$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61145399-64ab-359c-a6f1-5765df6395b3.roa File: 61145399-64ab-359c-a6f1-5765df6395b3.roa (raw, json) Hash identifier: KXQNGNZAoibyrrmVMvDBnofMZQrbwUngVbH5RNP1OX0= Subject key identifier: 02:C0:C2:64:12:6E:4A:43:F8:90:22:F7:45:62:55:5A:7C:AE:48:5A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64F7C3075FA47DA73B2200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61145399-64ab-359c-a6f1-5765df6395b3.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 2603:c002:3800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f7:c3:07:5f:a4:7d:a7:3b:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=09fd85c4-d981-4dc3-bea6-3aa5310ab9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:63:c5:4d:ef:bc:13:1e:44:c6:af:9c:0a: 01:31:cc:16:91:7b:f1:14:ff:31:cc:58:8f:13:ca: b9:ce:b8:a8:cf:00:e8:80:16:43:cf:6a:af:18:5c: 7c:5b:5c:94:25:92:7c:38:fc:d2:1b:d8:9d:b4:97: b3:0d:d9:77:f5:4a:a3:6d:78:16:59:16:2f:85:8a: c2:3f:6f:90:f4:68:d9:e0:a0:a4:ae:91:f4:36:c3: 0b:f9:e1:11:91:f4:ed:32:f3:d1:38:1b:96:a1:29: 6a:18:40:b2:38:1c:b4:75:0f:3b:73:64:2e:ca:9b: 0d:55:93:b4:78:5a:ec:a4:d9:8a:61:3f:12:11:f5: a0:24:f1:66:40:26:6b:5a:3e:ac:eb:e4:5a:4a:2d: ba:68:fc:88:cb:12:6b:5f:60:16:37:2c:32:b9:ac: 6d:d3:8f:38:1b:9d:7d:09:6b:9e:2b:87:da:52:23: 2b:f2:4c:3d:72:94:15:2e:70:85:bb:bd:7f:e4:ce: 98:af:da:4a:ab:f1:33:4c:f1:aa:05:8f:5d:e1:fe: db:79:18:ce:e1:e6:79:73:a3:00:b9:50:c4:8f:2c: f1:5a:66:be:73:11:fb:5a:86:c2:ca:9c:8e:5a:df: df:c7:4e:65:73:ad:02:a8:3b:90:df:10:57:d5:31: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:C2:64:12:6E:4A:43:F8:90:22:F7:45:62:55:5A:7C:AE:48:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61145399-64ab-359c-a6f1-5765df6395b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:3800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c0:74:6f:d3:54:8b:9c:96:19:4f:7c:c2:0b:34:66:69:12: 3b:15:e9:88:e0:79:b9:68:b4:d2:d7:1e:44:5a:c7:d2:c8:48: d0:20:56:1e:e9:be:43:44:2b:14:d6:be:db:f7:ee:80:42:a5: d0:ff:84:7e:1b:91:5c:17:52:8d:c8:ac:d9:d8:32:c0:7b:f1: 86:cc:49:64:fa:a0:37:82:b1:b6:42:22:9e:e0:d2:b4:2e:a2: eb:d2:b1:0f:0f:fc:a3:66:b2:a7:3c:34:28:7b:3c:8d:7d:21: 3f:60:94:ec:f9:b0:81:4b:d7:09:57:31:0b:75:c6:ef:c8:bc: 7f:f9:cf:c3:2a:53:45:27:b1:dc:94:94:77:1f:3e:3c:d2:5f: a7:14:ee:53:51:a8:a6:ac:3a:27:76:7f:03:84:5e:8f:9d:f2: a8:88:8c:74:56:6b:3c:a0:8f:57:78:ac:fe:b5:85:32:ce:d2: 28:0e:21:0b:72:fd:30:7c:2c:99:40:78:4a:dd:43:23:70:22: 21:53:e1:93:e1:21:48:b5:05:bb:1a:5c:08:cc:c2:e6:10:be: ba:0b:60:b2:48:b1:76:d2:52:ee:4a:9e:20:d8:e7:18:52:49: 0f:d5:69:5c:37:d1:37:f2:4c:ca:b7:6e:cc:2c:b9:57:62:a8: f1:19:e3:13 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE56ZPfDB1+kfac7IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk MDlmZDg1YzQtZDk4MS00ZGMzLWJlYTYtM2FhNTMxMGFiOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmghjxU3vvBMeRMavnAoBMcwWkXvxFP8xzFiP E8q5zriozwDogBZDz2qvGFx8W1yUJZJ8OPzSG9idtJezDdl39UqjbXgWWRYvhYrC P2+Q9GjZ4KCkrpH0NsML+eERkfTtMvPROBuWoSlqGECyOBy0dQ87c2QuypsNVZO0 eFrspNmKYT8SEfWgJPFmQCZrWj6s6+RaSi26aPyIyxJrX2AWNywyuaxt0484G519 CWueK4faUiMr8kw9cpQVLnCFu71/5M6Yr9pKq/EzTPGqBY9d4f7beRjO4eZ5c6MA uVDEjyzxWma+cxH7WobCypyOWt/fx05lc60CqDuQ3xBX1TGUCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFALAwmQSbkpD+JAi90ViVVp8rkhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjExNDUzOTktNjRhYi0z NTljLWE2ZjEtNTc2NWRmNjM5NWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAjgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANMB0b9NUi5yWGU98wgs0ZmkSOxXpiOB5uWi00tceRFrH0shI0CBW Hum+Q0QrFNa+2/fugEKl0P+EfhuRXBdSjcis2dgywHvxhsxJZPqgN4KxtkIinuDS tC6i69KxDw/8o2aypzw0KHs8jX0hP2CU7PmwgUvXCVcxC3XG78i8f/nPwypTRSex 3JSUdx8+PNJfpxTuU1Gopqw6J3Z/A4Rej53yqIiMdFZrPKCPV3is/rWFMs7SKA4h C3L9MHwsmUB4St1DI3AiIVPhk+EhSLUFuxpcCMzC5hC+ugtgskixdtJS7kqeINjn GFJJD9VpXDfRN/JMyrduzCy5V2Ko8RnjEw== -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:31 2026 by rpki-client