$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e715842-d154-387c-8d68-63fafd7d86ff.roa File: 8e715842-d154-387c-8d68-63fafd7d86ff.roa (raw, json) Hash identifier: jmvDvtIcxxPpo4KNvQhOqp1bRzQL8wGDEGSsl+ZaTCk= Subject key identifier: 30:21:FE:C2:6F:1E:76:95:80:E7:69:9A:57:3E:CD:04:BD:A1:AE:64 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F5B97FD090C7FCC58F7CDD740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e715842-d154-387c-8d68-63fafd7d86ff.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 54253 IP address blocks: 2600:200e::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fd:09:0c:7f:cc:58:f7:cd:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=a1ee8bba-fbd4-48f6-b841-716884652346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:2e:db:43:13:c4:09:24:fb:d7:26:ff:90: c7:74:69:d7:fa:dc:46:cc:df:a8:c9:62:07:c8:6d: 0d:1a:8a:31:26:79:45:2f:52:fa:4d:ea:d4:58:6c: c4:1c:52:63:d6:da:07:9b:39:80:26:2c:81:cf:05: 1c:fc:0d:c8:a4:89:fa:db:b8:4d:19:dc:38:44:da: 0a:72:88:f4:73:70:54:31:c3:54:3f:77:de:55:0d: fe:f0:17:9b:01:60:b5:27:71:9a:6f:57:dd:91:91: bd:28:57:45:b1:2c:13:42:99:63:8a:56:c8:af:6f: 79:c8:4b:15:90:74:ac:a4:77:75:80:20:60:35:80: 42:78:31:44:ac:a2:dd:33:c3:90:8d:84:3d:18:30: 51:4d:26:75:73:00:0e:8e:60:b5:08:98:56:b4:a2: 0e:2c:63:36:e0:3b:43:85:f4:ed:35:fd:ca:1c:d0: 1f:db:b9:12:83:f5:02:d4:b6:ad:d0:be:dc:06:8b: 89:19:c0:44:25:71:87:d2:df:9b:32:5b:25:fc:e8: 9a:5b:08:9d:6d:cf:2f:ad:1f:34:be:87:c4:56:f2: 99:d9:6d:c8:8b:74:13:45:69:44:88:dc:1f:d7:fa: 7b:61:62:99:23:c9:84:e2:3c:ac:59:52:c1:da:8a: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:21:FE:C2:6F:1E:76:95:80:E7:69:9A:57:3E:CD:04:BD:A1:AE:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8e715842-d154-387c-8d68-63fafd7d86ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:200e::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a0:0a:4c:62:e0:9c:99:e5:b6:d0:fd:b5:af:7f:83:e8:6d: 74:0e:64:a8:b3:4f:86:0a:ee:59:2e:b5:68:d3:35:34:e6:22: 0e:d1:49:92:52:58:79:8d:5d:53:5b:15:8f:bd:45:16:b0:97: 50:42:61:73:b4:54:53:e4:4b:a5:65:65:81:6e:bd:fa:f4:ab: 9e:f7:2a:d8:9e:7f:0b:42:f7:f8:78:51:d7:76:9e:48:b8:92: a8:f7:43:eb:cd:bc:13:de:ea:7b:87:96:b6:73:58:02:b1:9c: ec:77:c7:21:9a:b8:18:e0:4b:4c:81:3e:5b:10:78:59:e0:2f: 44:47:c1:69:26:e0:45:58:40:a3:e5:47:97:ac:60:5d:6c:d2: a4:7a:d0:4f:96:85:f2:ba:ee:ae:dd:d7:ad:6d:56:fb:78:66: 20:a9:9e:30:0b:3b:af:0b:67:4b:fe:ec:37:d9:af:ea:e5:2c: 5f:9f:ca:16:71:1f:23:d7:d1:c5:e5:87:39:88:72:43:be:e2: 76:93:99:2a:76:f1:e8:ff:1d:94:74:98:4c:9b:d3:cd:83:5d: c1:e6:d3:d2:23:a5:16:47:9d:23:22:74:e5:ec:6e:28:36:56: aa:99:63:95:31:b6:5e:90:1a:f8:20:18:05:89:72:c8:cb:da: 77:9a:e4:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9bl/0JDH/MWPfN10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk YTFlZThiYmEtZmJkNC00OGY2LWI4NDEtNzE2ODg0NjUyMzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOcu20MTxAkk+9cm/5DHdGnX+txGzN+oyWIH yG0NGooxJnlFL1L6TerUWGzEHFJj1toHmzmAJiyBzwUc/A3IpIn627hNGdw4RNoK coj0c3BUMcNUP3feVQ3+8BebAWC1J3Gab1fdkZG9KFdFsSwTQpljilbIr295yEsV kHSspHd1gCBgNYBCeDFErKLdM8OQjYQ9GDBRTSZ1cwAOjmC1CJhWtKIOLGM24DtD hfTtNf3KHNAf27kSg/UC1Lat0L7cBouJGcBEJXGH0t+bMlsl/OiaWwidbc8vrR80 vofEVvKZ2W3Ii3QTRWlEiNwf1/p7YWKZI8mE4jysWVLB2or3BQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDAh/sJvHnaVgOdpmlc+zQS9oa5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGU3MTU4NDItZDE1NC0z ODdjLThkNjgtNjNmYWZkN2Q4NmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgAgDgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYqAKTGLgnJnlttD9ta9/g+htdA5kqLNPhgruWS61aNM1NOYiDtFJ klJYeY1dU1sVj71FFrCXUEJhc7RUU+RLpWVlgW69+vSrnvcq2J5/C0L3+HhR13ae SLiSqPdD6828E97qe4eWtnNYArGc7HfHIZq4GOBLTIE+WxB4WeAvREfBaSbgRVhA o+VHl6xgXWzSpHrQT5aF8rrurt3XrW1W+3hmIKmeMAs7rwtnS/7sN9mv6uUsX5/K FnEfI9fRxeWHOYhyQ77idpOZKnbx6P8dlHSYTJvTzYNdwebT0iOlFkedIyJ05exu KDZWqpljlTG2XpAa+CAYBYlyyMvad5rk1g== -----END CERTIFICATE-----Generated at Wed Oct 14 03:16:31 2026 by rpki-client