$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b99276dc-4a42-38cb-afa1-e41f41b9df4a.roa File: b99276dc-4a42-38cb-afa1-e41f41b9df4a.roa (raw, json) Hash identifier: EaEmDN2O8Z+b5NxMiOiYJ5I6AvFvehDLiZ/Wn1nOdr0= Subject key identifier: 48:89:A6:D2:04:AE:E1:58:D6:F3:6C:6A:74:4F:59:67:6D:47:BF:7B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB241212E42CE8CB2324B7CC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b99276dc-4a42-38cb-afa1-e41f41b9df4a.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 2603:c002:a800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:41:21:2e:42:ce:8c:b2:32:4b:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=a3330d58-c4be-46f7-81d5-58444bb1709b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:d1:6e:0a:a6:89:6d:f5:23:7e:ca:8f:46: b8:26:76:5f:51:d2:39:61:ed:98:4b:63:13:e5:a6: d9:9c:7e:a8:c9:ff:66:bb:78:34:e4:3e:03:26:2b: 8e:91:eb:a8:8c:4c:c6:51:8b:b0:4e:38:27:b3:5f: d8:58:46:8b:67:cb:3f:80:1c:74:83:fd:28:b3:c1: 27:67:77:1a:ae:87:48:18:94:f6:1d:6b:c0:6a:13: 91:6f:cc:6c:55:00:6e:14:34:00:d7:fe:7d:18:ce: 32:af:bb:10:c2:72:2c:2a:07:0b:49:bf:3b:e4:2f: 20:54:9a:b1:cc:3e:73:09:31:0a:14:6c:12:54:66: df:81:90:b1:b0:8c:43:0f:5a:85:cf:4c:81:c7:77: 3b:ea:59:e6:dc:6b:c4:f2:ab:ba:6f:52:84:8e:03: 44:7d:00:28:be:1a:ed:05:40:8f:78:08:a4:66:b8: f5:fb:06:78:3f:62:52:35:ba:05:db:03:56:ab:b8: cb:ee:b4:27:6f:4f:50:fb:52:04:29:6e:54:7e:5a: 65:4e:7f:a9:9f:db:4f:88:b4:66:54:e4:60:99:bb: ff:0e:8b:b2:59:f9:34:f8:5e:33:3c:b0:e7:7f:00: 9f:3f:c9:97:04:84:40:1d:af:f0:76:27:2c:5e:bc: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:89:A6:D2:04:AE:E1:58:D6:F3:6C:6A:74:4F:59:67:6D:47:BF:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b99276dc-4a42-38cb-afa1-e41f41b9df4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:a800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:43:2a:50:a8:e5:37:e5:23:34:ef:5d:79:b7:44:52:43:78: 29:ea:84:84:e5:5a:99:67:c8:90:5c:9e:f8:b1:68:45:81:a8: e7:0d:91:e2:d7:84:96:bb:a8:8a:72:19:fc:eb:ad:a4:9a:ee: 6c:25:65:52:7a:1d:69:6c:10:67:1c:78:bf:97:7e:b5:e3:4c: f0:ef:cf:98:e5:32:15:93:f8:16:50:70:e2:91:d1:1a:a2:73: 3f:05:f6:c9:2d:ce:f1:f4:20:0d:fd:63:c1:c9:8f:e4:87:51: c7:a1:a6:41:be:2a:29:a6:8d:05:d4:fb:1f:98:2e:57:67:34: 5f:a8:c0:b6:13:f1:60:99:69:2f:eb:de:c3:3c:8d:b5:0f:17: b8:5b:3d:8d:ca:74:78:5d:44:f4:b7:96:2a:30:7f:b9:f2:c2: 4d:09:41:86:22:67:c7:78:24:b1:69:ac:9b:48:5d:64:a6:09: 58:0c:94:28:c9:6a:47:e5:e7:45:38:71:bf:b3:ba:f5:32:c9: c7:2a:b8:ee:57:07:a0:d5:78:e2:5f:c7:a5:c7:56:4d:d9:ac: d2:14:60:08:cf:57:e6:d8:48:6b:8e:32:a8:ee:94:2e:6b:ec: 10:86:a9:52:cf:d1:f7:f9:6e:4c:9f:f8:e2:42:80:83:74:a0: e1:f0:c6:9f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+yQSEuQs6MsjJLfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk YTMzMzBkNTgtYzRiZS00NmY3LTgxZDUtNTg0NDRiYjE3MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocTRbgqmiW31I37Kj0a4JnZfUdI5Ye2YS2MT 5abZnH6oyf9mu3g05D4DJiuOkeuojEzGUYuwTjgns1/YWEaLZ8s/gBx0g/0os8En Z3carodIGJT2HWvAahORb8xsVQBuFDQA1/59GM4yr7sQwnIsKgcLSb875C8gVJqx zD5zCTEKFGwSVGbfgZCxsIxDD1qFz0yBx3c76lnm3GvE8qu6b1KEjgNEfQAovhrt BUCPeAikZrj1+wZ4P2JSNboF2wNWq7jL7rQnb09Q+1IEKW5UflplTn+pn9tPiLRm VORgmbv/DouyWfk0+F4zPLDnfwCfP8mXBIRAHa/wdicsXrxqJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEiJptIEruFY1vNsanRPWWdtR797MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjk5Mjc2ZGMtNGE0Mi0z OGNiLWFmYTEtZTQxZjQxYjlkZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAqgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKUMqUKjlN+UjNO9debdEUkN4KeqEhOVamWfIkFye+LFoRYGo5w2R 4teElruoinIZ/OutpJrubCVlUnodaWwQZxx4v5d+teNM8O/PmOUyFZP4FlBw4pHR GqJzPwX2yS3O8fQgDf1jwcmP5IdRx6GmQb4qKaaNBdT7H5guV2c0X6jAthPxYJlp L+vewzyNtQ8XuFs9jcp0eF1E9LeWKjB/ufLCTQlBhiJnx3gksWmsm0hdZKYJWAyU KMlqR+XnRThxv7O69TLJxyq47lcHoNV44l/HpcdWTdms0hRgCM9X5thIa44yqO6U LmvsEIapUs/R9/luTJ/44kKAg3Sg4fDGnw== -----END CERTIFICATE-----Generated at Sun Nov 15 14:48:35 2026 by rpki-client