$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa File: c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa (raw, json) Hash identifier: KYe9ZdTUlZGdEVDXCzHe97idfa5SbW2/0P+UFfBNIaU= Subject key identifier: 18:FC:54:2B:2B:51:39:C1:69:CD:E7:B2:33:F3:5D:8D:44:44:46:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7FFA2A2F310550F35EDD5CE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 2600:2000:2130::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:2a:2f:31:05:50:f3:5e:dd:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=69d25ad8-5868-4dc3-aaa9-14f16914581b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:a9:22:33:7a:4d:f6:01:ec:2c:9a:ad:ad: 6e:77:f6:fc:d5:f3:5f:99:40:e4:6b:e3:b1:6e:91: 22:71:a0:37:a6:15:39:16:31:bf:ab:31:7d:95:d3: e8:3a:79:f7:a6:73:a6:1a:2d:b6:ab:26:c7:f1:a6: 24:55:54:94:ef:1d:63:8f:5d:56:89:9e:2e:73:47: 8f:b6:b9:98:78:b2:71:05:ab:14:ca:0c:63:ea:66: 98:4d:20:4c:c2:a1:8f:a6:5c:97:22:9a:68:30:59: f8:aa:ef:f4:c4:a3:d6:d7:9d:c0:db:33:07:b9:c5: 24:07:d6:03:7a:17:c5:44:27:2b:09:f6:10:f5:60: 2f:d3:e2:0d:36:45:43:d5:35:a7:dc:4e:55:ec:48: d7:38:0a:2d:96:73:75:ca:12:2b:35:3a:93:08:d1: 57:c7:20:20:bf:c2:44:3f:75:9c:c2:a2:fa:a0:ae: 1b:c4:8c:df:25:97:9d:1a:aa:b1:e4:4c:a7:06:ff: 3c:35:f1:65:7a:29:c0:ec:7d:31:15:72:a0:47:57: 5d:ed:6e:cd:a6:33:3f:f4:ca:4a:4d:d2:f8:dd:c1: 80:c1:19:bc:fe:1f:e1:2d:83:7b:13:e6:75:f2:6d: 34:ba:8a:3a:26:fb:37:2f:5c:79:25:83:84:05:19: 3a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FC:54:2B:2B:51:39:C1:69:CD:E7:B2:33:F3:5D:8D:44:44:46:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:46:4e:be:4a:73:2f:df:08:9e:63:37:5d:43:18:ad:ab:3e: b2:12:01:23:73:3c:ba:b5:08:74:46:96:e1:58:1a:b2:67:95: c1:24:91:a9:f5:c7:84:9b:aa:af:37:58:c7:2b:1b:09:15:b8: 55:52:14:1f:0a:2b:a5:b6:67:e7:d8:85:61:e2:a8:0c:46:31: a0:20:85:5c:b7:e6:6f:af:98:8b:50:50:e8:1f:2e:6c:87:e4: 11:43:0c:50:19:cf:ea:46:e8:55:95:ec:da:17:33:8f:c1:05: e2:44:3b:4f:5f:b6:2b:6b:e2:a5:6a:d9:c5:9e:f7:73:9a:b0: 2e:9e:33:1c:83:ac:1a:c9:9e:28:a4:9b:21:e8:ed:81:b9:f8: b5:36:fa:98:60:91:e8:43:79:92:4f:c6:55:71:59:3c:df:50: 35:e1:4e:bf:b5:17:d3:15:ed:c4:ce:11:73:f7:ef:08:8f:71: 78:ed:41:e7:c9:16:e5:19:21:a0:9f:ed:2f:d9:44:a3:bc:6d: d6:02:43:18:8c:9e:f5:e2:8e:b9:5c:ff:49:fb:60:1f:d8:fc: 8e:37:66:2e:21:69:37:71:6b:58:c0:69:e7:7c:eb:27:85:14: 37:bf:f2:87:b3:06:1f:c2:c9:92:c1:f9:92:93:1a:02:6f:36: 1c:ca:fe:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5/+iovMQVQ817dXOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk NjlkMjVhZDgtNTg2OC00ZGMzLWFhYTktMTRmMTY5MTQ1ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn6pIjN6TfYB7Cyara1ud/b81fNfmUDka+Ox bpEicaA3phU5FjG/qzF9ldPoOnn3pnOmGi22qybH8aYkVVSU7x1jj11WiZ4uc0eP trmYeLJxBasUygxj6maYTSBMwqGPplyXIppoMFn4qu/0xKPW153A2zMHucUkB9YD ehfFRCcrCfYQ9WAv0+INNkVD1TWn3E5V7EjXOAotlnN1yhIrNTqTCNFXxyAgv8JE P3WcwqL6oK4bxIzfJZedGqqx5EynBv88NfFleinA7H0xFXKgR1dd7W7NpjM/9MpK TdL43cGAwRm8/h/hLYN7E+Z18m00uoo6Jvs3L1x5JYOEBRk6xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBj8VCsrUTnBac3nsjPzXY1EREZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzhhYTk4NTktZTNiYS0z YmY0LWJhMzctNTFkMTBjNzk4ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACNGTr5Kcy/fCJ5jN11DGK2rPrISASNzPLq1CHRGluFYGrJnlcEk kan1x4Sbqq83WMcrGwkVuFVSFB8KK6W2Z+fYhWHiqAxGMaAghVy35m+vmItQUOgf LmyH5BFDDFAZz+pG6FWV7NoXM4/BBeJEO09ftitr4qVq2cWe93OasC6eMxyDrBrJ niikmyHo7YG5+LU2+phgkehDeZJPxlVxWTzfUDXhTr+1F9MV7cTOEXP37wiPcXjt QefJFuUZIaCf7S/ZRKO8bdYCQxiMnvXijrlc/0n7YB/Y/I43Zi4haTdxa1jAaed8 6yeFFDe/8oezBh/CyZLB+ZKTGgJvNhzK/hk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:49:22 2026 by rpki-client