$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8c0c18a-964a-33d6-8c43-5f60b7534a57.roa File: d8c0c18a-964a-33d6-8c43-5f60b7534a57.roa (raw, json) Hash identifier: TpNyrnYbbTBii/k3kPjqu8iE8ZuTAiZxnYpzjgXxHA8= Subject key identifier: AE:AC:72:A1:44:76:BF:97:79:A7:4C:88:38:D7:A6:62:77:6B:EB:7A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94EDBAA21FD3AB1A05C240 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8c0c18a-964a-33d6-8c43-5f60b7534a57.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 2603:c002:2300::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ed:ba:a2:1f:d3:ab:1a:05:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=ab55a469-1e26-423e-816c-429c5cd9c3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2e:74:da:51:a3:81:ea:d1:d0:90:62:72:30: 6f:1d:0c:3b:55:d1:b9:c0:3c:0d:8f:0c:b8:f5:ec: b5:9c:62:df:87:3f:ff:36:75:18:9e:77:59:cf:a6: 2d:a7:86:a2:a0:b2:b7:9b:aa:cb:44:b5:0c:55:01: b8:33:4d:95:ad:27:f8:71:05:b2:75:d6:eb:1a:47: 16:19:c9:a4:e3:72:c3:39:04:1a:f0:da:4f:a4:d7: 3f:d6:33:af:cd:64:a2:a8:32:57:b5:64:da:c4:aa: 59:8f:b4:fd:61:50:9e:9b:b2:30:ec:9a:af:82:a3: 1e:49:e8:3a:9d:98:3a:a2:9c:82:17:47:06:ab:ff: 25:a6:2c:3e:7d:52:3b:07:3a:07:2d:fd:7d:d8:d4: db:2a:fb:25:c9:01:9d:ec:18:c7:7f:c2:98:ba:08: 35:dc:b6:f1:68:04:d5:bf:e7:48:bb:2e:6b:d7:45: 96:b4:fc:81:21:67:0d:d1:48:04:2c:e1:72:61:85: 9c:20:3b:f7:ef:76:42:bb:ac:0e:28:ae:de:d7:55: b1:1a:e2:c3:24:87:d3:18:9a:b2:5f:58:77:a1:56: f2:e0:ec:c4:cc:e8:3d:c6:59:e5:79:dd:ec:80:2a: 5a:48:f8:5d:a3:73:f3:38:e2:7c:ba:6e:fc:15:c7: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AC:72:A1:44:76:BF:97:79:A7:4C:88:38:D7:A6:62:77:6B:EB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d8c0c18a-964a-33d6-8c43-5f60b7534a57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:2300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c2:48:02:70:cd:85:da:1f:47:45:ac:6f:a8:ab:ff:1a:4b: a6:6f:7a:30:d8:68:15:70:c9:a4:ed:01:6a:8a:0b:bf:b2:b2: 5b:b5:24:b2:6f:ad:9f:39:d5:d4:a8:dc:15:20:f7:f8:28:0a: 80:1f:87:51:de:df:3f:c4:4b:db:71:d6:01:27:9e:09:e2:50: 0a:59:16:e2:7d:02:7e:b3:c9:6d:06:ab:fe:6e:0d:80:f8:c2: 3d:58:29:a4:dd:4f:40:af:eb:ec:9f:de:bb:63:ed:e9:4c:a8: 7c:fa:c5:c0:2e:9e:a9:15:71:03:87:43:a2:cf:6e:04:5a:da: b6:9f:63:e1:63:fe:0c:c1:d3:ed:a8:93:93:2a:72:63:22:82: fb:88:f7:91:2d:bd:3a:1e:eb:6a:e5:be:ce:5f:61:55:a5:6c: f7:98:77:f4:2b:d1:06:88:62:ce:a7:7f:73:48:81:87:2a:46: 9b:c7:69:15:07:33:4a:a5:5a:7d:b6:b7:15:ee:d7:4c:50:f6: 90:30:3c:44:0c:9d:12:3d:8c:96:96:a3:83:15:b7:74:54:fc: 59:9b:ba:d4:e7:e5:d3:f0:39:91:54:3b:6f:43:20:64:de:92: b1:bf:df:d7:81:ad:82:63:2e:ce:bc:bc:ea:55:b7:bc:f9:61: ae:f9:88:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5+lO26oh/TqxoFwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YWI1NWE0NjktMWUyNi00MjNlLTgxNmMtNDI5YzVjZDljM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC502lGjgerR0JBicjBvHQw7VdG5wDwNjwy4 9ey1nGLfhz//NnUYnndZz6Ytp4aioLK3m6rLRLUMVQG4M02VrSf4cQWyddbrGkcW Gcmk43LDOQQa8NpPpNc/1jOvzWSiqDJXtWTaxKpZj7T9YVCem7Iw7JqvgqMeSeg6 nZg6opyCF0cGq/8lpiw+fVI7BzoHLf192NTbKvslyQGd7BjHf8KYugg13LbxaATV v+dIuy5r10WWtPyBIWcN0UgELOFyYYWcIDv373ZCu6wOKK7e11WxGuLDJIfTGJqy X1h3oVby4OzEzOg9xlnled3sgCpaSPhdo3PzOOJ8um78FcfNVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6scqFEdr+XeadMiDjXpmJ3a+t6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDhjMGMxOGEtOTY0YS0z M2Q2LThjNDMtNWY2MGI3NTM0YTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAiMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABDCSAJwzYXaH0dFrG+oq/8aS6ZvejDYaBVwyaTtAWqKC7+yslu1 JLJvrZ851dSo3BUg9/goCoAfh1He3z/ES9tx1gEnngniUApZFuJ9An6zyW0Gq/5u DYD4wj1YKaTdT0Cv6+yf3rtj7elMqHz6xcAunqkVcQOHQ6LPbgRa2rafY+Fj/gzB 0+2ok5MqcmMigvuI95EtvToe62rlvs5fYVWlbPeYd/Qr0QaIYs6nf3NIgYcqRpvH aRUHM0qlWn22txXu10xQ9pAwPEQMnRI9jJaWo4MVt3RU/FmbutTn5dPwOZFUO29D IGTekrG/39eBrYJjLs68vOpVt7z5Ya75iG4= -----END CERTIFICATE-----Generated at Fri Jul 24 09:08:47 2026 by rpki-client