$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ff09ed8-e83a-3cd7-8fef-7d56c08e1936.roa File: 3ff09ed8-e83a-3cd7-8fef-7d56c08e1936.roa (raw, json) Hash identifier: 2azDpKN6V6dvR8fe2Ci2AU5Xx218xIQ9AsLXpvDzkSE= Subject key identifier: 7D:2E:4A:F2:4E:FD:62:28:4D:79:2C:27:8E:F0:95:AC:81:AA:21:3C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FAF5897E438D9FFDBF119AA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ff09ed8-e83a-3cd7-8fef-7d56c08e1936.roa Signing time: Sat 31 Oct 2026 13:00:13 +0000 ROA not before: Sat 31 Oct 2026 13:00:13 +0000 ROA not after: Fri 29 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 2603:c002:900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:58:97:e4:38:d9:ff:db:f1:19:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 31 13:00:13 2026 GMT Not After : Jan 29 14:00:13 2027 GMT Subject: CN=bb22e043-813e-4498-8623-391c14c4e282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:0a:15:95:a8:e3:58:ef:bd:97:5a:88:d2: ee:66:f5:8c:19:be:03:b2:38:8d:aa:fc:4d:eb:a5: 19:b1:2d:e1:5f:a7:f3:f3:5c:d9:ea:c4:ee:5b:ea: 5a:a9:4c:32:77:64:e0:9b:bf:1b:bc:16:78:ff:97: 50:52:5b:6a:41:82:27:0e:a3:e3:06:a1:01:8f:34: f0:33:d3:1b:c4:58:2d:7c:70:da:86:52:87:3c:9e: 0e:f9:67:41:67:05:72:60:ac:d6:09:aa:de:f5:fc: 73:be:f0:cc:21:e3:b9:49:2a:87:0c:4a:3d:31:f6: 8f:28:2f:03:3d:1f:34:a1:95:ec:d8:ee:0c:04:0d: af:c8:e2:68:22:1e:71:08:55:5f:cd:80:c0:b4:af: 1c:b9:5d:64:f2:58:51:62:1f:b4:b7:dd:2e:e7:81: d1:87:88:41:0f:b2:a4:66:46:0d:5c:49:c5:c3:73: 37:b1:34:0c:86:2b:12:a2:04:4e:b3:e5:5f:c7:40: 16:46:5c:d6:ab:84:d4:43:90:15:71:27:4c:a8:f3: 35:27:24:8c:4e:78:db:19:40:30:2c:ac:75:8b:49: 6d:2b:a0:91:ef:93:7e:7e:4f:f9:70:1b:e4:7b:94: 77:51:65:c7:0a:30:d4:d0:1f:f8:54:ac:93:0e:89: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2E:4A:F2:4E:FD:62:28:4D:79:2C:27:8E:F0:95:AC:81:AA:21:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ff09ed8-e83a-3cd7-8fef-7d56c08e1936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:6f:92:15:71:05:d3:5b:15:2b:2d:4d:70:4e:ad:f7:69:d0: f5:3b:73:2c:72:00:b9:89:72:8c:c3:2e:a1:6c:36:7c:0c:63: f3:c4:8a:e3:29:7e:9b:48:e9:9a:75:db:34:ef:6b:8a:8c:5a: cd:d9:29:fd:b1:ed:2c:21:0f:e1:74:43:c7:c8:d5:26:98:90: 95:ad:ca:1e:37:8e:a6:56:2c:4e:1d:95:60:87:82:e4:e4:2b: b4:f7:07:85:69:3c:c1:3b:02:45:25:be:06:bc:be:b8:4c:43: 8a:16:63:dc:05:7e:c3:af:6a:9d:2c:51:53:bf:b1:41:a0:ed: 1c:0c:d6:ea:ea:a7:56:a8:8e:c9:66:c7:07:d7:7f:f1:06:02: 61:49:1e:96:2c:34:76:1a:a2:3a:84:5a:f1:91:26:f7:0a:fc: 8b:01:18:87:50:3a:b4:40:51:4f:97:0f:83:f4:c9:96:31:6b: 43:de:a5:1f:3f:22:03:66:e7:76:35:a5:59:39:77:86:2b:35: 5b:43:a0:37:dd:f5:6f:4b:8d:a6:40:c4:13:fb:94:94:fb:a3: b5:3e:6e:66:7b:22:c7:3c:91:d1:13:7b:d6:1a:a9:05:d2:b3: be:73:21:76:14:a3:e7:f8:1b:e9:d2:bf:d9:95:b8:e1:92:0f: fc:f9:b6:d0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+vWJfkONn/2/EZqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk YmIyMmUwNDMtODEzZS00NDk4LTg2MjMtMzkxYzE0YzRlMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszUKFZWo41jvvZdaiNLuZvWMGb4DsjiNqvxN 66UZsS3hX6fz81zZ6sTuW+paqUwyd2Tgm78bvBZ4/5dQUltqQYInDqPjBqEBjzTw M9MbxFgtfHDahlKHPJ4O+WdBZwVyYKzWCare9fxzvvDMIeO5SSqHDEo9MfaPKC8D PR80oZXs2O4MBA2vyOJoIh5xCFVfzYDAtK8cuV1k8lhRYh+0t90u54HRh4hBD7Kk ZkYNXEnFw3M3sTQMhisSogROs+Vfx0AWRlzWq4TUQ5AVcSdMqPM1JySMTnjbGUAw LKx1i0ltK6CR75N+fk/5cBvke5R3UWXHCjDU0B/4VKyTDomSBwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH0uSvJO/WIoTXksJ47wlayBqiE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2ZmMDllZDgtZTgzYS0z Y2Q3LThmZWYtN2Q1NmMwOGUxOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAgkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgG+SFXEF01sVKy1NcE6t92nQ9TtzLHIAuYlyjMMuoWw2fAxj88SK 4yl+m0jpmnXbNO9rioxazdkp/bHtLCEP4XRDx8jVJpiQla3KHjeOplYsTh2VYIeC 5OQrtPcHhWk8wTsCRSW+Bry+uExDihZj3AV+w69qnSxRU7+xQaDtHAzW6uqnVqiO yWbHB9d/8QYCYUkeliw0dhqiOoRa8ZEm9wr8iwEYh1A6tEBRT5cPg/TJljFrQ96l Hz8iA2bndjWlWTl3his1W0OgN931b0uNpkDEE/uUlPujtT5uZnsixzyR0RN71hqp BdKzvnMhdhSj5/gb6dK/2ZW44ZIP/Pm20A== -----END CERTIFICATE-----Generated at Sun Nov 15 15:04:36 2026 by rpki-client