$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bd198fb-a572-39a1-b4f1-97c0f2355ac5.roa File: 3bd198fb-a572-39a1-b4f1-97c0f2355ac5.roa (raw, json) Hash identifier: /+RMzmJ8UoHlRB0yEe4rYQQgQc471l2+1+sumFiUl+s= Subject key identifier: 77:F9:3D:F9:AC:5E:DA:62:36:06:BA:B9:58:E1:84:61:BC:6A:95:9B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DF210BB1787CD07E2038A3660 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bd198fb-a572-39a1-b4f1-97c0f2355ac5.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 54253 IP address blocks: 2600:2004::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:bb:17:87:cd:07:e2:03:8a:36:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=fbc076af-5ad5-4110-b4f7-01bdd01eddf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b8:21:31:bc:f0:48:cf:e7:56:88:23:72:fa: bd:3b:8a:cc:60:0a:c1:61:ff:30:d9:2b:99:96:10: 27:59:ca:57:df:7e:02:1e:4b:c0:45:94:0b:9b:77: 43:56:98:94:a4:43:26:c1:13:5d:9a:4f:8e:ea:a1: 88:2d:87:5b:92:f0:29:5c:c5:fa:5f:d0:e4:7f:c9: e3:31:bb:77:39:19:04:90:e4:93:9f:17:1d:bb:89: 88:0c:84:68:e2:ef:64:22:d7:79:2e:30:22:e0:e7: 06:f4:6e:be:0b:b3:33:e3:de:cc:45:3f:ef:be:70: 6f:1a:62:99:02:82:ec:08:8d:9a:b4:e7:83:bf:50: 71:82:6e:9f:50:be:3d:03:f6:c7:18:67:12:17:37: 87:83:13:03:d1:48:ab:52:92:60:5c:02:b6:17:e5: ca:a4:bc:4d:4c:a5:ea:6f:00:27:d3:f6:04:3a:40: e8:59:5c:1d:f5:cf:3e:9c:67:49:9a:7a:3c:c3:3e: b8:bd:0f:6d:a9:11:b5:25:e1:cc:20:0b:7c:52:28: 2f:17:6c:5c:9b:a7:f7:c2:50:38:08:36:78:71:7a: 01:86:49:c9:d3:ac:21:b4:0a:6a:b8:a8:da:69:a2: ea:ff:df:c5:75:cf:86:ad:a2:26:8f:36:c2:b8:ef: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F9:3D:F9:AC:5E:DA:62:36:06:BA:B9:58:E1:84:61:BC:6A:95:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bd198fb-a572-39a1-b4f1-97c0f2355ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2004::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f0:44:74:c8:80:5e:b7:fb:83:dc:3b:3f:fc:c9:3c:f1:e8: c2:a2:05:fb:88:ba:06:20:2c:b9:94:a4:d3:22:ac:84:e1:17: 02:30:02:df:27:f5:a5:96:30:e9:09:09:8b:98:b1:c0:ba:26: 42:4b:d8:21:85:ab:1b:f2:ad:22:6f:68:5e:0a:3c:dc:f4:3d: 26:3f:2b:f6:74:39:f3:5e:3d:9b:63:16:96:1b:e8:88:83:7c: 94:a6:bf:58:a8:1b:74:e2:b1:2c:7c:c7:3a:87:f3:3e:f3:c6: 3b:c7:4b:38:47:20:7b:55:b4:05:8a:72:01:72:a0:5b:ef:59: 56:aa:aa:fe:9d:72:fa:62:87:62:9c:16:e0:b6:61:f6:fa:ac: c1:1d:2a:4d:fd:3d:e4:b1:5d:0e:71:bb:7f:68:f2:df:bb:a0: f4:ed:af:7e:0d:24:14:c3:d6:7a:a7:f6:8a:68:e0:b1:46:c2: bf:d2:61:4d:78:5e:d5:f2:38:61:96:39:7f:af:6a:78:e8:5f: 70:9a:7a:31:ba:18:20:ec:22:4d:96:f4:ac:db:4d:28:78:cd: fe:2f:b8:ca:17:be:2a:ed:52:3e:49:5c:80:e5:fa:bb:9a:a7: 71:7b:07:74:13:90:5a:fd:66:b5:eb:6f:da:dc:a3:ae:9d:82: d9:67:48:91 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3yELsXh80H4gOKNmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmJjMDc2YWYtNWFkNS00MTEwLWI0ZjctMDFiZGQwMWVkZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLghMbzwSM/nVogjcvq9O4rMYArBYf8w2SuZ lhAnWcpX334CHkvARZQLm3dDVpiUpEMmwRNdmk+O6qGILYdbkvApXMX6X9Dkf8nj Mbt3ORkEkOSTnxcdu4mIDIRo4u9kItd5LjAi4OcG9G6+C7Mz497MRT/vvnBvGmKZ AoLsCI2atOeDv1Bxgm6fUL49A/bHGGcSFzeHgxMD0UirUpJgXAK2F+XKpLxNTKXq bwAn0/YEOkDoWVwd9c8+nGdJmno8wz64vQ9tqRG1JeHMIAt8UigvF2xcm6f3wlA4 CDZ4cXoBhknJ06whtApquKjaaaLq/9/Fdc+GraImjzbCuO9w7wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHf5PfmsXtpiNga6uVjhhGG8apWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2JkMTk4ZmItYTU3Mi0z OWExLWI0ZjEtOTdjMGYyMzU1YWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAgBAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOfBEdMiAXrf7g9w7P/zJPPHowqIF+4i6BiAsuZSk0yKshOEXAjAC 3yf1pZYw6QkJi5ixwLomQkvYIYWrG/KtIm9oXgo83PQ9Jj8r9nQ58149m2MWlhvo iIN8lKa/WKgbdOKxLHzHOofzPvPGO8dLOEcge1W0BYpyAXKgW+9ZVqqq/p1y+mKH YpwW4LZh9vqswR0qTf095LFdDnG7f2jy37ug9O2vfg0kFMPWeqf2imjgsUbCv9Jh TXhe1fI4YZY5f69qeOhfcJp6MboYIOwiTZb0rNtNKHjN/i+4yhe+Ku1SPklcgOX6 u5qncXsHdBOQWv1mtetv2tyjrp2C2WdIkQ== -----END CERTIFICATE-----Generated at Thu May 28 17:05:36 2026 by rpki-client