$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8503d18-5d78-3cf4-b591-d7db6e1f1c45.roa File: c8503d18-5d78-3cf4-b591-d7db6e1f1c45.roa (raw, json) Hash identifier: 6Foo19VoOdrpClBD7zueupiVr6tpoENAj6mB8iawV2g= Subject key identifier: 60:53:1E:A6:CB:60:58:B2:81:B2:95:CA:6F:A7:6C:BF:1F:FD:80:1F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10378E89F4E8614C1C447400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8503d18-5d78-3cf4-b591-d7db6e1f1c45.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c025:8000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8e:89:f4:e8:61:4c:1c:44:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=b6fa16ac-c23e-48b6-b33e-2f973e07ca85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:10:e8:ff:cd:50:2d:de:66:9b:9a:09:78: a6:aa:63:ed:fd:78:58:71:40:44:05:c7:3d:2e:92: 95:ea:63:25:02:7f:a5:99:09:80:e4:d6:00:25:15: 86:00:d9:85:fa:b5:75:18:85:1f:b8:01:9d:c2:cd: c8:ac:1d:53:0f:c0:fb:42:5f:f6:e5:ef:0a:56:c1: da:ca:60:bc:1f:32:5e:43:bf:8e:1d:38:6f:6e:c2: 5a:e3:87:2d:4e:e6:e3:83:78:25:45:f1:73:9a:9c: d3:f2:28:48:ae:41:7c:df:66:f6:3c:5b:78:67:ec: b5:5e:9a:b6:6c:78:85:b6:35:c9:1c:2b:16:cd:4b: c8:53:1c:10:19:3a:f0:01:93:75:97:b4:99:28:f3: dc:ac:fc:ae:6f:cd:d5:0e:4c:ea:f7:21:b4:fb:e6: d1:4a:a7:a3:1e:b4:29:e1:76:f5:be:93:ec:1d:a5: ea:4c:13:c7:a9:42:f0:aa:27:9b:72:63:d9:55:ba: be:a6:42:5d:d9:5b:ff:c1:92:f2:9e:e0:10:e4:6a: 45:bc:93:53:fe:45:b6:39:9e:13:9e:c0:73:35:59: 03:01:bb:70:6a:63:b0:f5:51:20:10:90:b8:c4:28: 51:72:e8:0b:65:19:fb:47:0b:63:f8:be:f9:c7:01: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:53:1E:A6:CB:60:58:B2:81:B2:95:CA:6F:A7:6C:BF:1F:FD:80:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8503d18-5d78-3cf4-b591-d7db6e1f1c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c025:8000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b5:f3:f4:a4:6a:77:b3:c6:21:66:bf:0d:ed:ee:b2:1d:fc: 9e:97:e1:9c:9a:bc:f2:b8:28:88:56:d9:1b:6f:34:1a:ac:46: 0b:5e:a5:fd:2e:ac:c4:78:45:df:98:77:43:b8:d5:aa:3a:46: 62:bd:fb:77:57:49:15:13:c7:15:c5:d6:93:df:5e:f3:c9:6d: c0:85:a9:15:49:f6:28:96:44:2c:0a:9f:1a:86:2c:39:28:ba: 73:86:c3:21:c7:de:e9:80:40:c9:a4:bd:fd:be:72:9a:c1:13: 50:7a:1b:3e:dc:30:46:bb:32:49:32:89:6d:70:eb:0b:85:a5: 65:33:60:b7:34:10:b5:59:f4:79:47:78:bb:cc:68:1b:35:b1: 2f:4c:45:f4:1b:29:44:33:46:bf:17:12:60:e9:c7:9f:7a:47: 6e:f4:1a:cc:99:b2:12:e1:5e:37:af:62:57:8c:92:03:07:7d: 78:cd:03:71:04:ea:08:ec:26:cf:35:85:1e:9e:7b:81:c0:b3: a0:67:5e:43:54:15:a5:03:3f:1b:8f:6d:ad:f7:05:1f:8f:11: 9e:a4:09:9c:2c:41:05:52:49:57:10:43:ee:7d:0d:a5:a3:ac: 0c:9b:fb:78:7d:7a:58:63:dc:5f:49:26:e9:a8:75:92:17:1e: 0f:d7:78:26 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8QN46J9OhhTBxEdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk YjZmYTE2YWMtYzIzZS00OGI2LWIzM2UtMmY5NzNlMDdjYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7IQ6P/NUC3eZpuaCXimqmPt/XhYcUBEBcc9 LpKV6mMlAn+lmQmA5NYAJRWGANmF+rV1GIUfuAGdws3IrB1TD8D7Ql/25e8KVsHa ymC8HzJeQ7+OHThvbsJa44ctTubjg3glRfFzmpzT8ihIrkF832b2PFt4Z+y1Xpq2 bHiFtjXJHCsWzUvIUxwQGTrwAZN1l7SZKPPcrPyub83VDkzq9yG0++bRSqejHrQp 4Xb1vpPsHaXqTBPHqULwqiebcmPZVbq+pkJd2Vv/wZLynuAQ5GpFvJNT/kW2OZ4T nsBzNVkDAbtwamOw9VEgEJC4xChRcugLZRn7Rwtj+L75xwEBZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGBTHqbLYFiygbKVym+nbL8f/YAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzg1MDNkMTgtNWQ3OC0z Y2Y0LWI1OTEtZDdkYjZlMWYxYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAJYAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhrXz9KRqd7PGIWa/De3ush38npfhnJq88rgoiFbZG280GqxGC16l /S6sxHhF35h3Q7jVqjpGYr37d1dJFRPHFcXWk99e88ltwIWpFUn2KJZELAqfGoYs OSi6c4bDIcfe6YBAyaS9/b5ymsETUHobPtwwRrsySTKJbXDrC4WlZTNgtzQQtVn0 eUd4u8xoGzWxL0xF9BspRDNGvxcSYOnHn3pHbvQazJmyEuFeN69iV4ySAwd9eM0D cQTqCOwmzzWFHp57gcCzoGdeQ1QVpQM/G49trfcFH48RnqQJnCxBBVJJVxBD7n0N paOsDJv7eH16WGPcX0km6ah1khceD9d4Jg== -----END CERTIFICATE-----Generated at Sat Sep 26 15:27:00 2026 by rpki-client