$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3e31f1-4a03-3a48-b4a6-9c448f5e365a.roa File: ae3e31f1-4a03-3a48-b4a6-9c448f5e365a.roa (raw, json) Hash identifier: TVxNqBRwoGyNg5CJM5gueZ/oKR9omSJvOL2QYX1bhM0= Subject key identifier: B5:F0:B9:1E:6D:87:91:92:2D:3E:E5:EC:C8:2F:C6:D1:60:9B:F6:5E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B62432512A3931D8EE075C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3e31f1-4a03-3a48-b4a6-9c448f5e365a.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c001:200::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:43:25:12:a3:93:1d:8e:e0:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=170bf4ef-4f5f-4347-aad4-c6ccf49cdd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:7f:1c:e8:31:e6:20:dd:97:5d:97:34:6e: 49:80:85:c9:36:f7:c4:7e:f3:26:6e:c6:d4:7e:84: 3c:33:d0:84:a1:94:17:ef:65:17:52:ac:1a:4e:52: f5:7a:9c:23:9f:a6:1b:29:ae:46:e8:c8:cd:15:10: 3f:1c:58:63:b9:bd:63:a6:97:50:5a:f5:ae:c3:d2: 51:bf:20:5d:07:0a:53:71:54:4c:49:42:60:c3:fd: 76:53:68:7a:6d:33:97:44:09:12:f1:2d:21:73:e5: f5:b4:da:42:70:b7:5f:fb:80:d6:1d:81:f9:12:df: db:79:ba:a5:a3:8f:28:db:76:2c:16:a3:68:f1:5c: 7b:c5:e3:dd:23:6c:c7:dc:0c:aa:ae:06:54:0a:32: bb:d5:04:d2:65:d8:3f:cc:ee:eb:8e:3a:57:ca:cb: be:5b:88:8e:f0:3d:92:0b:84:78:48:78:14:10:a1: f1:78:8a:ea:e5:ef:27:7a:3c:fe:c1:98:d3:1c:6f: b0:fa:c0:af:1f:d4:8a:5a:cd:e3:01:31:58:e3:4d: be:ba:b9:8e:cd:7b:0d:41:35:ef:d7:51:03:09:fa: 65:16:ae:99:ff:be:91:64:cf:26:f1:b7:7d:fe:e8: 37:5f:19:1c:0e:06:fb:0e:11:00:c5:ee:eb:76:c7: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F0:B9:1E:6D:87:91:92:2D:3E:E5:EC:C8:2F:C6:D1:60:9B:F6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae3e31f1-4a03-3a48-b4a6-9c448f5e365a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c001:200::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:83:5c:8e:b0:b5:f4:43:35:b3:98:78:57:d6:82:8c:e6:e8: ca:ff:ba:88:b8:27:11:91:9c:7d:00:e8:b3:09:e7:a3:5a:1c: 99:ae:b5:85:40:ff:38:e1:8c:0e:82:2e:28:ef:38:b4:ca:c3: f1:ee:54:36:2a:79:6a:a0:63:e8:ae:86:f1:a9:39:8b:37:31: 40:55:b9:fe:c7:e9:25:04:54:77:5c:1a:6b:4f:dd:63:89:f9: 04:50:b9:25:1e:3a:ca:ab:37:d0:8f:fc:4d:e3:4e:5f:92:e7: d4:26:b8:b8:51:30:0e:d9:12:c0:17:b6:ab:63:87:58:73:67: 58:c1:87:8c:96:4c:d1:f7:5c:c6:7a:e1:ba:82:ff:83:08:b8: f2:19:6c:97:24:15:e6:08:66:f5:b8:a7:01:09:36:13:57:2b: 80:b6:07:95:24:bc:d7:54:60:b4:90:08:da:65:47:e6:c9:b5: 2b:9b:c4:de:8d:b1:82:91:b2:3a:f4:2b:ea:d4:f6:64:06:1c: f1:ad:cb:30:c6:e8:38:f8:b1:32:9a:48:75:a5:6d:50:35:82: 57:45:75:6d:db:b6:e5:b6:0e:89:84:75:c5:b6:3a:af:3c:08: c6:7e:a4:6d:3a:bc:13:34:43:68:21:a4:d1:33:10:ec:13:93: ba:8c:b6:b6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8bYkMlEqOTHY7gdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MTcwYmY0ZWYtNGY1Zi00MzQ3LWFhZDQtYzZjY2Y0OWNkZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKB/HOgx5iDdl12XNG5JgIXJNvfEfvMmbsbU foQ8M9CEoZQX72UXUqwaTlL1epwjn6YbKa5G6MjNFRA/HFhjub1jppdQWvWuw9JR vyBdBwpTcVRMSUJgw/12U2h6bTOXRAkS8S0hc+X1tNpCcLdf+4DWHYH5Et/bebql o48o23YsFqNo8Vx7xePdI2zH3AyqrgZUCjK71QTSZdg/zO7rjjpXysu+W4iO8D2S C4R4SHgUEKHxeIrq5e8nejz+wZjTHG+w+sCvH9SKWs3jATFY402+urmOzXsNQTXv 11EDCfplFq6Z/76RZM8m8bd9/ug3XxkcDgb7DhEAxe7rdsc6UwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLXwuR5th5GSLT7l7MgvxtFgm/ZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWUzZTMxZjEtNGEwMy0z YTQ4LWI0YTYtOWM0NDhmNWUzNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAQIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIoNcjrC19EM1s5h4V9aCjOboyv+6iLgnEZGcfQDoswnno1ocma61 hUD/OOGMDoIuKO84tMrD8e5UNip5aqBj6K6G8ak5izcxQFW5/sfpJQRUd1waa0/d Y4n5BFC5JR46yqs30I/8TeNOX5Ln1Ca4uFEwDtkSwBe2q2OHWHNnWMGHjJZM0fdc xnrhuoL/gwi48hlslyQV5ghm9binAQk2E1crgLYHlSS811RgtJAI2mVH5sm1K5vE 3o2xgpGyOvQr6tT2ZAYc8a3LMMboOPixMppIdaVtUDWCV0V1bdu25bYOiYR1xbY6 rzwIxn6kbTq8EzRDaCGk0TMQ7BOTuoy2tg== -----END CERTIFICATE-----Generated at Tue Sep 22 19:44:22 2026 by rpki-client