$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37b971a-c28b-3eec-975d-28e398e2d606.roa File: e37b971a-c28b-3eec-975d-28e398e2d606.roa (raw, json) Hash identifier: h0otL/ZLQKM+dIEIZNVWBqzTZVkGoUGW35XKktQ8i9E= Subject key identifier: 14:02:BC:45:6A:02:95:40:FA:7C:4E:C8:05:B5:BC:0F:74:A1:2F:E2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235C516FF8DA495CABB080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37b971a-c28b-3eec-975d-28e398e2d606.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Mon 25 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 2603:1061:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5c:51:6f:f8:da:49:5c:ab:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : Mar 25 04:00:00 2030 GMT Subject: CN=6db8d3cd-cd5b-4c8b-adcd-fa501b76dd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:12:9e:06:a9:94:32:a7:ef:9b:62:75:65:e9: 51:48:2d:45:d4:f1:c8:cc:4e:c1:74:6c:0c:b7:5b: a4:6f:44:76:61:09:85:c4:42:09:51:ea:ff:5f:e5: 78:f8:3f:c4:00:53:ff:ed:76:ea:ce:17:bb:53:54: 4e:db:ab:ef:e5:9c:b8:68:3a:1f:07:8b:e3:46:24: 9f:6f:27:1f:e4:5a:28:5c:6a:0f:17:63:82:63:ec: 9b:f9:46:1c:5d:9f:6e:e5:50:ff:b7:75:9d:bf:d6: 93:f8:d4:b4:76:f3:db:13:c6:99:96:f7:8d:78:4f: b5:bf:b5:f7:96:40:38:a7:c7:f6:0d:df:98:53:0a: 64:33:f9:6b:c7:48:64:4b:5b:a4:25:88:c4:81:62: ad:48:59:bf:e8:e2:da:f2:97:f9:43:a3:00:dc:2e: f8:27:3e:46:3e:06:01:f0:e7:2c:5d:a6:2b:23:90: af:b6:41:2d:d7:f1:27:ed:f1:d4:62:88:a1:17:b0: 27:06:23:25:37:b5:0a:59:45:09:86:da:1e:20:2e: 78:a6:21:0d:10:47:da:df:04:4b:e9:f9:47:da:99: 21:39:e9:73:6f:af:77:bd:fd:d3:0b:16:cc:13:f4: 71:a7:f4:06:5a:59:af:be:e8:cc:9b:df:36:14:ce: d8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:02:BC:45:6A:02:95:40:FA:7C:4E:C8:05:B5:BC:0F:74:A1:2F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37b971a-c28b-3eec-975d-28e398e2d606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2603:1061:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e2:8e:63:8f:d7:ce:86:40:5a:e7:98:25:ca:d4:bb:da:57: 10:35:00:7c:3d:ae:5a:e3:41:ae:c6:2a:f8:35:4c:89:93:54: 03:9e:8f:54:b3:b8:f3:08:ac:ff:11:a6:46:b3:b6:67:fe:66: 33:ca:1d:d0:9f:c4:9d:43:2a:dc:d9:f7:62:e5:f5:0e:ae:82: 82:25:d9:43:2a:e0:99:50:25:95:d1:b7:bd:bd:96:28:be:23: bb:4f:60:8c:2a:77:88:a6:35:9b:20:8d:e7:08:9f:65:a6:e6: 20:a1:a6:99:de:01:7d:2f:32:15:74:e5:a4:73:c7:5c:24:8b: 54:40:e8:1d:20:ad:56:63:32:3b:74:35:c2:95:aa:98:13:b0: 49:9d:6e:0f:dc:32:3a:ac:b1:2a:41:a0:5c:dd:4e:c4:18:f2: f5:49:e9:9d:c4:b3:b0:79:9c:91:06:c4:ee:8f:2b:ff:42:0f: 49:47:b7:87:0c:f0:75:fc:6e:f4:b0:5d:8e:52:a4:53:59:71: 62:ee:32:b3:90:3a:b7:86:b9:ec:46:27:3d:94:53:89:f6:e2: 6d:0d:20:2d:35:ef:c8:22:85:a9:a4:fa:bf:ff:0b:9d:a4:51: 5c:8b:29:1f:48:0d:e2:71:89:e6:b6:e4:fe:46:d0:f5:f0:ba: a0:54:6c:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7kI1xRb/jaSVyrsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDMyNTA0MDAwMFowLzEtMCsGA1UEAxMk NmRiOGQzY2QtY2Q1Yi00YzhiLWFkY2QtZmE1MDFiNzZkZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxKeBqmUMqfvm2J1ZelRSC1F1PHIzE7BdGwM t1ukb0R2YQmFxEIJUer/X+V4+D/EAFP/7Xbqzhe7U1RO26vv5Zy4aDofB4vjRiSf bycf5FooXGoPF2OCY+yb+UYcXZ9u5VD/t3Wdv9aT+NS0dvPbE8aZlveNeE+1v7X3 lkA4p8f2Dd+YUwpkM/lrx0hkS1ukJYjEgWKtSFm/6OLa8pf5Q6MA3C74Jz5GPgYB 8OcsXaYrI5CvtkEt1/En7fHUYoihF7AnBiMlN7UKWUUJhtoeIC54piENEEfa3wRL 6flH2pkhOelzb693vf3TCxbME/Rxp/QGWlmvvujMm982FM7YTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBQCvEVqApVA+nxOyAW1vA90oS/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTM3Yjk3MWEtYzI4Yi0z ZWVjLTk3NWQtMjhlMzk4ZTJkNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgMQYQAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFPijmOP186GQFrnmCXK1LvaVxA1AHw9rlrjQa7GKvg1TImTVAOe j1SzuPMIrP8Rpkaztmf+ZjPKHdCfxJ1DKtzZ92Ll9Q6ugoIl2UMq4JlQJZXRt729 lii+I7tPYIwqd4imNZsgjecIn2Wm5iChppneAX0vMhV05aRzx1wki1RA6B0grVZj Mjt0NcKVqpgTsEmdbg/cMjqssSpBoFzdTsQY8vVJ6Z3Es7B5nJEGxO6PK/9CD0lH t4cM8HX8bvSwXY5SpFNZcWLuMrOQOreGuexGJz2UU4n24m0NIC0178gihamk+r// C52kUVyLKR9IDeJxiea25P5G0PXwuqBUbJ0= -----END CERTIFICATE-----Generated at Sat Sep 5 00:42:47 2026 by rpki-client