$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db10a3bc-a155-3d48-b49e-9528b771b50c.roa File: db10a3bc-a155-3d48-b49e-9528b771b50c.roa (raw, json) Hash identifier: JXAWFUiqZgLPnPix4y1wZkbTdhCsNgSNEQG/xmdI/gU= Subject key identifier: 98:41:90:50:A3:DD:79:84:C2:BF:64:10:F5:0B:BA:BC:C5:49:14:79 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB3A65BC99716945DA496CBC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db10a3bc-a155-3d48-b49e-9528b771b50c.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 31898 IP address blocks: 2603:c001:e00::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:5b:c9:97:16:94:5d:a4:96:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=530cde43-0b4c-4612-b923-ac09b6dced84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:7e:46:3d:f4:af:ed:ab:ae:1f:bb:af:7f: fa:bd:74:06:6e:a8:b4:47:cd:4b:76:24:67:5f:16: 8f:ec:93:91:60:fa:9c:11:c5:6d:45:29:1f:fa:d4: fd:32:a5:1c:1f:5b:53:94:dd:26:5c:24:00:d7:87: 57:6a:db:e6:18:38:33:7f:71:0b:ee:3e:55:e6:01: 0e:8f:95:ac:4c:68:71:5d:68:44:7a:bb:76:a0:81: cf:d8:ee:01:f7:ff:19:c6:0f:9d:a6:c1:0b:38:1c: eb:47:4f:38:a6:f1:f8:4f:53:14:d0:50:1b:75:b4: ef:64:8f:99:62:82:08:1e:58:52:c7:50:c0:d9:b9: f4:c8:47:2c:be:2d:d9:95:91:14:55:15:80:1c:b6: d4:90:23:94:3a:25:bd:0c:58:17:a7:22:96:e0:47: ac:e0:4a:8e:02:0b:76:e8:b0:cb:ec:44:ee:88:12: 1c:e6:9a:b5:8a:11:1c:b4:b0:21:5e:96:e6:5e:10: c0:44:19:aa:a3:26:14:2e:e9:0b:30:4d:dd:14:c6: 48:03:cd:3d:77:c7:7d:6a:01:14:03:11:70:ac:7f: 72:91:3d:67:9b:f0:d0:4c:cd:57:29:b4:66:1a:a1: e5:4d:ce:9c:19:b7:3f:4c:6d:61:27:87:f2:2d:00: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:41:90:50:A3:DD:79:84:C2:BF:64:10:F5:0B:BA:BC:C5:49:14:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db10a3bc-a155-3d48-b49e-9528b771b50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c001:e00::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e1:3d:ae:4e:e1:3a:6a:5f:e6:76:6d:6d:35:3b:81:75:42: a8:25:ba:ab:df:e7:b4:d1:71:7a:5b:cc:0e:82:74:f5:c9:e3: ba:21:73:42:bf:e0:97:45:ff:3c:13:4d:b3:db:f4:e6:8c:54: 97:52:fd:e1:bc:97:58:b0:0a:ec:ea:e2:9f:ff:34:1a:30:46: e1:15:89:49:e8:53:df:f1:bc:62:f9:26:9e:39:a3:39:96:04: f5:dc:14:72:fd:2f:dd:48:20:04:4e:f9:24:c8:9d:c7:15:d5: 1b:62:c7:9f:c7:a6:9b:17:a4:74:d4:e6:1c:99:41:bd:5a:d5: b5:f3:8d:73:83:6b:b5:ac:1f:a1:20:00:4a:bb:96:db:c3:19: 18:45:74:0c:d4:86:e7:63:ef:65:58:d8:75:9c:3e:ca:7a:47: 46:c6:e2:81:57:91:82:f4:78:cc:51:38:0b:df:37:03:da:fb: d9:21:ae:b7:67:72:c5:08:71:92:db:98:b6:92:b4:4b:6b:64: e7:f1:52:22:61:a1:1f:3c:08:f8:c6:22:8f:9f:0f:bf:67:1a: b3:a9:1d:d1:99:40:94:e8:65:2a:5c:ee:5b:27:e6:80:c3:f8: 05:31:97:2e:87:08:8c:e4:f4:2f:a6:93:61:a3:45:ef:12:1d: 54:97:71:49 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+zplvJlxaUXaSWy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk NTMwY2RlNDMtMGI0Yy00NjEyLWI5MjMtYWMwOWI2ZGNlZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozJ+Rj30r+2rrh+7r3/6vXQGbqi0R81LdiRn XxaP7JORYPqcEcVtRSkf+tT9MqUcH1tTlN0mXCQA14dXatvmGDgzf3EL7j5V5gEO j5WsTGhxXWhEert2oIHP2O4B9/8Zxg+dpsELOBzrR084pvH4T1MU0FAbdbTvZI+Z YoIIHlhSx1DA2bn0yEcsvi3ZlZEUVRWAHLbUkCOUOiW9DFgXpyKW4Ees4EqOAgt2 6LDL7ETuiBIc5pq1ihEctLAhXpbmXhDARBmqoyYULukLME3dFMZIA809d8d9agEU AxFwrH9ykT1nm/DQTM1XKbRmGqHlTc6cGbc/TG1hJ4fyLQDp5QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJhBkFCj3XmEwr9kEPULurzFSRR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGIxMGEzYmMtYTE1NS0z ZDQ4LWI0OWUtOTUyOGI3NzFiNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAQ4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATeE9rk7hOmpf5nZtbTU7gXVCqCW6q9/ntNFxelvMDoJ09cnjuiFz Qr/gl0X/PBNNs9v05oxUl1L94byXWLAK7Orin/80GjBG4RWJSehT3/G8Yvkmnjmj OZYE9dwUcv0v3UggBE75JMidxxXVG2LHn8emmxekdNTmHJlBvVrVtfONc4Nrtawf oSAASruW28MZGEV0DNSG52PvZVjYdZw+ynpHRsbigVeRgvR4zFE4C983A9r72SGu t2dyxQhxktuYtpK0S2tk5/FSImGhHzwI+MYij58Pv2cas6kd0ZlAlOhlKlzuWyfm gMP4BTGXLocIjOT0L6aTYaNF7xIdVJdxSQ== -----END CERTIFICATE-----Generated at Thu Nov 5 20:01:09 2026 by rpki-client