$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fabf7e30-41f7-3ef4-bdec-313ee5e88c6f.roa File: fabf7e30-41f7-3ef4-bdec-313ee5e88c6f.roa (raw, json) Hash identifier: rpNWhfLvhF5WsG5aUEAmyTX6+yKfjXk4GJ2b0fEa4N4= Subject key identifier: 2E:CD:A6:CF:58:03:19:28:F3:B5:B9:34:89:8E:93:45:98:01:72:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94E19CBB124378FA5D4AC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fabf7e30-41f7-3ef4-bdec-313ee5e88c6f.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 2603:c002:b000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e1:9c:bb:12:43:78:fa:5d:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=e1ce082a-e1df-45e0-afa7-10f85a5f027a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:c4:24:64:19:d1:af:0e:01:17:b1:24:a2: 81:a9:de:6d:c5:31:2e:ff:f7:ab:ba:4c:c0:83:3c: 12:b3:4a:3a:be:0f:26:d8:22:40:27:3d:de:d0:43: da:4e:19:39:96:48:e9:55:f5:1d:b6:7a:7d:d9:54: b5:15:96:e6:50:ef:49:49:71:19:e6:0b:0d:51:a2: a2:71:67:f8:39:96:10:e1:97:54:81:f8:bd:97:9c: 32:bc:2a:dc:9b:c5:fd:09:05:1e:d5:af:2c:87:fd: 4e:85:69:f0:e7:df:96:9c:24:90:7e:3d:4b:79:dd: 7d:81:d3:83:6a:61:63:4d:21:59:7d:8d:80:9a:07: b5:90:6d:84:5d:4b:6b:cc:57:4b:81:14:71:1a:d3: d9:6f:f7:2d:70:c1:2e:7e:7e:d5:1e:13:83:bb:fc: 89:34:1b:1a:5b:fe:29:25:c1:48:d9:1a:e3:a4:d4: 85:16:b7:86:bb:e0:af:e7:d4:71:16:6f:48:df:71: 03:fc:30:93:ae:d6:ac:16:2c:67:f4:d8:36:65:45: ac:1e:ab:25:61:ef:3d:a2:3a:f9:d8:88:a1:b4:15: 55:6a:c2:27:1c:a9:b0:9f:15:61:b4:b9:7a:ed:37: 02:5a:f4:f0:c0:e5:67:3a:36:d2:8a:f2:7f:ab:ab: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CD:A6:CF:58:03:19:28:F3:B5:B9:34:89:8E:93:45:98:01:72:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fabf7e30-41f7-3ef4-bdec-313ee5e88c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1f:51:5f:6b:a0:6e:43:c1:30:68:66:e1:f1:98:6f:c4:b2: e7:e3:61:3c:7b:c7:91:02:7f:10:83:a4:48:21:50:21:8e:fd: 7a:e0:b7:72:d9:13:f5:02:ca:6c:74:bd:1d:53:27:26:4e:d7: a6:46:64:bd:5c:71:d0:73:c2:89:37:f3:87:b7:00:db:3a:63: db:bf:4f:c9:16:74:e7:f5:1a:fb:85:12:30:34:30:14:71:00: 55:e0:52:59:43:55:19:f7:db:d8:b1:80:6c:35:e8:ee:cf:64: ef:14:60:dd:fb:e1:b3:79:1e:de:a0:84:d4:0a:0d:10:2a:1b: 17:47:67:6d:41:b9:fb:43:a1:5f:bf:d7:ab:be:45:26:1e:bf: d9:cf:a6:1a:50:50:57:d0:cc:a0:36:46:ea:99:57:af:da:f9: d1:fe:b3:12:37:2a:a6:16:37:ca:46:7c:34:71:22:e7:9f:93: bd:e8:1a:1a:e0:23:c9:da:20:8a:55:56:77:7c:fe:69:68:26: 1f:f9:59:df:f6:41:04:76:76:e5:4a:f2:4b:28:c6:8b:25:9b: 83:9f:fd:5d:97:47:ce:4a:bf:4c:20:00:50:1e:b1:9b:68:e5: dc:7b:d2:5d:cc:9b:02:84:7c:a5:bd:6c:54:67:d9:53:30:e4: 34:e8:f8:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5+lOGcuxJDePpdSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZTFjZTA4MmEtZTFkZi00NWUwLWFmYTctMTBmODVhNWYwMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrPEJGQZ0a8OARexJKKBqd5txTEu//erukzA gzwSs0o6vg8m2CJAJz3e0EPaThk5lkjpVfUdtnp92VS1FZbmUO9JSXEZ5gsNUaKi cWf4OZYQ4ZdUgfi9l5wyvCrcm8X9CQUe1a8sh/1OhWnw59+WnCSQfj1Led19gdOD amFjTSFZfY2Amge1kG2EXUtrzFdLgRRxGtPZb/ctcMEufn7VHhODu/yJNBsaW/4p JcFI2RrjpNSFFreGu+Cv59RxFm9I33ED/DCTrtasFixn9Ng2ZUWsHqslYe89ojr5 2IihtBVVasInHKmwnxVhtLl67TcCWvTwwOVnOjbSivJ/q6vVzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC7Nps9YAxko87W5NImOk0WYAXLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmFiZjdlMzAtNDFmNy0z ZWY0LWJkZWMtMzEzZWU1ZTg4YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAArAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYfUV9roG5DwTBoZuHxmG/EsufjYTx7x5ECfxCDpEghUCGO/Xrg t3LZE/UCymx0vR1TJyZO16ZGZL1ccdBzwok384e3ANs6Y9u/T8kWdOf1GvuFEjA0 MBRxAFXgUllDVRn329ixgGw16O7PZO8UYN374bN5Ht6ghNQKDRAqGxdHZ21BuftD oV+/16u+RSYev9nPphpQUFfQzKA2RuqZV6/a+dH+sxI3KqYWN8pGfDRxIuefk73o GhrgI8naIIpVVnd8/mloJh/5Wd/2QQR2duVK8ksoxoslm4Of/V2XR85Kv0wgAFAe sZto5dx70l3MmwKEfKW9bFRn2VMw5DTo+Gs= -----END CERTIFICATE-----Generated at Fri Jul 24 00:16:30 2026 by rpki-client