$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/353addaa-b89d-3f5c-a831-4635404a8e4f.roa File: 353addaa-b89d-3f5c-a831-4635404a8e4f.roa (raw, json) Hash identifier: APSOqc6wu8Y5nJhACrzV3di8oBdyx9r2SI32xiCjTHo= Subject key identifier: 3D:9E:33:15:4D:DD:D5:1F:ED:F6:05:E1:43:A3:D2:E1:FF:F0:D3:9B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA78862FF4288D87CAA61DE40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/353addaa-b89d-3f5c-a831-4635404a8e4f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 2603:c0e1::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:62:ff:42:88:d8:7c:aa:61:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5c2bd334-0492-43c4-929c-8a43baaa4f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:b2:a9:1b:d1:fa:c0:af:8b:cb:97:db:52: 3d:8a:37:2d:b6:ea:c1:34:69:95:36:67:9d:2a:b5: b8:b6:58:75:aa:b1:ad:93:1c:86:5b:bc:14:ed:d8: be:01:4c:c9:67:ee:f6:cb:4d:8e:dd:7a:64:af:f5: 0b:b2:a1:21:e4:77:ba:31:1f:69:a8:3a:53:4b:2b: 83:b0:df:a3:e2:f9:91:43:28:27:b5:84:2d:db:a5: 28:8f:0e:2a:e7:1d:8c:8f:c8:ca:6a:ea:93:7f:8a: 2e:ed:7f:bd:ad:69:eb:f3:c3:93:c9:f3:4b:69:a9: 97:f6:87:cb:81:fb:db:fa:13:2d:b2:f3:cb:cb:68: a5:2e:c5:95:b2:27:02:63:38:fa:12:2c:60:23:8d: c9:25:a8:00:3b:d4:30:3e:bc:9c:a4:1e:ab:20:96: a6:33:d9:03:35:f2:be:d8:2e:b0:c0:dd:3d:37:33: 07:2f:34:f7:c0:ff:74:85:27:67:0d:44:71:32:bf: 14:fe:b7:32:08:f4:b7:15:97:6a:80:fb:9c:41:94: 85:68:9e:19:6f:69:5b:bb:4e:0c:b2:1e:bc:89:08: 57:7c:0a:55:77:2a:d3:64:65:5d:88:a1:ff:c6:a0: 3d:bc:de:93:78:b5:be:d6:d0:8d:9e:87:b4:61:58: b4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:33:15:4D:DD:D5:1F:ED:F6:05:E1:43:A3:D2:E1:FF:F0:D3:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/353addaa-b89d-3f5c-a831-4635404a8e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0e1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:0d:8c:f6:8d:1f:27:5f:00:1e:c3:90:48:cd:9a:5e:c2:3b: 93:74:01:b2:6c:ee:04:1e:80:4a:c6:d4:69:f0:04:40:ce:5f: f2:48:57:6e:43:dd:4c:48:0b:5a:19:cb:e5:0d:eb:3f:6f:25: fa:b6:1c:24:61:17:52:63:bd:ec:61:50:74:90:b9:9d:d6:c9: b4:b7:59:a0:da:32:f5:7a:e6:66:52:c5:65:39:9d:34:4f:d1: 38:ac:72:88:a2:22:1f:87:1c:83:3e:ec:d5:0e:fc:24:3e:a6: 41:80:8f:15:72:19:be:d6:9f:fc:bd:de:a7:01:ba:11:9c:62: 6d:02:42:c6:a0:4b:94:44:ce:c7:de:b7:af:fb:fc:78:0a:1e: 06:b1:bf:a0:9b:ab:6a:bd:22:f6:00:15:99:49:c6:00:4a:a7: c7:51:21:a9:b3:d4:25:68:26:b0:96:6a:4b:ba:d7:ee:47:d9: 78:e4:8d:e3:1e:e2:f3:be:66:84:28:c3:c4:35:48:f7:f4:ba: 72:f8:0a:f7:c6:ff:28:4d:56:c7:a4:11:e2:37:b3:73:68:22: c4:56:36:fc:8f:8e:79:4d:70:f9:fe:91:21:fa:6a:52:f7:bf: 0e:6e:75:31:de:73:7f:f9:01:c6:54:00:73:e9:19:de:7c:c8: 7f:d4:34:67 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6niGL/QojYfKph3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWMyYmQzMzQtMDQ5Mi00M2M0LTkyOWMtOGE0M2JhYWE0ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkiyqRvR+sCvi8uX21I9ijctturBNGmVNmed KrW4tlh1qrGtkxyGW7wU7di+AUzJZ+72y02O3Xpkr/ULsqEh5He6MR9pqDpTSyuD sN+j4vmRQygntYQt26Uojw4q5x2Mj8jKauqTf4ou7X+9rWnr88OTyfNLaamX9ofL gfvb+hMtsvPLy2ilLsWVsicCYzj6EixgI43JJagAO9QwPrycpB6rIJamM9kDNfK+ 2C6wwN09NzMHLzT3wP90hSdnDURxMr8U/rcyCPS3FZdqgPucQZSFaJ4Zb2lbu04M sh68iQhXfApVdyrTZGVdiKH/xqA9vN6TeLW+1tCNnoe0YVi00wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD2eMxVN3dUf7fYF4UOj0uH/8NObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzUzYWRkYWEtYjg5ZC0z ZjVjLWE4MzEtNDYzNTQwNGE4ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPA4QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkQ2M9o0fJ18AHsOQSM2aXsI7k3QBsmzuBB6ASsbUafAEQM5f8khX bkPdTEgLWhnL5Q3rP28l+rYcJGEXUmO97GFQdJC5ndbJtLdZoNoy9XrmZlLFZTmd NE/ROKxyiKIiH4ccgz7s1Q78JD6mQYCPFXIZvtaf/L3epwG6EZxibQJCxqBLlETO x963r/v8eAoeBrG/oJurar0i9gAVmUnGAEqnx1EhqbPUJWgmsJZqS7rX7kfZeOSN 4x7i875mhCjDxDVI9/S6cvgK98b/KE1Wx6QR4jezc2gixFY2/I+OeU1w+f6RIfpq Uve/Dm51Md5zf/kBxlQAc+kZ3nzIf9Q0Zw== -----END CERTIFICATE-----Generated at Thu Aug 27 11:29:55 2026 by rpki-client