$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/420dec1a-fe02-3e6d-b14f-4067aa8dcdba.roa File: 420dec1a-fe02-3e6d-b14f-4067aa8dcdba.roa (raw, json) Hash identifier: qivmZqzEh5xJtu7DOaRCIUdWX1pyNAIKcymfu0sUGis= Subject key identifier: D4:33:F7:4F:39:F6:3A:57:78:32:66:EA:1D:D3:B4:06:50:27:38:76 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D5F7FAE94225FBB1AD2470520 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/420dec1a-fe02-3e6d-b14f-4067aa8dcdba.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 46558 IP address blocks: 2607:9b80::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:ae:94:22:5f:bb:1a:d2:47:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=a4e4d503-abec-4bc6-b6e4-ed347f733a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:a6:e1:ee:66:f3:6b:93:5d:54:26:35:5e: f4:7c:f7:9d:61:1e:fd:f7:97:57:f2:45:fd:18:a2: ce:23:bb:cb:81:2e:34:d9:54:3b:68:13:e1:30:ca: e1:86:57:5e:49:83:7f:4b:9c:93:66:81:b9:c3:f5: 82:50:1d:c2:d8:07:e2:ef:f9:17:4e:d1:7c:b9:ad: a9:d1:01:6b:98:4b:f2:f6:6e:d2:52:fc:33:4d:19: 01:74:49:4d:6b:51:91:26:c6:19:e2:43:41:ab:ae: c9:3e:86:b9:8b:7d:9b:71:15:dd:11:04:b5:bf:3a: 83:b5:e3:43:05:d5:ba:c0:51:85:f6:2a:44:56:62: 4b:b8:f8:dd:c6:a7:7d:6d:2e:d5:f6:5e:2d:c8:8e: b2:70:4b:9e:79:29:f6:bb:95:34:86:17:de:0c:8d: fd:40:04:32:fa:97:a3:e4:2b:ad:9c:32:09:51:81: 9b:66:1a:55:dd:d5:d9:5e:50:b2:2b:79:d4:dc:15: 82:03:56:73:6a:db:53:a3:be:f6:fe:29:0e:18:e9: e2:dd:ea:5f:bb:f9:68:98:5f:8b:a5:17:d0:00:0a: 51:d2:9c:ed:71:34:d4:d7:71:2b:d5:96:67:33:81: 51:b3:97:97:44:bf:05:5b:a8:10:e3:b5:2c:76:f8: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:33:F7:4F:39:F6:3A:57:78:32:66:EA:1D:D3:B4:06:50:27:38:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/420dec1a-fe02-3e6d-b14f-4067aa8dcdba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2607:9b80::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c6:90:4c:9c:56:f2:4d:d5:70:2c:e6:f5:5a:42:c4:d1:2d: 93:0c:bd:74:f7:f8:38:ed:0b:f1:18:c9:26:a0:ff:cf:7a:70: 45:15:72:b4:3b:c9:0e:08:3b:98:7b:67:5e:7d:b3:72:95:d0: 27:91:3d:4c:08:35:38:0a:c1:44:83:f0:e6:bd:15:65:7e:da: 13:bc:4d:54:de:d8:f8:b0:fa:74:42:f5:04:56:f8:d2:e9:52: b0:7d:55:75:32:f4:a7:d2:7a:ee:14:a6:db:6b:0c:ca:c8:7c: 3c:af:36:3c:f5:92:3e:44:c2:55:6f:9f:ec:f7:71:34:b7:d3: 3e:c2:ab:51:3e:5e:54:4f:0a:22:d5:1a:24:11:95:ca:4d:81: 0c:f2:a0:b6:a8:2d:9f:5b:22:17:16:3f:6b:f3:f2:55:3e:b0: df:d7:3b:3a:03:72:7d:c6:07:43:76:5f:97:01:8c:da:9b:21: c6:28:06:67:b5:9e:07:c7:1e:96:99:ed:5e:0b:43:f9:6e:49: b6:86:c9:da:c6:14:54:3e:76:db:97:d9:7a:ba:9d:06:0c:72: fd:cf:02:cd:41:8d:b3:b6:6b:78:4a:fb:29:95:e7:40:d9:bb: c9:63:44:a0:04:45:a6:0b:1c:61:25:0c:fc:a4:22:98:92:90: 2e:18:6b:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1ff66UIl+7GtJHBSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk YTRlNGQ1MDMtYWJlYy00YmM2LWI2ZTQtZWQzNDdmNzMzYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj++m4e5m82uTXVQmNV70fPedYR7995dX8kX9 GKLOI7vLgS402VQ7aBPhMMrhhldeSYN/S5yTZoG5w/WCUB3C2Afi7/kXTtF8ua2p 0QFrmEvy9m7SUvwzTRkBdElNa1GRJsYZ4kNBq67JPoa5i32bcRXdEQS1vzqDteND BdW6wFGF9ipEVmJLuPjdxqd9bS7V9l4tyI6ycEueeSn2u5U0hhfeDI39QAQy+pej 5CutnDIJUYGbZhpV3dXZXlCyK3nU3BWCA1ZzattTo772/ikOGOni3epfu/lomF+L pRfQAApR0pztcTTU13Er1ZZnM4FRs5eXRL8FW6gQ47Usdvg52wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNQz90859jpXeDJm6h3TtAZQJzh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDIwZGVjMWEtZmUwMi0z ZTZkLWIxNGYtNDA2N2FhOGRjZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgebgAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO8aQTJxW8k3VcCzm9VpCxNEtkwy9dPf4OO0L8RjJJqD/z3pwRRVy tDvJDgg7mHtnXn2zcpXQJ5E9TAg1OArBRIPw5r0VZX7aE7xNVN7Y+LD6dEL1BFb4 0ulSsH1VdTL0p9J67hSm22sMysh8PK82PPWSPkTCVW+f7PdxNLfTPsKrUT5eVE8K ItUaJBGVyk2BDPKgtqgtn1siFxY/a/PyVT6w39c7OgNyfcYHQ3ZflwGM2pshxigG Z7WeB8celpntXgtD+W5JtobJ2sYUVD5225fZerqdBgxy/c8CzUGNs7ZreEr7KZXn QNm7yWNEoARFpgscYSUM/KQimJKQLhhrGA== -----END CERTIFICATE-----Generated at Mon Apr 13 19:31:37 2026 by rpki-client