$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da687128-4e9c-3517-add1-96b405d31a91.roa File: da687128-4e9c-3517-add1-96b405d31a91.roa (raw, json) Hash identifier: 9CbMk2LzUAhvEjm0hx8Daa1H50gMnFynd5ps8yevwxQ= Subject key identifier: D5:8C:C3:12:7F:A3:E5:DB:08:4F:37:05:C0:41:5A:7B:33:1F:F7:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA78FBB6DE517AFE56D142610 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da687128-4e9c-3517-add1-96b405d31a91.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 2603:c06a::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:bb:6d:e5:17:af:e5:6d:14:26:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=66ac8898-f9a6-47aa-a2d0-163fc02c43e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:0b:1a:65:81:5a:dc:1f:77:58:a8:23:20: f5:2e:7c:4f:d7:99:a0:13:50:ad:46:8c:2e:54:68: d1:b6:64:7d:1a:e5:16:aa:06:9a:9f:13:88:55:3a: 90:41:4c:c8:98:ff:38:43:7e:e0:b3:43:73:34:a7: f9:65:bc:aa:4a:5b:58:07:6f:80:a9:22:a5:93:6e: 90:fb:5d:ee:f3:e7:ab:6a:98:0e:c5:90:d1:5f:93: 1e:9a:2e:b6:7c:58:b4:53:b9:29:20:37:38:6e:37: 3e:4f:6b:ce:ee:9f:5a:1a:a5:bb:06:6c:e6:b0:52: 8e:c1:42:f3:b1:68:6a:2c:fd:34:a9:00:7c:68:d1: 1c:1d:04:df:d6:27:df:b5:6e:ea:22:09:4d:51:3b: 6e:1c:34:02:52:87:f4:b9:0d:cf:44:3a:3a:4a:f7: 3d:ba:db:42:13:7e:a6:24:f9:35:00:4b:b8:3f:1c: 32:af:f5:05:e9:59:eb:f5:fd:6c:84:90:78:d2:15: 77:b4:4a:86:04:51:dc:0f:b9:85:f1:38:81:74:7b: c3:ea:50:26:51:e1:c0:91:b6:67:d3:9f:5e:68:7e: d2:a6:58:0e:20:59:95:44:3a:71:c7:bc:22:d2:3d: bd:32:1b:b3:73:a0:47:8f:c7:91:98:1e:d3:80:ed: 6b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8C:C3:12:7F:A3:E5:DB:08:4F:37:05:C0:41:5A:7B:33:1F:F7:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da687128-4e9c-3517-add1-96b405d31a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c06a::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:68:50:1a:dc:7d:a1:3b:c1:dc:35:51:82:fc:48:99:27:23: 54:cc:34:b9:84:a8:d3:cc:8b:d9:5b:f7:f3:07:72:c3:dc:ca: 9f:12:26:57:53:d7:d0:54:b7:b1:09:d4:e4:06:bf:92:56:e8: 02:31:56:cf:7c:15:81:76:4e:71:65:ca:e8:e5:5c:0e:c6:f8: c4:9c:ca:ac:62:16:a9:33:3f:06:93:e5:8f:ab:36:c9:fa:22: 8c:3e:dc:e0:d7:f5:3f:23:5e:c5:79:cc:be:a7:92:39:88:c4: e6:f2:7d:63:7c:3a:18:1b:6f:26:40:d9:59:ea:92:26:82:7e: c2:93:b8:93:86:ef:20:03:03:dd:6d:fb:dd:e0:4d:04:b7:00: 90:7b:18:47:18:f6:83:b2:99:73:8e:52:d8:c3:6b:59:3b:e6: 09:2e:4c:a3:06:8c:f6:f9:70:e6:e7:0c:18:c5:41:1c:86:ac: b5:7c:9f:a4:fd:61:49:3d:5f:92:68:b4:4b:bf:78:1b:5e:56: 6b:45:b8:93:9d:e2:66:cd:db:48:d7:f4:8f:75:1e:ea:f8:83: 94:19:ee:69:ed:af:ad:8d:7c:3f:67:55:fc:c4:4d:21:90:c4: 12:89:c6:87:16:63:1c:c5:08:65:2c:29:a5:63:b6:05:f0:9e: f7:d6:88:bc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nj7tt5Rev5W0UJhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjZhYzg4OTgtZjlhNi00N2FhLWEyZDAtMTYzZmMwMmM0M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YELGmWBWtwfd1ioIyD1LnxP15mgE1CtRowu VGjRtmR9GuUWqgaanxOIVTqQQUzImP84Q37gs0NzNKf5ZbyqSltYB2+AqSKlk26Q +13u8+erapgOxZDRX5Memi62fFi0U7kpIDc4bjc+T2vO7p9aGqW7BmzmsFKOwULz sWhqLP00qQB8aNEcHQTf1ifftW7qIglNUTtuHDQCUof0uQ3PRDo6Svc9uttCE36m JPk1AEu4Pxwyr/UF6Vnr9f1shJB40hV3tEqGBFHcD7mF8TiBdHvD6lAmUeHAkbZn 059eaH7SplgOIFmVRDpxx7wi0j29Mhuzc6BHj8eRmB7TgO1rYQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNWMwxJ/o+XbCE83BcBBWnszH/ezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGE2ODcxMjgtNGU5Yy0z NTE3LWFkZDEtOTZiNDA1ZDMxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAagAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADmhQGtx9oTvB3DVRgvxImScjVMw0uYSo08yL2Vv38wdyw9zKnxIm V1PX0FS3sQnU5Aa/klboAjFWz3wVgXZOcWXK6OVcDsb4xJzKrGIWqTM/BpPlj6s2 yfoijD7c4Nf1PyNexXnMvqeSOYjE5vJ9Y3w6GBtvJkDZWeqSJoJ+wpO4k4bvIAMD 3W373eBNBLcAkHsYRxj2g7KZc45S2MNrWTvmCS5MowaM9vlw5ucMGMVBHIastXyf pP1hST1fkmi0S794G15Wa0W4k53iZs3bSNf0j3Ue6viDlBnuae2vrY18P2dV/MRN IZDEEonGhxZjHMUIZSwppWO2BfCe99aIvA== -----END CERTIFICATE-----Generated at Wed Jul 29 03:52:00 2026 by rpki-client