$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7ec97e-5778-3e22-86f9-945ac6e6f383.roa File: ff7ec97e-5778-3e22-86f9-945ac6e6f383.roa (raw, json) Hash identifier: 0dhpQd+FfzKr5HBSsgx6AEIp82PCdwezlJWwUp1Xsfc= Subject key identifier: 1D:56:9E:C1:12:67:0D:24:00:9A:D4:16:86:B5:EA:B1:C5:79:CC:02 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F79EA57FAD18464E98B680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7ec97e-5778-3e22-86f9-945ac6e6f383.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c002:b410::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:9e:a5:7f:ad:18:46:4e:98:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2df47dd0-be0b-4e64-b214-e8434b22244e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:2e:9d:fe:c0:f8:3f:97:1c:87:ea:32:c3: 1e:15:b1:da:78:dd:44:83:16:56:d5:e4:2d:0e:08: e4:c2:79:3e:6d:75:14:b0:33:61:d4:38:f9:12:2d: 86:ac:f2:ff:65:7d:01:9a:89:8e:41:02:7d:42:70: c1:59:ce:03:6c:39:38:6c:7d:86:76:ef:e0:98:c1: 86:a8:dd:cc:88:de:b3:61:a6:ea:3c:31:a0:6a:e6: e5:9a:cd:5f:1b:df:1e:2b:71:33:d4:e5:60:aa:9f: c1:d7:e7:75:70:f5:56:f3:58:4d:9b:1a:30:4b:eb: c9:17:92:92:e4:54:42:63:b4:9a:b2:b2:e5:e7:9e: 7c:32:a6:c9:6a:88:45:b0:09:e9:a4:40:19:77:fd: fd:2a:95:b1:9a:dd:84:0d:a0:50:15:6e:e8:c3:d8: 74:10:bc:7b:b5:ad:29:df:ba:b6:6f:ed:c6:60:ae: d0:e4:f5:1e:81:fc:6f:54:35:8a:d0:58:77:01:84: 25:9c:82:3b:76:38:dd:72:7d:d3:78:71:01:45:1d: cc:01:fa:67:73:ae:b9:bb:fb:a9:9d:2c:f4:66:04: 2f:b0:e6:74:ac:5f:a6:18:2d:d6:9a:f5:5f:0c:e8: 5d:af:49:df:b3:38:68:55:47:a5:c7:51:c5:62:38: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:56:9E:C1:12:67:0D:24:00:9A:D4:16:86:B5:EA:B1:C5:79:CC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff7ec97e-5778-3e22-86f9-945ac6e6f383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:b410::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d4:e7:7e:25:e4:1a:0c:a1:de:12:d5:b6:6a:fb:b7:b5:84: 3c:f2:ee:1a:05:85:e6:e4:23:cc:44:2d:a6:5e:29:77:a7:1c: d2:44:dc:de:f4:43:a7:5f:49:cf:45:b5:36:6c:d7:c3:28:2a: d1:59:c6:8c:d9:fe:04:37:d3:87:de:0c:5c:de:93:83:fe:e8: 17:03:e2:0a:50:3a:12:c3:6a:e7:d7:a9:5c:16:69:16:11:7a: 37:0d:dc:dc:1d:d7:1d:ed:87:4a:02:f0:78:03:b5:36:c4:9b: 88:e5:ec:2b:c5:c1:0c:12:1e:23:bc:b4:b1:ac:a2:5f:68:62: 3e:1e:7c:56:e8:4d:a5:69:0c:32:7f:90:70:e6:0e:34:10:14: 51:e2:b8:74:d4:18:6c:d8:f7:3c:9e:4a:df:57:33:d7:dd:29: ce:88:8e:1d:90:3b:23:f7:ff:63:b5:10:2e:f9:92:a9:d7:47: b5:40:2b:09:77:61:fb:40:8b:d3:22:fe:2c:f4:69:79:5c:fc: 00:6e:83:de:c3:e3:12:0f:76:5c:dc:75:95:df:a4:12:f1:28: b1:78:bb:50:b4:16:fc:66:e0:6a:3f:9c:1d:57:b3:48:ce:20: 7a:99:50:e5:77:4a:8d:84:05:fc:31:3b:bf:8f:ab:52:e9:a8: b0:23:35:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g956lf60YRk6YtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MmRmNDdkZDAtYmUwYi00ZTY0LWIyMTQtZTg0MzRiMjIyNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFcunf7A+D+XHIfqMsMeFbHaeN1EgxZW1eQt Dgjkwnk+bXUUsDNh1Dj5Ei2GrPL/ZX0BmomOQQJ9QnDBWc4DbDk4bH2Gdu/gmMGG qN3MiN6zYabqPDGgaublms1fG98eK3Ez1OVgqp/B1+d1cPVW81hNmxowS+vJF5KS 5FRCY7SasrLl5558MqbJaohFsAnppEAZd/39KpWxmt2EDaBQFW7ow9h0ELx7ta0p 37q2b+3GYK7Q5PUegfxvVDWK0Fh3AYQlnII7djjdcn3TeHEBRR3MAfpnc665u/up nSz0ZgQvsOZ0rF+mGC3WmvVfDOhdr0nfszhoVUelx1HFYjhGPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB1WnsESZw0kAJrUFoa16rHFecwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmY3ZWM5N2UtNTc3OC0z ZTIyLTg2ZjktOTQ1YWM2ZTZmMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAArQQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDU534l5BoMod4S1bZq+7e1hDzy7hoFhebkI8xELaZeKXenHNJE 3N70Q6dfSc9FtTZs18MoKtFZxozZ/gQ304feDFzek4P+6BcD4gpQOhLDaufXqVwW aRYRejcN3Nwd1x3th0oC8HgDtTbEm4jl7CvFwQwSHiO8tLGsol9oYj4efFboTaVp DDJ/kHDmDjQQFFHiuHTUGGzY9zyeSt9XM9fdKc6Ijh2QOyP3/2O1EC75kqnXR7VA Kwl3YftAi9Mi/iz0aXlc/ABug97D4xIPdlzcdZXfpBLxKLF4u1C0Fvxm4Go/nB1X s0jOIHqZUOV3So2EBfwxO7+Pq1LpqLAjNY0= -----END CERTIFICATE-----Generated at Tue Sep 22 18:31:00 2026 by rpki-client