$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3abd5b1-e87c-3505-b26a-e4acf0ac4d6f.roa File: d3abd5b1-e87c-3505-b26a-e4acf0ac4d6f.roa (raw, json) Hash identifier: wQNWqsUafxMNLKN75aBa0zlQRhnz77SpXbvCVsFSJBg= Subject key identifier: 52:E0:99:69:12:38:1E:5A:6F:FE:14:70:00:D1:BD:09:C8:1D:B2:AD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F5B9804D3F67C620CB1CFEE30 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3abd5b1-e87c-3505-b26a-e4acf0ac4d6f.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 54253 IP address blocks: 2600:200c::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:04:d3:f6:7c:62:0c:b1:cf:ee:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=667d8fe9-fd58-4b60-a565-245ab3612e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:ed:e2:c1:6f:fd:20:ff:d9:22:52:dd:72: 52:3c:21:c0:38:47:54:2a:3b:be:7a:73:22:dc:c3: 1c:79:db:81:a1:f4:d5:0f:1d:3a:26:19:ce:1d:53: 0a:08:f3:9f:f9:ad:fd:18:24:12:9e:6a:38:98:e7: 8b:26:8f:39:7a:1f:94:7b:9e:b6:fc:be:47:20:14: 91:3f:5d:fd:f4:51:2c:91:62:62:bf:0e:90:50:ac: 3c:ea:7e:6b:08:71:73:4b:d9:78:16:9c:fd:e9:38: e8:82:e2:59:5d:1f:fa:09:24:4a:25:e9:31:b3:64: f7:84:24:b6:53:43:b9:e0:28:3e:14:4b:73:da:f4: bd:19:d0:52:01:03:22:88:10:c4:a3:03:e0:7a:f9: 8d:24:5c:41:61:35:0c:09:d4:94:4a:2e:61:92:7d: 9c:b3:89:0c:72:7b:9a:7e:eb:71:a9:62:d0:0a:3b: f6:19:82:b1:fe:93:32:69:44:b0:18:cc:dc:d0:4e: a9:6b:85:ba:4b:6a:77:4b:90:fa:b0:ec:f2:77:07: 2f:98:12:3d:98:08:33:28:6a:b2:ab:8f:de:b1:7a: 37:f1:2e:25:c5:b0:44:5c:65:07:5a:8a:1b:a4:87: e7:26:c3:e3:3e:4d:36:54:0a:30:83:e6:51:28:94: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E0:99:69:12:38:1E:5A:6F:FE:14:70:00:D1:BD:09:C8:1D:B2:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3abd5b1-e87c-3505-b26a-e4acf0ac4d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:200c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:eb:a7:b0:9f:c0:43:af:e3:cb:f4:06:b5:83:75:56:c0:2a: 60:20:3c:76:5d:ac:d2:4b:5a:ca:c0:24:bd:09:5f:b6:9e:b3: 27:b9:05:66:79:a6:c2:98:37:64:25:9e:cd:fb:2b:89:e8:09: a4:10:b8:83:c0:c4:e5:b6:40:fe:19:c8:ce:a8:6b:2f:39:be: cf:ce:32:0f:dc:b5:c6:4a:25:44:a5:97:4a:ba:77:6b:cb:73: cf:91:3e:4b:47:f2:ab:5a:8f:0a:ec:c0:9c:ae:08:ef:7c:91: 81:fa:12:52:20:06:8a:01:15:81:91:e6:86:93:23:d5:5b:74: 07:f7:f8:fc:67:1b:10:0f:c3:da:e6:81:b3:17:f5:a3:95:9d: 35:7a:c4:6c:a2:32:c8:46:ba:dd:0f:99:9f:7c:80:97:11:81: e0:cc:dd:18:aa:7f:aa:eb:d8:4a:13:a1:7e:b4:1c:92:17:23: b9:4e:85:03:7c:50:e7:8d:e6:69:c9:23:75:d9:57:af:9b:4f: 4e:09:27:4f:b3:38:81:14:28:3e:e7:1e:aa:c3:25:46:75:c0: 3a:cd:13:22:56:22:24:37:b9:e5:9b:8f:13:9f:60:b2:f5:45: 17:6a:3e:fb:71:33:6a:f9:0b:20:73:73:15:85:b2:d5:df:c3: f3:e5:a9:3c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9bmATT9nxiDLHP7jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk NjY3ZDhmZTktZmQ1OC00YjYwLWE1NjUtMjQ1YWIzNjEyZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd/t4sFv/SD/2SJS3XJSPCHAOEdUKju+enMi 3MMceduBofTVDx06JhnOHVMKCPOf+a39GCQSnmo4mOeLJo85eh+Ue562/L5HIBSR P1399FEskWJivw6QUKw86n5rCHFzS9l4Fpz96TjoguJZXR/6CSRKJekxs2T3hCS2 U0O54Cg+FEtz2vS9GdBSAQMiiBDEowPgevmNJFxBYTUMCdSUSi5hkn2cs4kMcnua futxqWLQCjv2GYKx/pMyaUSwGMzc0E6pa4W6S2p3S5D6sOzydwcvmBI9mAgzKGqy q4/esXo38S4lxbBEXGUHWoobpIfnJsPjPk02VAowg+ZRKJRXAwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFLgmWkSOB5ab/4UcADRvQnIHbKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDNhYmQ1YjEtZTg3Yy0z NTA1LWIyNmEtZTRhY2YwYWM0ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAgDAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjuunsJ/AQ6/jy/QGtYN1VsAqYCA8dl2s0ktaysAkvQlftp6zJ7kF Znmmwpg3ZCWezfsriegJpBC4g8DE5bZA/hnIzqhrLzm+z84yD9y1xkolRKWXSrp3 a8tzz5E+S0fyq1qPCuzAnK4I73yRgfoSUiAGigEVgZHmhpMj1Vt0B/f4/GcbEA/D 2uaBsxf1o5WdNXrEbKIyyEa63Q+Zn3yAlxGB4MzdGKp/quvYShOhfrQckhcjuU6F A3xQ543mackjddlXr5tPTgknT7M4gRQoPuceqsMlRnXAOs0TIlYiJDe55ZuPE59g svVFF2o++3EzavkLIHNzFYWy1d/D8+WpPA== -----END CERTIFICATE-----Generated at Mon Oct 12 23:02:41 2026 by rpki-client