$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ce8c6a3-bf66-3c37-802b-ab3a4a43d123.roa File: 9ce8c6a3-bf66-3c37-802b-ab3a4a43d123.roa (raw, json) Hash identifier: FKt7wKvjKHi4t642K8whYmNLYwZ1uEY/TXnNgY5i1dc= Subject key identifier: 89:B9:D7:8B:F5:51:4A:AB:05:6B:E9:AA:99:02:E2:E1:1E:EA:B0:82 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E4F1F634B7052488A0153C9A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ce8c6a3-bf66-3c37-802b-ab3a4a43d123.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 11049 IP address blocks: 2603:c040:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:63:4b:70:52:48:8a:01:53:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=bcbe59f8-2072-4498-a98b-a587959db885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:70:9c:43:57:16:62:e6:ce:a8:a8:0e:71: e7:6a:21:89:e8:48:7e:da:8e:d6:a1:03:64:6f:4d: 10:9e:37:9e:f8:3a:31:23:fe:0c:23:66:da:ea:64: 7c:55:e1:5f:47:05:3e:20:dc:a8:bc:e2:bc:82:0a: 46:5c:55:df:97:5e:34:58:65:7c:fe:35:16:39:e7: 08:ce:52:f4:02:53:2a:4a:74:06:48:1d:34:70:a3: 68:cd:ea:c6:65:46:9a:43:3d:77:10:fb:98:9d:74: e4:07:fa:83:35:d5:70:57:d6:6a:af:cf:62:a7:96: a0:14:b3:5a:da:c0:bf:14:d2:b2:1a:58:61:f8:77: 0d:52:69:f1:12:32:f4:93:08:20:4f:c6:9f:c1:84: 33:6f:34:31:fa:3d:04:a3:07:0e:e3:26:0c:38:e5: e4:65:97:57:b9:a7:b8:39:78:3c:fa:21:ff:84:f9: 2a:77:90:7d:6d:ed:cb:f9:4f:b7:f7:f3:3c:8c:0a: 70:4a:e8:ae:53:c6:b6:78:71:32:20:54:07:0d:99: 53:fc:4a:b9:d8:65:77:ca:87:ed:5a:3f:59:32:7e: 95:6d:27:09:7d:ba:c0:86:3d:58:a4:2f:b3:23:86: 0a:06:7b:90:18:c0:fa:d8:fc:49:f8:de:96:66:ff: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:D7:8B:F5:51:4A:AB:05:6B:E9:AA:99:02:E2:E1:1E:EA:B0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ce8c6a3-bf66-3c37-802b-ab3a4a43d123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c040:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:cc:61:88:d3:d5:7a:18:c9:c6:f5:34:48:01:33:f7:ac:f2: 54:43:3f:01:6a:23:e5:6e:ac:8e:85:aa:f5:09:6d:15:a3:0b: 1e:62:8b:bd:ff:df:79:74:bf:de:4c:b9:6b:99:27:92:59:6c: b1:18:e4:7c:45:f2:39:a6:fa:f0:42:e2:88:ff:39:b4:d2:7f: b8:b2:75:d9:a5:02:bd:9c:7e:ea:df:7e:97:dd:64:e4:a2:80: 3a:48:36:d5:b6:02:c0:fb:ff:dd:0d:4a:84:c5:c3:01:29:08: e5:c2:f3:19:d4:06:50:b6:d3:c0:5c:11:58:87:2c:1f:ef:5b: 5b:96:80:80:38:ca:08:0e:f0:56:4b:05:6e:7c:bd:4c:d5:3d: 48:2e:6d:fa:a8:4d:e5:45:9c:19:5c:ee:28:d6:8f:ff:c6:93: 87:88:96:91:b5:4b:d4:10:88:8f:49:20:59:54:0b:50:ba:22: de:7b:8e:e8:c9:52:5d:3e:dc:ca:85:e2:25:26:31:0d:54:65: be:15:3a:d1:23:fd:e7:08:e3:2f:ce:6a:da:30:7a:89:05:7a: 08:01:f8:3f:ce:55:37:82:1f:95:98:03:aa:a2:99:0b:b1:04: f5:ba:16:d2:fa:68:6c:46:dd:b9:1c:31:73:05:b3:49:27:2d: 17:03:94:f8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5PH2NLcFJIigFTyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk YmNiZTU5ZjgtMjA3Mi00NDk4LWE5OGItYTU4Nzk1OWRiODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LlwnENXFmLmzqioDnHnaiGJ6Eh+2o7WoQNk b00Qnjee+DoxI/4MI2ba6mR8VeFfRwU+INyovOK8ggpGXFXfl140WGV8/jUWOecI zlL0AlMqSnQGSB00cKNozerGZUaaQz13EPuYnXTkB/qDNdVwV9Zqr89ip5agFLNa 2sC/FNKyGlhh+HcNUmnxEjL0kwggT8afwYQzbzQx+j0EowcO4yYMOOXkZZdXuae4 OXg8+iH/hPkqd5B9be3L+U+39/M8jApwSuiuU8a2eHEyIFQHDZlT/Eq52GV3yoft Wj9ZMn6VbScJfbrAhj1YpC+zI4YKBnuQGMD62PxJ+N6WZv/U+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIm514v1UUqrBWvpqpkC4uEe6rCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWNlOGM2YTMtYmY2Ni0z YzM3LTgwMmItYWIzYTRhNDNkMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAQCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfMxhiNPVehjJxvU0SAEz96zyVEM/AWoj5W6sjoWq9QltFaMLHmKL vf/feXS/3ky5a5knkllssRjkfEXyOab68ELiiP85tNJ/uLJ12aUCvZx+6t9+l91k 5KKAOkg21bYCwPv/3Q1KhMXDASkI5cLzGdQGULbTwFwRWIcsH+9bW5aAgDjKCA7w VksFbny9TNU9SC5t+qhN5UWcGVzuKNaP/8aTh4iWkbVL1BCIj0kgWVQLULoi3nuO 6MlSXT7cyoXiJSYxDVRlvhU60SP95wjjL85q2jB6iQV6CAH4P85VN4IflZgDqqKZ C7EE9boW0vpobEbduRwxcwWzSSctFwOU+A== -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:43 2026 by rpki-client