$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa File: 08f6aa16-461b-3fb9-9426-623d068e71e1.roa (raw, json) Hash identifier: Mr2+uXbOLbtFgAl9WpkeMGvvIhsBIFRkQ25CIZ7P68Q= Subject key identifier: E2:D8:E7:67:1D:5F:69:56:53:5D:D4:C6:1D:B4:D3:34:9C:02:3A:23 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA273190A99FEBE6A93F4F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 2603:c002:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:31:90:a9:9f:eb:e6:a9:3f:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=d33d5955-56fc-4643-bd13-2cfc61d0a596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:22:51:c7:00:0b:ee:f7:6b:02:c2:f4:65: 6f:38:6f:6a:2b:86:87:9b:aa:ce:4c:db:c5:36:03: 18:95:2c:5a:93:46:7f:32:ac:d4:7e:a4:3a:90:46: e2:73:9c:a8:60:eb:91:b8:4c:55:13:43:f4:d4:c2: f8:85:af:54:2d:d0:a1:1f:02:33:54:5a:13:89:56: 67:50:1d:e2:64:a4:0d:79:0f:e1:77:b8:23:40:6d: 19:14:d7:b8:88:1a:23:33:00:b2:d9:d7:79:43:9e: 79:74:e8:e0:e5:d8:34:d9:21:c3:67:73:63:0e:16: d2:03:3f:16:a6:00:d6:38:3d:9a:d4:67:17:5d:ad: 56:e2:cf:a8:02:d6:36:64:3e:1d:c5:2f:49:87:83: ec:04:f8:f7:95:4f:3b:d0:b7:0c:8a:45:49:10:dc: 5a:84:cd:4e:ab:6b:3c:47:18:e4:37:dd:f1:ad:6b: 93:5c:32:1b:eb:c8:8b:d3:fc:81:6f:3b:92:3c:3a: 2c:86:01:9e:e4:1e:55:ad:a5:59:00:e7:89:49:98: b3:0f:7c:e1:b7:6d:ee:87:1e:1a:e3:b4:1a:16:9c: e7:93:d5:e0:07:3b:27:b5:65:38:5c:51:15:97:98: 42:92:92:bc:8b:70:d4:43:a0:de:7f:d7:33:7b:58: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D8:E7:67:1D:5F:69:56:53:5D:D4:C6:1D:B4:D3:34:9C:02:3A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08f6aa16-461b-3fb9-9426-623d068e71e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7c:f5:4d:39:32:5b:02:6d:99:34:a7:61:23:61:9a:79:76: 9f:38:f4:8c:b4:4e:5f:3a:d9:10:f3:91:81:fb:5b:55:91:5e: 25:f8:63:a1:f1:e0:40:53:97:8b:a2:4d:4f:bb:83:d8:6e:64: 30:80:b7:4a:d9:44:2a:ad:6a:42:5c:b5:f2:26:8e:57:9d:d1: c8:e7:9a:ef:b2:5f:33:4a:5a:9e:6b:64:bd:e7:ff:59:11:05: ed:2b:54:c8:1b:89:6a:88:5c:3e:99:a8:4b:02:1c:1e:44:eb: a3:a4:42:04:34:16:10:7d:48:c9:a8:d1:47:af:25:24:b8:3a: 1e:61:48:eb:0a:88:95:14:47:07:b1:d1:08:d9:5a:49:f2:34: 7d:20:46:06:50:06:6c:f8:04:c1:3c:cc:5d:20:e6:07:2a:fc: ce:85:38:a2:ac:9a:b5:ba:d9:ab:a7:65:87:88:11:f1:66:5d: 6e:3c:7c:aa:c4:65:bc:0f:66:d6:83:02:2c:89:4b:99:dc:c5: 96:c8:35:bd:41:b1:ab:74:12:d8:a6:1f:4f:ec:8b:5c:0d:83: 78:12:5c:97:25:15:1e:4d:9d:e4:a9:65:a8:bb:23:39:0f:bf: 24:26:19:3d:05:ab:8d:e8:8f:cd:23:19:17:29:11:21:06:4e: 92:0d:6e:42 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyqJzGQqZ/r5qk/TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ZDMzZDU5NTUtNTZmYy00NjQzLWJkMTMtMmNmYzYxZDBhNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRsiUccAC+73awLC9GVvOG9qK4aHm6rOTNvF NgMYlSxak0Z/MqzUfqQ6kEbic5yoYOuRuExVE0P01ML4ha9ULdChHwIzVFoTiVZn UB3iZKQNeQ/hd7gjQG0ZFNe4iBojMwCy2dd5Q555dOjg5dg02SHDZ3NjDhbSAz8W pgDWOD2a1GcXXa1W4s+oAtY2ZD4dxS9Jh4PsBPj3lU870LcMikVJENxahM1Oq2s8 RxjkN93xrWuTXDIb68iL0/yBbzuSPDoshgGe5B5VraVZAOeJSZizD3zht23uhx4a 47QaFpznk9XgBzsntWU4XFEVl5hCkpK8i3DUQ6Def9cze1g9qwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOLY52cdX2lWU13Uxh200zScAjojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDhmNmFhMTYtNDYxYi0z ZmI5LTk0MjYtNjIzZDA2OGU3MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAiAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEXz1TTkyWwJtmTSnYSNhmnl2nzj0jLROXzrZEPORgftbVZFeJfhj ofHgQFOXi6JNT7uD2G5kMIC3StlEKq1qQly18iaOV53RyOea77JfM0panmtkvef/ WREF7StUyBuJaohcPpmoSwIcHkTro6RCBDQWEH1IyajRR68lJLg6HmFI6wqIlRRH B7HRCNlaSfI0fSBGBlAGbPgEwTzMXSDmByr8zoU4oqyatbrZq6dlh4gR8WZdbjx8 qsRlvA9m1oMCLIlLmdzFlsg1vUGxq3QS2KYfT+yLXA2DeBJclyUVHk2d5KllqLsj OQ+/JCYZPQWrjeiPzSMZFykRIQZOkg1uQg== -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:44 2026 by rpki-client