0c:32:a7:b9:38:8b:b7:47:32:b9:2f:92:c0:d9: 5c:d7:35:b9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8bYlPSqZ4uzBERPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YTE5N2NmMDItMjBiMC00ZjljLThiMTctZmJiMGM0YWI5NmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdR8sTeiXmbCYeTjUTL9ORw9rnWSpW8+PY/x KnMR0C5r/+IsiaPH5hfK3VmftN50SscU6oeHtMd1JM7CCD9igQc36msx9QYWaOTq wbDTP88r8q/dk7kSUT7kJwUaVL6Gsa6LAzvDjnf2FH//lalZ5AZ8NmQf4JIfjYUx ZcNhZRl3INWtlbYfatYWmnf603L/toiTjqe/a9BwPpLGG8YBaRkDyXsCL3j089Dl VAYQ3oEk8v9jJaRzdHd/vdZicjoxkuVSwrdA5AFRz+8VUgASwixwhXYWeY9xV7kV 09XTycTPNYTwnbGdvvC0Zt12tubyeY3oNtqpQ009jfj8jvanVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMphp2ED4PyAjayOnxDltvstwDPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODk0MGUwYjQtNGQwMS0z ZDRiLWFmOTAtY2Q4ZGNhNDM2OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAIEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALxmWWVy6WrsDWeBgt9P7W+bzzN3EFkLZAZ/b3ldgiDxSjew/nGff sgwCrbWLa3kIadqVqcAQ0H78KPZxo96kXFRnCpD4w5bGOCwOuzPWZXvJMGrfR+HY QRtC9velmhi3Ev5tM/gLSgrBNF93xJ8bBucVgcJMneAT6HJIa1P4Bs7KO92Lv/MO 2DYHvRnOIAPn9RWdIj/h+qzxFQGd1w3F0uJqnhcmd+xbwx1ZoYEpDjJOiIk9j7Gn OVdCbZlqkHqYy9mTk6Ww8TuUK0NT1ijq+s5NJu4Mn1MT30xAzKpg+a43Me2/B0mw qGH4qsUsKAwyp7k4i7dHMrkvksDZXNc1uQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:58:31 2026 by rpki-client