$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f91f29df-a3db-37eb-826c-e82dd6dbffbd.roa File: f91f29df-a3db-37eb-826c-e82dd6dbffbd.roa (raw, json) Hash identifier: 7z6+D/8/bLcM3ouKIOer+BSlGjNrEDb4jYsF5JRrzho= Subject key identifier: 3D:1A:0F:5E:C9:64:D2:C2:2C:F2:E8:B4:1B:3C:DF:68:20:47:95:E9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F15CCEAFC2087EC4AEC7CFF40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f91f29df-a3db-37eb-826c-e82dd6dbffbd.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c02c::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:ea:fc:20:87:ec:4a:ec:7c:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=0c24e0ec-ef66-4205-8c78-ce61aa23cb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:6b:51:2f:2b:3b:97:9e:84:90:53:30:6b: 3b:92:0b:dd:ab:fa:0c:55:da:83:71:9d:54:c6:de: 6f:58:16:25:7d:54:f3:cf:88:a7:34:8b:6c:95:c9: 6a:b7:3d:51:f3:ab:da:ec:25:61:28:98:5b:8d:c4: 54:0c:21:90:e6:e4:2c:e7:93:70:ed:06:9c:db:2a: 98:9b:8c:4d:22:44:95:09:77:05:44:45:fe:ae:b3: 92:d9:80:d2:f8:01:05:3d:5f:5c:f0:b9:0a:b1:14: 8c:2b:a4:28:2a:d3:81:ab:19:c0:82:8f:95:95:77: df:c8:3e:3c:ea:6a:f1:f6:a8:8c:29:02:0c:50:a0: 0a:d8:04:3c:c4:30:ba:1f:4d:6d:27:c5:0d:a0:fe: 1d:26:b4:40:e5:a7:7f:a2:aa:be:d8:1e:3e:36:c3: ac:f4:a1:25:88:08:5c:78:4d:b7:44:47:39:47:6c: 84:35:64:6e:a0:ed:1e:23:36:12:27:4d:ec:d5:53: e0:43:9b:20:bc:71:06:e5:03:e2:a4:f7:e7:b2:eb: 9d:d8:5f:3f:06:6f:47:fb:fd:b3:ff:9d:7f:ea:af: 7e:69:66:07:6d:f0:a3:02:b6:4a:cc:66:9a:71:33: fd:71:10:f4:a7:7d:da:5f:74:a0:5a:45:db:62:56: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1A:0F:5E:C9:64:D2:C2:2C:F2:E8:B4:1B:3C:DF:68:20:47:95:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f91f29df-a3db-37eb-826c-e82dd6dbffbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c02c::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:cf:a7:db:9e:29:15:95:10:31:08:fd:ff:70:7a:3b:0d:5f: 71:6d:80:1b:c2:a4:d4:ab:c8:59:21:14:ad:df:22:a2:db:de: 2f:83:3c:ed:6c:ef:15:bc:c5:22:75:31:d6:76:02:51:6e:9a: 4a:76:1c:2b:32:c9:b3:d7:65:33:8e:e2:37:2e:48:c0:82:6c: 3b:25:2e:2f:32:a0:6f:d1:32:0a:46:4d:b4:94:79:96:7c:bc: c8:db:2c:7d:31:8d:9a:b4:a1:2e:af:4a:a0:9f:20:b3:14:86: 9d:ca:db:02:d6:48:b7:d7:6a:32:33:2d:d1:ac:d5:9d:35:69: 34:68:8c:0b:e5:36:ee:fc:b6:6c:90:d1:7e:42:d5:0d:8f:4d: d9:47:77:f5:ad:7c:70:b0:20:12:df:a9:42:1b:35:b8:93:17: 1f:4e:e7:76:ed:9e:48:0c:b8:ef:19:9c:55:6f:94:17:8d:83: 57:18:ab:f7:56:31:25:2b:38:5f:c5:c0:33:d0:28:55:46:1b: 98:77:b6:17:16:da:b7:f2:70:04:98:c1:b6:05:a3:47:fe:21: b8:52:75:58:d1:b3:f1:37:4d:c5:9c:8a:6a:52:67:6c:42:9c: 97:7a:ab:6b:be:91:56:7b:34:77:7a:2d:3a:5e:64:6e:25:38: d0:d1:1b:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8VzOr8IIfsSux8/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MGMyNGUwZWMtZWY2Ni00MjA1LThjNzgtY2U2MWFhMjNjYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6prUS8rO5eehJBTMGs7kgvdq/oMVdqDcZ1U xt5vWBYlfVTzz4inNItslclqtz1R86va7CVhKJhbjcRUDCGQ5uQs55Nw7Qac2yqY m4xNIkSVCXcFREX+rrOS2YDS+AEFPV9c8LkKsRSMK6QoKtOBqxnAgo+VlXffyD48 6mrx9qiMKQIMUKAK2AQ8xDC6H01tJ8UNoP4dJrRA5ad/oqq+2B4+NsOs9KEliAhc eE23REc5R2yENWRuoO0eIzYSJ03s1VPgQ5sgvHEG5QPipPfnsuud2F8/Bm9H+/2z /51/6q9+aWYHbfCjArZKzGaacTP9cRD0p33aX3SgWkXbYlbgzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD0aD17JZNLCLPLotBs832ggR5XpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjkxZjI5ZGYtYTNkYi0z N2ViLTgyNmMtZTgyZGQ2ZGJmZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPALAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAm8+n254pFZUQMQj9/3B6Ow1fcW2AG8Kk1KvIWSEUrd8iotveL4M8 7WzvFbzFInUx1nYCUW6aSnYcKzLJs9dlM47iNy5IwIJsOyUuLzKgb9EyCkZNtJR5 lny8yNssfTGNmrShLq9KoJ8gsxSGncrbAtZIt9dqMjMt0azVnTVpNGiMC+U27vy2 bJDRfkLVDY9N2Ud39a18cLAgEt+pQhs1uJMXH07ndu2eSAy47xmcVW+UF42DVxir 91YxJSs4X8XAM9AoVUYbmHe2Fxbat/JwBJjBtgWjR/4huFJ1WNGz8TdNxZyKalJn bEKcl3qra76RVns0d3otOl5kbiU40NEbnA== -----END CERTIFICATE-----Generated at Tue Sep 22 07:45:44 2026 by rpki-client