$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6571eaae-e28e-3150-9308-a2fb3f82718a.roa File: 6571eaae-e28e-3150-9308-a2fb3f82718a.roa (raw, json) Hash identifier: Ma+xnT1Y39SYY2fbX6LXUpTbbP5ThfPFgqPrhVOhwSo= Subject key identifier: 22:C8:18:AE:AB:FB:70:31:B8:02:60:CD:39:1A:A7:92:FD:64:F3:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4974C9EAC5997C6041CCC480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6571eaae-e28e-3150-9308-a2fb3f82718a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 2603:c0bd:2000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c9:ea:c5:99:7c:60:41:cc:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aaddfeeb-3397-4e5e-bb7b-043103a64709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:f8:cf:ae:55:6d:f5:ba:05:c4:cd:64:58: 09:6e:52:1d:13:34:f6:11:e0:74:38:61:59:bb:cd: 23:7c:f8:c7:85:6f:e7:1e:01:b3:b9:c0:06:83:94: 00:81:1b:5b:07:38:57:b8:e4:ad:4d:fb:d2:e2:2e: 6f:6f:55:75:7e:4a:21:19:79:c7:7a:f2:06:b2:2e: 9f:e3:17:3e:11:29:f0:90:b4:ca:d3:1a:da:f3:a4: c2:b9:44:d5:b7:81:10:70:6e:27:31:4a:eb:2b:3b: 4d:c0:2d:51:40:77:13:2a:b4:bb:f1:6e:75:82:4f: 43:f7:d0:fa:6f:6a:ef:32:f4:c0:20:3e:da:b0:59: 89:32:d6:c3:f9:c7:8f:77:27:3d:e3:e7:77:63:b1: c5:2c:86:ea:00:8e:b8:54:20:38:af:d9:78:dd:5f: 6d:90:93:18:e5:fd:5b:58:c1:7c:be:4e:f9:0b:d2: ad:31:7c:46:93:03:21:d9:89:91:c7:52:ec:84:02: a2:2d:26:9e:2b:b8:36:4e:c0:36:85:27:3f:13:95: b9:68:89:bb:0a:26:2c:c6:96:ea:a7:85:2b:de:91: 64:24:bd:ed:b9:bd:fb:f5:c9:c9:ce:b9:72:91:b5: 1e:76:ab:8c:7e:92:20:51:9a:d9:58:83:30:88:45: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C8:18:AE:AB:FB:70:31:B8:02:60:CD:39:1A:A7:92:FD:64:F3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6571eaae-e28e-3150-9308-a2fb3f82718a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0bd:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:41:d9:54:a6:54:17:43:3d:06:6d:93:0a:00:73:82:77:82: a9:30:1e:64:93:53:79:31:19:1e:cc:f9:41:d8:a7:1d:6d:c2: b3:bd:17:6e:05:c5:05:5c:fb:6b:1a:1a:b8:76:51:ea:19:48: de:10:a5:0d:a1:2a:ba:c1:5d:45:ff:00:97:94:42:26:f6:18: a5:1e:f3:04:fa:eb:4c:8f:7f:33:80:4c:88:6a:bc:06:23:33: 89:5a:44:37:27:cd:c8:95:dc:ad:28:f4:11:5e:ad:a1:e7:cc: cf:bf:30:5a:6f:ce:5a:49:0e:40:4d:63:7f:bf:11:29:40:93: d4:4a:94:29:82:0f:b6:14:cf:e3:db:91:4a:d2:b0:c1:8b:ea: 14:22:54:4c:5d:cf:a3:bc:7b:6a:34:ce:b4:11:8c:b0:b8:e1: 1c:a8:8a:d6:57:72:1a:80:10:e2:40:43:89:a4:04:d7:29:ac: 7b:22:0c:ed:5a:57:38:86:3b:bb:cc:c0:13:9c:1f:2b:c8:e9: cb:b3:53:38:d1:c5:c0:87:a4:fe:23:0d:24:40:b4:3a:06:59: 58:e1:84:68:7e:11:6a:d0:1a:0b:e0:ca:91:8b:27:8d:e9:35: 30:0c:e2:3e:bd:1b:26:ab:5e:2c:09:d0:80:55:16:c3:47:11: ef:11:5a:1a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdMnqxZl8YEHMxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWFkZGZlZWItMzM5Ny00ZTVlLWJiN2ItMDQzMTAzYTY0NzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6j4z65VbfW6BcTNZFgJblIdEzT2EeB0OGFZ u80jfPjHhW/nHgGzucAGg5QAgRtbBzhXuOStTfvS4i5vb1V1fkohGXnHevIGsi6f 4xc+ESnwkLTK0xra86TCuUTVt4EQcG4nMUrrKztNwC1RQHcTKrS78W51gk9D99D6 b2rvMvTAID7asFmJMtbD+cePdyc94+d3Y7HFLIbqAI64VCA4r9l43V9tkJMY5f1b WMF8vk75C9KtMXxGkwMh2YmRx1LshAKiLSaeK7g2TsA2hSc/E5W5aIm7CiYsxpbq p4Ur3pFkJL3tub379cnJzrlykbUedquMfpIgUZrZWIMwiEVPEQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCLIGK6r+3AxuAJgzTkap5L9ZPN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjU3MWVhYWUtZTI4ZS0z MTUwLTkzMDgtYTJmYjNmODI3MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAvSAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAN0HZVKZUF0M9Bm2TCgBzgneCqTAeZJNTeTEZHsz5QdinHW3Cs70X bgXFBVz7axoauHZR6hlI3hClDaEqusFdRf8Al5RCJvYYpR7zBPrrTI9/M4BMiGq8 BiMziVpENyfNyJXcrSj0EV6toefMz78wWm/OWkkOQE1jf78RKUCT1EqUKYIPthTP 49uRStKwwYvqFCJUTF3Po7x7ajTOtBGMsLjhHKiK1ldyGoAQ4kBDiaQE1ymseyIM 7VpXOIY7u8zAE5wfK8jpy7NTONHFwIek/iMNJEC0OgZZWOGEaH4RatAaC+DKkYsn jek1MAziPr0bJqteLAnQgFUWw0cR7xFaGg== -----END CERTIFICATE-----Generated at Tue Oct 13 05:27:33 2026 by rpki-client