$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c338845b-f2bd-3441-b058-7ceea38bbb59.roa File: c338845b-f2bd-3441-b058-7ceea38bbb59.roa (raw, json) Hash identifier: xS9RkBxI9c2R47H1kBKHhQQ51CzSOSvAxmLWFVOOSvE= Subject key identifier: EC:81:34:32:6E:0C:BD:A0:5E:55:D3:59:C6:73:90:61:D9:1B:EB:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D402F77D9E712D88BA40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c338845b-f2bd-3441-b058-7ceea38bbb59.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 2603:c002:3400::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d4:02:f7:7d:9e:71:2d:88:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=517155d1-ddb3-441a-b034-b9f829351582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:78:f6:2c:86:56:52:e3:04:8a:42:88:14: ee:4e:da:32:72:22:1b:d8:27:e7:5b:ea:e7:8f:5f: 52:a6:89:54:6f:78:55:54:bf:55:62:54:74:3f:61: 35:9c:74:59:56:47:2a:5f:b7:5f:e1:74:34:d5:bd: df:b5:a9:fe:e1:31:29:19:6b:61:89:9d:b3:2d:1e: 2f:15:6a:25:35:47:05:d6:32:6f:bf:54:f9:b2:6e: 27:84:fd:c3:ba:75:df:0f:c9:f6:e1:44:fc:69:79: d3:d9:0c:8d:ef:b9:52:76:2b:36:0e:d8:a2:87:2e: 28:6b:4c:73:13:4c:d6:65:f4:c4:8a:fb:d7:5e:8b: c2:b2:5a:19:e7:7e:d1:ac:c7:3f:3c:62:cf:0c:ba: 77:da:de:f7:12:7d:d9:4d:b1:8f:33:00:5d:07:30: 4b:58:6c:7e:10:fa:6f:d0:6b:a4:c9:44:ed:b8:d3: d1:af:93:a3:1b:40:51:5b:a6:86:4c:78:e0:c7:b1: 4f:82:9c:e6:c3:0f:6c:da:8c:49:bf:1e:fb:97:ab: e1:f4:3a:2c:e1:48:06:c8:0b:39:3a:4f:b4:36:33: 40:64:b8:f8:d2:c4:ef:ff:26:68:3f:43:2f:62:4d: 20:18:04:ca:3c:c4:c7:10:34:d1:0d:42:a8:b7:28: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:81:34:32:6E:0C:BD:A0:5E:55:D3:59:C6:73:90:61:D9:1B:EB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c338845b-f2bd-3441-b058-7ceea38bbb59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:3400::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ab:52:c2:f9:42:9a:bc:42:92:52:57:2f:87:4c:ec:30:1f: eb:fe:4f:9b:aa:91:f9:2e:b7:f6:76:ab:0d:01:f1:13:85:82: 34:be:81:a0:cb:e5:fc:b4:25:94:b1:bc:5d:ed:f7:5f:b8:8c: 2d:9f:78:84:8d:95:08:6b:54:30:ed:7d:9a:93:61:99:4a:22: 0e:7c:4e:3d:fb:ff:d0:57:72:a1:e7:24:f4:23:f4:53:a4:3c: 36:36:63:df:dc:92:a8:07:f8:88:31:6d:36:5b:8c:f8:55:43: 0e:da:ae:a2:dd:23:7f:9a:d2:a1:be:fb:0b:6f:06:6a:df:a1: bd:b6:7e:db:9a:6a:a8:84:a2:e8:e2:a1:b6:6d:78:0e:75:73: 25:7e:e3:98:4e:72:5f:3f:36:9c:04:37:34:7b:c5:89:58:2a: 5d:f8:27:d0:83:8a:23:9e:79:e7:7d:e9:6d:c2:a8:bd:27:12: 64:8d:a8:a1:ce:8b:09:b3:05:52:09:72:4e:9d:fc:66:22:71: 59:68:84:d8:0a:2e:5d:01:69:86:b7:bf:b8:cd:9e:be:f5:d3: ef:b5:7f:ba:fd:e0:9b:d4:b8:03:4c:75:00:dd:00:6d:2b:6c: 99:b9:24:a2:76:df:a7:f7:8e:44:13:64:8c:cb:9e:25:bb:03: e6:77:43:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g99QC932ecS2IukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTE3MTU1ZDEtZGRiMy00NDFhLWIwMzQtYjlmODI5MzUxNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLV49iyGVlLjBIpCiBTuTtoyciIb2CfnW+rn j19SpolUb3hVVL9VYlR0P2E1nHRZVkcqX7df4XQ01b3ftan+4TEpGWthiZ2zLR4v FWolNUcF1jJvv1T5sm4nhP3DunXfD8n24UT8aXnT2QyN77lSdis2Dtiihy4oa0xz E0zWZfTEivvXXovCsloZ537RrMc/PGLPDLp32t73En3ZTbGPMwBdBzBLWGx+EPpv 0GukyUTtuNPRr5OjG0BRW6aGTHjgx7FPgpzmww9s2oxJvx77l6vh9Dos4UgGyAs5 Ok+0NjNAZLj40sTv/yZoP0MvYk0gGATKPMTHEDTRDUKotyjmSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOyBNDJuDL2gXlXTWcZzkGHZG+vaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzMzODg0NWItZjJiZC0z NDQxLWIwNTgtN2NlZWEzOGJiYjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAjQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWrUsL5Qpq8QpJSVy+HTOwwH+v+T5uqkfkut/Z2qw0B8ROFgjS+ gaDL5fy0JZSxvF3t91+4jC2feISNlQhrVDDtfZqTYZlKIg58Tj37/9BXcqHnJPQj 9FOkPDY2Y9/ckqgH+IgxbTZbjPhVQw7arqLdI3+a0qG++wtvBmrfob22ftuaaqiE oujiobZteA51cyV+45hOcl8/NpwENzR7xYlYKl34J9CDiiOeeed96W3CqL0nEmSN qKHOiwmzBVIJck6d/GYicVlohNgKLl0BaYa3v7jNnr710++1f7r94JvUuANMdQDd AG0rbJm5JKJ236f3jkQTZIzLniW7A+Z3Q7M= -----END CERTIFICATE-----Generated at Sat Sep 26 14:15:08 2026 by rpki-client