$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bafb16d4-5c1d-3215-858f-4499ddbfb3de.roa File: bafb16d4-5c1d-3215-858f-4499ddbfb3de.roa (raw, json) Hash identifier: 09Ay5mFmXtfxNg+pGkvqd2bCB1EE0Bgr2KsN49/4DX8= Subject key identifier: E0:34:A2:7C:C1:9C:07:12:C7:23:F6:85:57:80:39:EB:D6:F8:10:0D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F480D33215896D68B40D43200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bafb16d4-5c1d-3215-858f-4499ddbfb3de.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c000:2e00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:33:21:58:96:d6:8b:40:d4:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=875db73a-5766-429a-bfcb-aa4d8b52d075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:3c:92:71:fc:92:80:f3:a4:15:6b:16:f3: 2a:66:a4:34:a1:8d:1d:b0:de:5f:fd:71:a7:84:9d: b0:96:b1:f0:cc:1a:35:80:37:e6:16:86:5e:07:93: b4:38:4d:67:8d:e2:3a:4f:31:0f:ea:20:b3:35:25: ec:30:19:ce:cf:c1:1e:76:64:a0:73:11:13:4a:d3: 36:60:c7:8e:c4:2a:a9:69:22:fe:d4:3c:1d:73:77: ea:d1:98:0f:0f:14:ce:25:34:8a:ba:23:af:25:af: ea:2f:d5:2b:dd:27:4b:5b:20:15:77:d7:d8:9e:65: fd:3d:3d:dd:86:a0:34:95:b2:1a:34:a2:5e:b3:d9: 55:ea:a6:e1:46:54:f2:dc:58:f0:d2:fd:85:ea:0f: 38:00:e3:4d:60:48:0f:b8:20:54:81:dc:cc:ad:dc: 8e:67:24:49:c2:f4:34:ec:b4:4c:f1:69:3f:84:9f: 58:33:d8:68:b3:84:fc:48:a6:38:05:1e:61:da:ac: 51:93:35:c8:6d:63:83:b5:16:0f:62:b3:4d:bd:67: 0f:8d:49:6b:73:b1:3e:46:9d:18:70:61:0d:57:51: 7f:52:46:ac:18:99:c9:06:1e:e6:9d:4d:15:60:91: 54:c1:e6:3c:e0:b2:68:e8:ac:bd:a6:61:ce:45:f3: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:34:A2:7C:C1:9C:07:12:C7:23:F6:85:57:80:39:EB:D6:F8:10:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bafb16d4-5c1d-3215-858f-4499ddbfb3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:2e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d0:bb:9f:09:65:13:39:62:0c:40:de:21:38:3a:39:be:5c: 3c:cd:1b:db:84:87:85:66:91:41:bf:e9:5f:c7:87:31:e4:14: aa:9c:8a:68:e3:44:29:fe:07:51:43:93:ca:81:37:35:f2:d6: 37:fe:a3:41:49:62:f2:4e:b8:8a:a6:84:d5:88:4f:d4:2e:35: 7a:77:e0:a3:b7:2a:ed:57:1f:fe:ea:6b:bc:1d:7b:46:53:c6: 81:64:0c:fc:c2:d0:77:b7:b4:54:d6:0c:48:1a:b5:c1:c1:42: 1e:4e:19:0c:5c:ee:d6:79:e6:b8:82:a9:dc:e5:fc:d6:28:cd: e4:f5:58:a4:61:4b:6f:ee:ad:7c:d0:b2:c5:57:34:4a:d4:3f: c2:da:2d:82:14:48:fa:ee:0f:18:c3:f4:39:2d:44:03:5e:f8: fa:67:e6:85:8b:17:7e:20:90:8f:ca:9f:cb:8b:66:ee:b0:4a: e7:95:d5:02:50:ca:d1:ee:76:60:b6:ba:34:94:0f:79:17:11: 6d:18:f1:7b:20:36:a4:a5:ad:90:ed:b1:ef:92:bb:18:ab:71: ec:7a:81:84:a4:03:c1:f0:5c:23:a1:9a:df:40:b6:26:09:9b: 2f:3a:eb:29:35:3c:14:9a:70:79:f6:43:00:f2:c9:23:02:b9: 3e:02:63:3b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9IDTMhWJbWi0DUMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ODc1ZGI3M2EtNTc2Ni00MjlhLWJmY2ItYWE0ZDhiNTJkMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii88knH8koDzpBVrFvMqZqQ0oY0dsN5f/XGn hJ2wlrHwzBo1gDfmFoZeB5O0OE1njeI6TzEP6iCzNSXsMBnOz8EedmSgcxETStM2 YMeOxCqpaSL+1Dwdc3fq0ZgPDxTOJTSKuiOvJa/qL9Ur3SdLWyAVd9fYnmX9PT3d hqA0lbIaNKJes9lV6qbhRlTy3Fjw0v2F6g84AONNYEgPuCBUgdzMrdyOZyRJwvQ0 7LRM8Wk/hJ9YM9hos4T8SKY4BR5h2qxRkzXIbWODtRYPYrNNvWcPjUlrc7E+Rp0Y cGENV1F/UkasGJnJBh7mnU0VYJFUweY84LJo6Ky9pmHORfMJYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOA0onzBnAcSxyP2hVeAOevW+BANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmFmYjE2ZDQtNWMxZC0z MjE1LTg1OGYtNDQ5OWRkYmZiM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAC4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALdC7nwllEzliDEDeITg6Ob5cPM0b24SHhWaRQb/pX8eHMeQUqpyK aONEKf4HUUOTyoE3NfLWN/6jQUli8k64iqaE1YhP1C41enfgo7cq7Vcf/uprvB17 RlPGgWQM/MLQd7e0VNYMSBq1wcFCHk4ZDFzu1nnmuIKp3OX81ijN5PVYpGFLb+6t fNCyxVc0StQ/wtotghRI+u4PGMP0OS1EA174+mfmhYsXfiCQj8qfy4tm7rBK55XV AlDK0e52YLa6NJQPeRcRbRjxeyA2pKWtkO2x75K7GKtx7HqBhKQDwfBcI6Ga30C2 JgmbLzrrKTU8FJpwefZDAPLJIwK5PgJjOw== -----END CERTIFICATE-----Generated at Fri Sep 25 08:39:39 2026 by rpki-client