$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f63af92-f437-3332-99c6-e0db0cee6157.roa File: 1f63af92-f437-3332-99c6-e0db0cee6157.roa (raw, json) Hash identifier: 28Snz/LdHipJpUNlXfUVs5Lo+j16aiQLWkU2EcymFlE= Subject key identifier: FD:FF:86:9F:C5:5C:89:86:44:7C:3E:8E:FC:DC:90:39:AD:AE:76:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F498A25E929040D884CAC1000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f63af92-f437-3332-99c6-e0db0cee6157.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 2603:c054:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:25:e9:29:04:0d:88:4c:ac:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bde56661-deb1-4bee-b040-104192d27400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:01:bb:6e:7f:8a:08:fb:0e:6c:e0:76:4d: 1f:18:29:c8:1a:fd:47:ed:0b:43:eb:3b:c0:3f:ed: 41:f3:14:77:d3:46:52:1a:ca:78:62:f0:a7:a1:e1: be:64:c5:c9:2e:7c:b0:5e:ec:f1:ef:25:bc:80:b0: fd:c0:89:ee:5c:1c:68:e0:15:50:b1:03:fc:88:7d: f5:ca:9d:93:d0:05:e6:f5:2c:be:ef:b4:32:27:1f: 63:14:27:0d:df:cb:98:0a:f7:71:3f:0e:53:a4:86: dd:d4:54:cc:76:b2:ef:0e:88:88:1b:13:ec:13:51: c0:92:db:ba:32:83:6f:a3:37:e7:52:92:c9:2a:a9: 2e:d5:14:44:4b:4f:cd:a7:dc:52:59:21:43:5b:16: 2d:95:7c:a3:c6:54:c0:d1:5e:c7:19:3a:4d:ee:5b: 32:d1:96:3d:c3:2a:70:28:7a:a0:d9:84:f2:73:bf: 62:eb:0c:d1:29:5e:cd:10:6b:f6:35:b7:49:25:89: cd:af:be:31:1d:c2:b8:b1:ec:1e:63:1d:00:dc:50: e0:10:45:53:78:e5:bf:50:1f:86:92:7a:5d:a7:15: 80:3c:cb:73:55:cb:cf:5a:b1:47:9c:dc:07:a2:95: a5:68:fb:55:ba:c5:61:55:ff:30:32:1b:d9:1d:88: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FF:86:9F:C5:5C:89:86:44:7C:3E:8E:FC:DC:90:39:AD:AE:76:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f63af92-f437-3332-99c6-e0db0cee6157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c054:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:68:7d:10:e9:6f:cb:de:a6:34:29:bc:b5:70:8b:4e:70:70: 3c:9d:56:da:f1:39:34:51:07:9c:e6:c6:39:65:df:3e:2d:9b: b0:68:0f:63:f4:79:d7:83:df:99:07:4a:5c:b7:a0:85:6f:da: 66:67:e8:bb:03:ca:43:83:78:ee:5f:33:f8:5a:0a:ad:4e:22: 8c:e5:b0:77:51:e7:10:81:31:56:b6:0c:0b:02:76:80:7c:fb: 74:44:e0:3e:34:64:8b:76:77:0d:22:c4:15:3a:84:92:68:70: 19:95:6d:48:2f:3e:79:73:87:91:f4:2b:f6:00:73:43:aa:ba: 6e:fe:d2:8f:71:11:b3:20:dc:28:db:ec:5f:e9:e6:96:09:30: df:47:6a:a7:a2:76:35:0a:90:44:97:de:44:9b:70:be:86:3a: 9a:65:f5:75:e4:e4:44:81:60:74:08:8e:86:af:14:41:2a:78: 3f:2c:95:68:93:2c:06:1f:28:e7:f1:54:e5:8e:70:fd:38:9f: 4e:41:75:b2:08:70:85:f7:d9:4f:dc:8f:89:a5:ba:be:19:74: e9:1b:73:d6:ce:3e:3c:76:ed:59:e1:6b:a1:76:5c:cb:2b:38: f6:55:c2:28:ca:1b:60:9f:19:8e:9a:0d:a1:59:5b:f8:27:b8: 18:0d:c9:3e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiiXpKQQNiEysEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmRlNTY2NjEtZGViMS00YmVlLWIwNDAtMTA0MTkyZDI3NDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfcBu25/igj7Dmzgdk0fGCnIGv1H7QtD6zvA P+1B8xR300ZSGsp4YvCnoeG+ZMXJLnywXuzx7yW8gLD9wInuXBxo4BVQsQP8iH31 yp2T0AXm9Sy+77QyJx9jFCcN38uYCvdxPw5TpIbd1FTMdrLvDoiIGxPsE1HAktu6 MoNvozfnUpLJKqku1RRES0/Np9xSWSFDWxYtlXyjxlTA0V7HGTpN7lsy0ZY9wypw KHqg2YTyc79i6wzRKV7NEGv2NbdJJYnNr74xHcK4seweYx0A3FDgEEVTeOW/UB+G knpdpxWAPMtzVcvPWrFHnNwHopWlaPtVusVhVf8wMhvZHYiaVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP3/hp/FXImGRHw+jvzckDmtrnbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWY2M2FmOTItZjQzNy0z MzMyLTk5YzYtZTBkYjBjZWU2MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAVCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJmh9EOlvy96mNCm8tXCLTnBwPJ1W2vE5NFEHnObGOWXfPi2bsGgP Y/R514PfmQdKXLeghW/aZmfouwPKQ4N47l8z+FoKrU4ijOWwd1HnEIExVrYMCwJ2 gHz7dETgPjRki3Z3DSLEFTqEkmhwGZVtSC8+eXOHkfQr9gBzQ6q6bv7Sj3ERsyDc KNvsX+nmlgkw30dqp6J2NQqQRJfeRJtwvoY6mmX1deTkRIFgdAiOhq8UQSp4PyyV aJMsBh8o5/FU5Y5w/TifTkF1sghwhffZT9yPiaW6vhl06Rtz1s4+PHbtWeFroXZc yys49lXCKMobYJ8ZjpoNoVlb+Ce4GA3JPg== -----END CERTIFICATE-----Generated at Sun Sep 27 04:46:41 2026 by rpki-client