$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/520b08d9-29a3-3f03-a2dd-cf5ee0304fb0.roa File: 520b08d9-29a3-3f03-a2dd-cf5ee0304fb0.roa (raw, json) Hash identifier: SEewTlayEAA5H1PZHQp3rspEi1BygeGO2NVpRXZie70= Subject key identifier: 82:F0:90:FC:18:B8:7C:6D:2C:C4:95:55:9C:B8:B6:19:CC:BB:D4:A0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F58CD667B91C63C2BAC1FD640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/520b08d9-29a3-3f03-a2dd-cf5ee0304fb0.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 54253 IP address blocks: 2603:c0c9::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:66:7b:91:c6:3c:2b:ac:1f:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=7ec17bae-989f-4a8f-b802-3e1c4e24bd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:7a:f5:62:81:fd:9c:0b:8f:59:1d:d2:cf: c3:78:33:56:15:99:27:aa:84:ee:ab:d8:40:df:d8: a5:fa:d7:87:e2:bf:38:e1:f5:d8:b4:91:5c:c5:96: b3:11:4f:90:85:3e:c7:7e:b8:bf:89:82:d9:71:89: fc:c6:a0:21:b8:8f:70:bd:fd:bf:57:42:56:c9:ed: cc:73:68:07:1c:b0:78:38:a2:e6:7e:a1:91:ac:a6: 02:96:a4:3d:67:68:3d:3e:1b:b7:fb:f6:54:59:8a: ff:1a:d2:fe:3a:80:77:86:d3:75:42:48:ec:cd:11: cf:6f:e3:e2:b2:bc:98:e6:f2:35:98:bc:96:44:83: 1e:6e:23:6f:aa:98:e4:10:97:f8:24:3c:5a:bc:b5: 85:bd:4b:13:dc:84:4e:58:4f:7c:c5:e7:09:02:2c: 3f:a1:56:7a:4e:84:7e:39:16:64:6d:d6:84:e8:90: 8a:9f:39:d4:6e:bc:85:ea:c4:49:1e:20:c7:3a:8b: ae:3c:eb:b1:6a:50:9a:b1:0f:fd:28:34:61:f5:77: f0:58:be:18:b6:f0:ff:8b:d7:79:c2:36:df:14:fb: 10:c9:8a:03:77:a5:56:83:cf:2f:7c:e9:ea:59:ea: 57:ff:ff:31:58:d3:8d:66:99:7c:bc:a6:91:c0:ab: e3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F0:90:FC:18:B8:7C:6D:2C:C4:95:55:9C:B8:B6:19:CC:BB:D4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/520b08d9-29a3-3f03-a2dd-cf5ee0304fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0c9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f8:54:7f:59:f1:7d:82:71:22:53:db:55:2e:e4:97:18:90: dc:cd:58:f5:61:12:07:67:19:95:14:cd:82:33:39:e6:92:23: a9:17:35:4e:ae:6d:05:0b:6a:d3:e2:b7:c9:d7:04:22:2f:16: 23:a0:45:30:b1:73:8a:50:42:a5:10:4e:3f:3e:79:ad:51:52: d8:73:bd:65:be:74:e7:d1:f6:34:ec:12:e9:91:73:58:c6:99: 7c:cf:de:23:a5:ff:77:13:9f:c1:3f:5a:9d:6c:9b:34:5a:4c: 53:58:8a:a1:0a:23:d6:88:44:6c:6c:8f:40:a1:43:87:84:1d: 59:69:53:af:4a:a6:c9:21:a3:51:97:8f:40:02:05:40:6b:f3: a7:84:7a:0a:6f:e3:b2:d0:1f:37:e3:c9:0b:16:89:14:28:fb: 57:78:b1:7f:94:a4:49:d1:5a:1e:f6:fc:65:f2:5d:16:99:75: 65:9b:93:f8:5c:8b:25:db:29:79:47:9b:95:c3:5e:26:6e:8c: a7:2e:b7:b6:8e:8b:9a:3d:7e:cf:00:67:3e:56:12:94:ae:6f: 04:1b:a7:a8:38:d2:22:d0:14:cc:f8:78:7c:88:95:18:35:ab: 34:f6:c3:61:54:a3:e4:c1:20:8e:8e:ab:6d:78:82:b9:5e:c2: a9:b2:cc:ec -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9YzWZ7kcY8K6wf1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk N2VjMTdiYWUtOTg5Zi00YThmLWI4MDItM2UxYzRlMjRiZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3t69WKB/ZwLj1kd0s/DeDNWFZknqoTuq9hA 39il+teH4r844fXYtJFcxZazEU+QhT7Hfri/iYLZcYn8xqAhuI9wvf2/V0JWye3M c2gHHLB4OKLmfqGRrKYClqQ9Z2g9Phu3+/ZUWYr/GtL+OoB3htN1QkjszRHPb+Pi sryY5vI1mLyWRIMebiNvqpjkEJf4JDxavLWFvUsT3IROWE98xecJAiw/oVZ6ToR+ ORZkbdaE6JCKnznUbryF6sRJHiDHOouuPOuxalCasQ/9KDRh9XfwWL4YtvD/i9d5 wjbfFPsQyYoDd6VWg88vfOnqWepX//8xWNONZpl8vKaRwKvjPQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFILwkPwYuHxtLMSVVZy4thnMu9SgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTIwYjA4ZDktMjlhMy0z ZjAzLWEyZGQtY2Y1ZWUwMzA0ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAyQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhPhUf1nxfYJxIlPbVS7klxiQ3M1Y9WESB2cZlRTNgjM55pIjqRc1 Tq5tBQtq0+K3ydcEIi8WI6BFMLFzilBCpRBOPz55rVFS2HO9Zb5059H2NOwS6ZFz WMaZfM/eI6X/dxOfwT9anWybNFpMU1iKoQoj1ohEbGyPQKFDh4QdWWlTr0qmySGj UZePQAIFQGvzp4R6Cm/jstAfN+PJCxaJFCj7V3ixf5SkSdFaHvb8ZfJdFpl1ZZuT +FyLJdspeUeblcNeJm6Mpy63to6Lmj1+zwBnPlYSlK5vBBunqDjSItAUzPh4fIiV GDWrNPbDYVSj5MEgjo6rbXiCuV7CqbLM7A== -----END CERTIFICATE-----Generated at Mon Oct 12 18:38:18 2026 by rpki-client