$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa File: 0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa (raw, json) Hash identifier: 2bqMebkbrUVpIrcoqeGhZxLkSphtNyeS+nk0O4LojnY= Subject key identifier: CF:69:59:35:E3:26:99:08:BB:6F:6E:DD:AE:AC:C3:06:14:C1:94:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497ADB26A02DFE810F869624 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8070 IP address blocks: 2603:1063:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:db:26:a0:2d:fe:81:0f:86:96:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c346a724-de78-4063-a1d3-3b91045ebf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:15:f7:ec:1d:a9:e7:fc:ea:42:4b:c8:f9: 23:f2:b3:0b:ae:18:2b:dc:6b:31:f6:89:7f:37:ef: 45:0e:88:fd:8b:33:9b:e7:5d:1d:5d:db:99:12:da: 2e:ad:3d:40:59:d7:e5:cd:0a:b8:f4:1b:fe:58:57: a7:d4:9b:2b:f6:ef:1f:05:56:8e:72:e4:8a:73:55: 16:7c:d2:37:fd:92:79:e8:fd:1f:63:c1:21:c9:1d: ed:a3:69:72:b3:f3:ca:0a:93:5b:c6:d1:08:ee:3c: 75:2b:24:21:49:4b:c6:7e:39:71:99:cc:de:24:da: 35:21:8f:e8:f0:1b:66:03:93:5f:53:0f:35:76:c1: 7f:0e:1f:03:b7:f9:c0:b5:be:ea:42:63:85:72:e2: 4d:b3:15:1b:76:6e:f4:df:be:a2:14:53:23:38:b9: c3:5a:87:00:fd:84:f4:44:cf:73:14:6d:23:b7:38: 77:f5:6a:11:5b:45:bb:61:bd:bb:69:97:b4:d2:0a: cf:13:5e:06:69:e7:7a:a0:38:be:59:7b:5b:84:df: 27:eb:68:09:2a:ca:b6:42:5d:87:6f:af:72:51:80: 35:34:4c:61:bc:bf:4d:df:eb:b7:2c:2c:f1:ed:7d: 44:f7:64:07:43:db:99:a7:c9:76:17:d5:eb:29:fc: 4e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:69:59:35:E3:26:99:08:BB:6F:6E:DD:AE:AC:C3:06:14:C1:94:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2603:1063:2100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0a:8e:e5:35:a9:c9:8a:a1:35:06:48:83:fb:e5:12:31:b1: 43:42:de:d1:f9:6c:c6:5a:f0:b6:0c:1d:50:b8:b2:a8:8a:4c: 30:d2:85:5b:54:c4:01:dd:9d:3e:97:93:75:c2:75:bc:7a:2a: ef:29:c4:56:23:c7:c0:30:24:07:c2:0c:50:8f:ce:0f:7a:5c: 56:45:5b:fb:f9:6c:e8:02:fb:b9:f4:2b:32:8a:7c:20:5f:49: f0:cc:8e:c3:f1:77:2d:24:69:c2:04:73:9d:87:3b:94:6a:be: 06:4c:b6:3a:39:b5:2b:bb:6f:23:b4:7c:76:1f:79:73:c7:9b: 8f:09:02:25:cd:05:52:df:a2:cd:f8:77:db:dd:ac:0a:55:78: 49:bd:4a:96:50:4d:61:27:a7:38:57:82:cf:2e:9f:ba:27:f6: 9d:da:80:fb:34:75:73:93:a5:03:15:50:c7:13:3f:56:08:18: 50:1e:7b:df:ba:5b:c0:4c:d8:51:11:3c:5c:a3:f5:22:82:d0: cf:7f:dc:4a:3d:6d:6a:2f:18:37:d4:19:88:c3:06:c6:94:b3: c2:69:c6:24:15:c4:53:99:fd:2f:25:d9:d4:e0:12:55:35:84: 1a:07:d1:8d:9a:45:85:ef:ef:41:c9:c7:72:de:75:20:bd:61: e0:b8:33:ef -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JetsmoC3+gQ+GliQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzM0NmE3MjQtZGU3OC00MDYzLWExZDMtM2I5MTA0NWViZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrkV9+wdqef86kJLyPkj8rMLrhgr3Gsx9ol/ N+9FDoj9izOb510dXduZEtourT1AWdflzQq49Bv+WFen1Jsr9u8fBVaOcuSKc1UW fNI3/ZJ56P0fY8EhyR3to2lys/PKCpNbxtEI7jx1KyQhSUvGfjlxmczeJNo1IY/o 8BtmA5NfUw81dsF/Dh8Dt/nAtb7qQmOFcuJNsxUbdm70376iFFMjOLnDWocA/YT0 RM9zFG0jtzh39WoRW0W7Yb27aZe00grPE14Gaed6oDi+WXtbhN8n62gJKsq2Ql2H b69yUYA1NExhvL9N3+u3LCzx7X1E92QHQ9uZp8l2F9XrKfxO0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM9pWTXjJpkIu29u3a6swwYUwZQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGNmYWE3MWItYTNiNS0z ZDhlLTg4MTEtOTk4OWNjYTMzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMQYyEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWQqO5TWpyYqhNQZIg/vlEjGxQ0Le0flsxlrwtgwdULiyqIpMMNKF W1TEAd2dPpeTdcJ1vHoq7ynEViPHwDAkB8IMUI/OD3pcVkVb+/ls6AL7ufQrMop8 IF9J8MyOw/F3LSRpwgRznYc7lGq+Bky2Ojm1K7tvI7R8dh95c8ebjwkCJc0FUt+i zfh3292sClV4Sb1KllBNYSenOFeCzy6fuif2ndqA+zR1c5OlAxVQxxM/VggYUB57 37pbwEzYURE8XKP1IoLQz3/cSj1tai8YN9QZiMMGxpSzwmnGJBXEU5n9LyXZ1OAS VTWEGgfRjZpFhe/vQcnHct51IL1h4Lgz7w== -----END CERTIFICATE-----Generated at Sun Sep 27 03:56:00 2026 by rpki-client