$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4b7afc-31ab-35f1-a55a-910b07cfcd78.roa File: 9f4b7afc-31ab-35f1-a55a-910b07cfcd78.roa (raw, json) Hash identifier: dXhbSJfc82n44BsrmRYlp5fOY60Rw7FxmVIdNeUbolk= Subject key identifier: C6:DA:51:D6:41:5D:9D:1C:E0:15:60:C1:00:46:54:CB:B7:74:DA:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F497389D8B3CE4B5473B9FB20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4b7afc-31ab-35f1-a55a-910b07cfcd78.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 2603:c066::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:89:d8:b3:ce:4b:54:73:b9:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4448a6dd-f4e5-46ce-b07c-0293b445c42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:d9:ed:c8:5b:d7:04:61:e1:99:67:f3:b9: ae:34:4a:7c:a1:ac:07:c2:e0:23:f0:bd:a4:38:9c: 80:14:a3:99:a9:f0:a7:e7:8b:53:e5:89:ca:ac:f0: d6:b0:93:26:e2:f0:8a:72:e2:bd:16:73:75:08:3e: 47:d2:41:57:5c:21:b5:eb:75:d1:92:ad:34:6d:36: 2e:9e:ab:80:05:d3:51:80:0c:f3:29:41:b9:fc:1a: 18:16:97:1f:69:a8:ac:c8:59:35:f2:09:95:bf:ff: 0c:97:8d:6f:30:be:f4:40:6f:29:dd:33:46:99:bd: a5:b9:0d:23:d2:60:79:34:7e:a5:1a:c7:d0:75:6e: 98:4a:70:1a:d0:f2:a2:63:a9:80:9a:50:5b:91:66: 98:8f:78:4c:96:56:b3:26:d9:75:ed:9e:66:96:8c: 28:fe:ba:d9:41:d7:be:4c:5b:2c:86:c4:2f:78:c0: 32:50:19:f5:a5:8c:a7:6f:7b:1c:4c:c2:88:2b:6c: fa:c0:2f:c0:7d:03:32:32:f0:44:81:7e:c6:2b:c3: fb:77:b5:43:e9:8f:e2:2f:b7:5d:45:ba:49:55:99: 91:3e:67:da:82:de:d6:dd:db:a5:8f:35:e3:b7:08: 23:74:eb:99:e6:fd:33:85:53:51:e6:95:23:13:35: 75:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DA:51:D6:41:5D:9D:1C:E0:15:60:C1:00:46:54:CB:B7:74:DA:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4b7afc-31ab-35f1-a55a-910b07cfcd78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c066::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:86:32:6f:3c:6f:b3:45:c2:41:5f:5a:c5:87:1c:d7:72:89: d9:90:43:2e:c4:22:29:39:35:44:6f:66:2e:61:3d:55:2b:eb: f6:2c:dc:4a:10:78:9c:1d:94:8f:c2:2f:91:ea:c1:81:48:77: 3a:89:4c:b1:3e:f4:71:6b:49:c1:73:f7:bf:3f:f8:5f:2f:67: 2c:70:de:82:c4:ad:06:1b:19:cf:ef:2c:f4:0c:ff:20:f0:93: 37:b5:f3:7b:9b:cf:99:34:e0:32:dd:61:99:62:b3:b2:ec:5b: 55:49:25:9d:18:ff:ee:a8:6d:d4:a4:56:c1:96:a1:30:62:69: e8:18:c1:4a:83:06:0c:3a:5a:df:e1:aa:cc:04:68:d5:88:a4: 5f:25:50:67:38:db:6c:fd:fc:3d:5c:d9:d8:be:7e:4f:7f:5f: e7:e5:86:04:14:34:6a:e1:13:ff:24:95:6c:8b:0a:59:1b:e6: 59:ec:ac:7f:76:ab:6c:6c:b0:0f:4e:65:c0:d8:2c:da:11:63: 2e:14:57:bc:7e:7c:62:91:59:6a:dd:1c:46:20:43:5c:e9:ab: da:81:45:0e:6f:d6:43:13:5b:ce:9a:e9:66:54:65:95:c3:3f: 13:a5:b4:df:8e:5b:54:0e:f2:c6:90:77:da:bd:86:7b:46:04: 3e:fa:70:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc4nYs85LVHO5+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDQ0OGE2ZGQtZjRlNS00NmNlLWIwN2MtMDI5M2I0NDVjNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk/Z7chb1wRh4Zln87muNEp8oawHwuAj8L2k OJyAFKOZqfCn54tT5YnKrPDWsJMm4vCKcuK9FnN1CD5H0kFXXCG163XRkq00bTYu nquABdNRgAzzKUG5/BoYFpcfaaisyFk18gmVv/8Ml41vML70QG8p3TNGmb2luQ0j 0mB5NH6lGsfQdW6YSnAa0PKiY6mAmlBbkWaYj3hMllazJtl17Z5mlowo/rrZQde+ TFsshsQveMAyUBn1pYynb3scTMKIK2z6wC/AfQMyMvBEgX7GK8P7d7VD6Y/iL7dd RbpJVZmRPmfagt7W3duljzXjtwgjdOuZ5v0zhVNR5pUjEzV14QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMbaUdZBXZ0c4BVgwQBGVMu3dNrBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY0YjdhZmMtMzFhYi0z NWYxLWE1NWEtOTEwYjA3Y2ZjZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAZgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIoYybzxvs0XCQV9axYcc13KJ2ZBDLsQiKTk1RG9mLmE9VSvr9izc ShB4nB2Uj8IvkerBgUh3OolMsT70cWtJwXP3vz/4Xy9nLHDegsStBhsZz+8s9Az/ IPCTN7Xze5vPmTTgMt1hmWKzsuxbVUklnRj/7qht1KRWwZahMGJp6BjBSoMGDDpa 3+GqzARo1YikXyVQZzjbbP38PVzZ2L5+T39f5+WGBBQ0auET/ySVbIsKWRvmWeys f3arbGywD05lwNgs2hFjLhRXvH58YpFZat0cRiBDXOmr2oFFDm/WQxNbzprpZlRl lcM/E6W0345bVA7yxpB32r2Ge0YEPvpwug== -----END CERTIFICATE-----Generated at Sun Sep 27 02:04:15 2026 by rpki-client