$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa File: ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa (raw, json) Hash identifier: BBwbiCi5o/n2YvumDEv+CfVqS8X5UIMnyucu4ry+8Pk= Subject key identifier: 8C:28:C0:66:2E:AE:3A:E9:8F:E2:17:D0:28:2A:C3:37:60:C2:63:0D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD3576B0F8AFABC3E7BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c028::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d3:57:6b:0f:8a:fa:bc:3e:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=916f627e-ebba-4940-9628-81208b02f401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:47:18:c8:24:bf:e8:9e:3f:15:b2:d3:f9: b2:6c:15:b9:46:74:c5:c0:bd:b8:cb:7a:94:96:00: 8d:08:12:29:f5:ea:85:ae:ad:97:de:25:de:dc:16: 57:ff:76:ab:9a:2a:d7:b0:66:77:32:c9:32:54:56: 77:1a:72:a1:61:25:c2:17:b4:93:d3:1f:8b:d0:69: 68:09:ec:66:74:2b:0d:cd:d9:ed:0c:af:4f:35:02: 60:6d:10:2d:85:02:59:7e:3f:2f:ca:66:c9:cb:11: 6a:0c:4e:d0:43:97:0a:df:1c:4a:46:82:54:5f:4e: 87:20:5a:ff:05:ee:00:56:39:c3:32:50:c9:73:d7: 8b:b2:f5:f1:e2:5f:a1:18:ae:f0:f7:e5:db:3a:b1: ca:64:64:70:f6:a7:d1:95:25:47:ba:14:89:8f:9c: d0:77:e8:88:5b:3b:d0:52:f0:27:3f:e9:75:54:97: a4:6c:de:90:2c:bf:b1:88:13:fa:f7:88:6d:17:ef: c2:e0:39:e4:ac:c0:60:19:c8:36:81:f9:97:5a:a7: 43:24:6e:a6:66:c8:27:4f:d2:e8:36:38:45:b8:e1: 43:ca:a2:d0:56:fe:4d:ca:46:22:bf:fc:3a:62:87: b7:1a:5d:b1:54:51:d4:a7:13:82:d1:c1:86:75:37: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:28:C0:66:2E:AE:3A:E9:8F:E2:17:D0:28:2A:C3:37:60:C2:63:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c028::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9c:22:76:c3:49:46:ec:56:f9:b4:f9:45:83:f0:30:10:16: c7:fc:1d:d5:36:91:64:8e:52:f2:1f:9e:48:f2:69:bd:26:88: 07:ea:53:38:02:da:17:af:cf:73:28:db:48:90:30:d1:9b:dc: 69:a1:74:79:6a:a6:d5:2a:a1:bf:61:8e:3a:89:51:6e:28:6c: 7b:a7:a4:38:87:cd:15:d9:ec:8a:74:64:aa:35:1e:11:99:1b: 53:8b:4c:bf:9d:6a:e4:8d:8a:58:cb:cd:44:e4:f8:f8:3d:3b: a6:9c:60:c8:ed:78:80:c4:83:15:94:9c:34:02:8e:61:49:a4: 16:b6:5c:1d:47:0c:a6:66:a9:83:33:7e:b8:cf:cd:30:81:10: d6:11:67:48:87:39:52:64:fd:33:43:39:2b:ed:fd:73:b8:23: 45:23:f3:88:9b:2a:ca:82:44:a4:7d:80:dc:d8:0c:ba:de:3e: 56:97:39:dd:3e:88:e4:1c:42:84:61:e2:34:66:73:15:ce:37: b5:41:50:b4:6d:a7:58:6a:b2:3a:f6:f9:6c:96:6f:12:35:92: f0:78:76:fd:15:cd:5e:e9:d6:8e:41:09:6d:10:21:39:36:9b: 6b:a4:e0:87:77:61:e7:16:52:9f:c7:53:19:e7:67:69:ac:ee: 33:34:6d:6d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8NbNNXaw+K+rw+e8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OTE2ZjYyN2UtZWJiYS00OTQwLTk2MjgtODEyMDhiMDJmNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcNHGMgkv+iePxWy0/mybBW5RnTFwL24y3qU lgCNCBIp9eqFrq2X3iXe3BZX/3armirXsGZ3MskyVFZ3GnKhYSXCF7ST0x+L0Glo CexmdCsNzdntDK9PNQJgbRAthQJZfj8vymbJyxFqDE7QQ5cK3xxKRoJUX06HIFr/ Be4AVjnDMlDJc9eLsvXx4l+hGK7w9+XbOrHKZGRw9qfRlSVHuhSJj5zQd+iIWzvQ UvAnP+l1VJekbN6QLL+xiBP694htF+/C4DnkrMBgGcg2gfmXWqdDJG6mZsgnT9Lo NjhFuOFDyqLQVv5NykYiv/w6Yoe3Gl2xVFHUpxOC0cGGdTfogQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIwowGYurjrpj+IX0CgqwzdgwmMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE3ZWNiNjEtODgwYi0z YTc3LWJlNDItYWIyODEyYjU5YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAKAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP5widsNJRuxW+bT5RYPwMBAWx/wd1TaRZI5S8h+eSPJpvSaIB+pT OALaF6/PcyjbSJAw0ZvcaaF0eWqm1Sqhv2GOOolRbihse6ekOIfNFdnsinRkqjUe EZkbU4tMv51q5I2KWMvNROT4+D07ppxgyO14gMSDFZScNAKOYUmkFrZcHUcMpmap gzN+uM/NMIEQ1hFnSIc5UmT9M0M5K+39c7gjRSPziJsqyoJEpH2A3NgMut4+Vpc5 3T6I5BxChGHiNGZzFc43tUFQtG2nWGqyOvb5bJZvEjWS8Hh2/RXNXunWjkEJbRAh OTaba6Tgh3dh5xZSn8dTGednaazuMzRtbQ== -----END CERTIFICATE-----Generated at Tue Sep 22 04:03:26 2026 by rpki-client