$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1154b68d-c37e-3efa-8f9f-7c651706c3e3.roa File: 1154b68d-c37e-3efa-8f9f-7c651706c3e3.roa (raw, json) Hash identifier: 7CAh3NL1OKTwtZZTJF33JeRzYm9K9yDN/GKodPKqeSU= Subject key identifier: 4B:0E:E3:14:56:0A:A9:50:4D:81:18:72:E2:FC:30:30:66:55:D2:60 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA271155E75C358ADD2F0780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1154b68d-c37e-3efa-8f9f-7c651706c3e3.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 2603:c002:9900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:11:55:e7:5c:35:8a:dd:2f:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=e203d05b-e756-4691-a2fb-0cddb7077aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:77:41:1e:94:19:2c:3f:54:16:48:a2:e3: e2:88:14:7b:c6:58:99:a3:2b:bc:f3:56:34:8b:0e: cf:b6:5c:32:4f:1d:14:bc:71:b8:99:a2:ba:e8:6a: 10:62:3e:06:57:8d:c5:c8:33:09:0b:17:2f:2f:ce: fa:a6:98:13:f9:00:6b:9c:86:4a:a5:c8:d2:1b:19: 5f:58:21:cf:7b:a2:b8:dc:0f:12:1d:1a:08:48:47: 74:51:69:54:e2:95:c7:47:f6:34:9f:ea:6d:da:03: 19:2c:53:99:d4:9d:f7:99:c8:06:c9:8f:e7:ec:65: a9:5c:3d:57:c1:26:54:b7:b9:a0:c2:23:71:f5:f1: 82:81:74:e1:f4:8a:0d:e5:11:0b:b9:bd:4a:7a:98: 85:6e:a8:7b:fd:7f:c3:b0:d0:dc:7e:56:f5:90:ea: 11:78:49:f7:ee:cb:c7:85:d6:02:41:d9:15:63:b2: a0:57:f3:c2:55:f9:ee:77:cd:c1:99:d2:d0:06:8a: fc:42:2c:bc:26:3a:fe:e4:fe:ab:c4:26:e9:63:23: 3c:d2:45:25:c1:5c:65:14:4d:95:c6:56:c2:9c:ff: 43:22:9c:27:d7:c1:b4:42:59:9f:e4:5e:68:1a:dd: 9f:fa:c6:e9:d8:71:56:37:0d:f5:73:14:c3:ad:1e: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0E:E3:14:56:0A:A9:50:4D:81:18:72:E2:FC:30:30:66:55:D2:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1154b68d-c37e-3efa-8f9f-7c651706c3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:9900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4f:fd:5a:49:f5:4f:56:ff:2f:2e:db:5c:01:b4:69:d2:bc: 08:97:03:b1:a8:d6:bd:f5:29:5a:a6:77:1d:61:23:c1:bd:a9: 9f:58:c9:b7:54:4a:d7:86:de:32:df:8e:d5:e0:78:44:7c:f3: 6d:3d:1f:6c:4a:c0:36:a9:67:cc:78:e8:fc:ad:ba:19:b8:94: 37:2d:85:26:a0:d8:de:77:26:7e:ae:1e:27:b9:88:f2:b6:48: 89:39:56:c5:65:34:c4:77:02:36:a5:1f:2f:12:d7:c0:bf:3b: ea:f5:86:9a:0d:4c:c9:bd:b6:01:eb:73:0e:58:49:52:a7:7a: 90:25:77:20:6a:ca:a1:f7:f0:5e:c2:cd:6f:27:d1:42:bf:47: 34:bf:4d:cf:98:93:38:a1:7b:1c:0e:52:cf:15:28:3e:68:fd: 32:3b:0e:fd:3d:bf:f6:01:ee:e9:22:22:8b:30:5b:78:ff:80: 6b:fb:35:fb:3e:86:eb:ad:3d:57:8a:ed:23:43:d9:c9:5d:2d: ba:4b:80:10:96:88:44:1a:d9:3b:0b:f4:44:ff:c2:5d:59:dd: da:4a:40:da:d0:12:6f:8e:5d:cc:85:27:fc:ed:79:64:a8:f0: cf:10:85:0e:be:2e:9d:16:77:1a:bb:7e:8b:78:03:b3:25:05: c3:7f:c1:ad -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyqJxFV51w1it0vB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ZTIwM2QwNWItZTc1Ni00NjkxLWEyZmItMGNkZGI3MDc3YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgl3QR6UGSw/VBZIouPiiBR7xliZoyu881Y0 iw7PtlwyTx0UvHG4maK66GoQYj4GV43FyDMJCxcvL876ppgT+QBrnIZKpcjSGxlf WCHPe6K43A8SHRoISEd0UWlU4pXHR/Y0n+pt2gMZLFOZ1J33mcgGyY/n7GWpXD1X wSZUt7mgwiNx9fGCgXTh9IoN5RELub1KepiFbqh7/X/DsNDcflb1kOoReEn37svH hdYCQdkVY7KgV/PCVfnud83BmdLQBor8Qiy8Jjr+5P6rxCbpYyM80kUlwVxlFE2V xlbCnP9DIpwn18G0Qlmf5F5oGt2f+sbp2HFWNw31cxTDrR468QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEsO4xRWCqlQTYEYcuL8MDBmVdJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTE1NGI2OGQtYzM3ZS0z ZWZhLThmOWYtN2M2NTE3MDZjM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAApkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlE/9Wkn1T1b/Ly7bXAG0adK8CJcDsajWvfUpWqZ3HWEjwb2pn1jJ t1RK14beMt+O1eB4RHzzbT0fbErANqlnzHjo/K26GbiUNy2FJqDY3ncmfq4eJ7mI 8rZIiTlWxWU0xHcCNqUfLxLXwL876vWGmg1Myb22AetzDlhJUqd6kCV3IGrKoffw XsLNbyfRQr9HNL9Nz5iTOKF7HA5SzxUoPmj9MjsO/T2/9gHu6SIiizBbeP+Aa/s1 +z6G6609V4rtI0PZyV0tukuAEJaIRBrZOwv0RP/CXVnd2kpA2tASb45dzIUn/O15 ZKjwzxCFDr4unRZ3Grt+i3gDsyUFw3/BrQ== -----END CERTIFICATE-----Generated at Thu Feb 26 03:28:04 2026 by rpki-client