$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa File: c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa (raw, json) Hash identifier: KOnxk4x7/9ZGJwcqEUJs0jNVJXzUtluuhHoYwruIsUY= Subject key identifier: 86:A2:34:DD:17:78:7D:82:42:AF:70:3A:A7:22:54:83:B4:46:39:6E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F225CF8B41619D62B413CF3C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 2600:2000:2130::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f8:b4:16:19:d6:2b:41:3c:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=7dea6222-823d-402b-9942-edc2a95fad98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:c8:a5:0d:1c:cf:25:95:7a:71:31:8b:d2: 1b:db:63:0d:73:86:68:52:63:ea:32:24:87:d1:9e: 84:b3:fa:8b:bb:50:7a:a0:c3:06:06:4e:aa:10:57: f0:39:2d:71:d6:0a:c3:ae:f9:49:9a:86:93:60:8f: f6:33:98:50:df:49:ec:56:9d:d8:1e:6b:dc:09:19: 30:91:25:6c:67:05:5a:cb:b6:4f:39:e4:b9:76:81: c3:f4:7b:01:6f:0c:50:ee:b4:c9:0d:a4:a3:6b:b6: 4e:1a:f8:1f:e6:e7:a6:57:23:96:ee:3b:db:38:52: ea:2b:c2:db:04:95:53:fb:bd:ce:b2:35:65:96:a8: fe:d9:3f:5f:3d:4b:e9:97:ca:ba:50:57:73:67:98: d5:87:a2:08:88:3b:f3:d8:96:c5:43:2d:56:19:3c: b1:0a:2a:bb:c5:a7:ab:0c:f3:a9:29:2d:26:3e:c0: 10:3e:75:5e:c0:3c:8c:76:45:4e:f9:c8:aa:56:82: 30:5f:0a:4c:ea:4b:fb:22:c7:a0:df:be:42:eb:33: 8c:8b:80:02:53:d5:b3:97:d4:8a:57:59:5d:9a:87: e9:19:85:fe:0f:91:ac:37:d6:23:b6:5b:8a:cc:1c: 8c:07:15:24:18:6f:90:ac:63:97:a3:50:0e:0b:b9: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A2:34:DD:17:78:7D:82:42:AF:70:3A:A7:22:54:83:B4:46:39:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b2:84:e5:d5:c4:2f:ec:c3:0a:2c:fe:17:51:76:33:31:96: d0:80:84:0d:15:2d:79:f7:e7:09:98:ba:74:33:2b:86:cb:f8: 25:76:e7:13:15:44:88:bd:66:d7:fb:8c:d6:88:88:08:0a:f9: 32:c9:a0:88:24:cd:37:b8:1f:aa:f8:76:7e:3b:f6:ae:95:2f: 31:ef:f4:c0:b9:7b:14:96:bb:64:bf:7e:77:0d:16:a2:39:d0: 85:3a:fd:3c:6e:f4:3a:4d:b4:94:8a:cd:0e:eb:63:3e:2b:5d: 33:7e:75:13:7f:dc:9b:1d:b4:63:f9:8e:e4:2e:b1:d4:fd:18: c4:ec:f5:eb:01:8c:6d:9d:c4:77:bd:8f:b5:bb:7b:e1:e4:cd: 3a:5c:f5:75:6b:c2:54:44:57:32:8d:9e:1d:64:7a:10:83:e6: bc:66:96:04:a1:99:8b:3c:8f:74:ce:00:da:f8:a6:73:74:77: b6:8b:30:3f:64:b7:bb:d9:5b:6c:10:71:60:61:6d:03:08:0f: eb:bc:0a:5b:9c:00:5a:9b:87:93:aa:7e:5a:bf:44:55:79:8b: 54:e9:20:d1:aa:40:ae:ed:10:b8:0d:0f:ef:20:4b:7a:d8:64: 5b:64:a9:b3:84:c1:81:c9:1b:af:f4:44:88:0e:7e:13:ef:c7: c3:22:6b:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8iXPi0FhnWK0E888AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk N2RlYTYyMjItODIzZC00MDJiLTk5NDItZWRjMmE5NWZhZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWLIpQ0czyWVenExi9Ib22MNc4ZoUmPqMiSH 0Z6Es/qLu1B6oMMGBk6qEFfwOS1x1grDrvlJmoaTYI/2M5hQ30nsVp3YHmvcCRkw kSVsZwVay7ZPOeS5doHD9HsBbwxQ7rTJDaSja7ZOGvgf5uemVyOW7jvbOFLqK8Lb BJVT+73OsjVllqj+2T9fPUvpl8q6UFdzZ5jVh6IIiDvz2JbFQy1WGTyxCiq7xaer DPOpKS0mPsAQPnVewDyMdkVO+ciqVoIwXwpM6kv7Iseg375C6zOMi4ACU9Wzl9SK V1ldmofpGYX+D5GsN9YjtluKzByMBxUkGG+QrGOXo1AOC7nZ8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIaiNN0XeH2CQq9wOqciVIO0RjluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzhhYTk4NTktZTNiYS0z YmY0LWJhMzctNTFkMTBjNzk4ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6yhOXVxC/swwos/hdRdjMxltCAhA0VLXn35wmYunQzK4bL+CV2 5xMVRIi9Ztf7jNaIiAgK+TLJoIgkzTe4H6r4dn479q6VLzHv9MC5exSWu2S/fncN FqI50IU6/Txu9DpNtJSKzQ7rYz4rXTN+dRN/3JsdtGP5juQusdT9GMTs9esBjG2d xHe9j7W7e+HkzTpc9XVrwlREVzKNnh1kehCD5rxmlgShmYs8j3TOANr4pnN0d7aL MD9kt7vZW2wQcWBhbQMID+u8ClucAFqbh5Oqflq/RFV5i1TpINGqQK7tELgND+8g S3rYZFtkqbOEwYHJG6/0RIgOfhPvx8Mia00= -----END CERTIFICATE-----Generated at Sun Sep 20 23:16:29 2026 by rpki-client