$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47547e02-a571-3f1c-be96-d2839a1b9b42.roa File: 47547e02-a571-3f1c-be96-d2839a1b9b42.roa (raw, json) Hash identifier: 9i90Cf4F4s8dOAY+2YcIH/+mnWgjWy/M+D7Qb/kLilI= Subject key identifier: 25:CC:DC:0F:C8:21:90:4F:19:DD:8D:F5:BC:71:AD:9B:64:0C:BA:FE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5EBFE4EAC4EB989259C4A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47547e02-a571-3f1c-be96-d2839a1b9b42.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 2603:c010:6000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:bf:e4:ea:c4:eb:98:92:59:c4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=edb0ee3a-73f4-4032-b9b9-3d09bb4ac794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:3c:95:63:f2:dc:39:61:72:ac:22:6b:bb: ff:bb:ed:e7:ee:58:06:df:3c:3f:7c:88:10:3b:01: a9:e9:c2:46:60:3d:91:0c:02:6c:ff:41:4a:a2:a1: 39:7e:68:71:c7:18:17:c7:3b:0d:da:be:09:7e:f0: 90:71:cd:29:df:d6:bf:c5:f8:cf:86:e8:1e:20:cb: 1a:51:eb:61:4d:83:82:01:02:85:8c:fb:64:db:96: 00:4f:7b:79:f1:d9:1a:e2:3d:5b:1d:82:0d:c3:5f: fa:52:de:7d:d4:ed:4d:60:a5:54:76:1b:81:f1:6a: e8:88:5e:4e:fb:bb:6e:53:08:35:82:ad:68:83:2b: 42:a5:26:40:b6:de:9f:78:5d:e6:a2:eb:57:f8:61: f1:ef:5d:61:08:c5:f0:56:65:b5:2e:d3:05:6b:71: 34:b6:7b:26:2b:0f:15:92:78:9d:da:ab:ad:b7:d4: f9:44:ec:76:28:5b:67:6f:3d:90:d1:fe:c7:f5:37: aa:74:4f:a1:7b:12:43:1b:e2:aa:4a:b9:34:96:7a: 55:b5:48:43:05:60:de:71:cc:29:2b:3c:76:68:32: 1b:62:d1:9c:61:3a:4c:74:76:53:2b:3c:a0:68:51: 34:8e:be:0f:1d:fc:7d:50:9b:19:71:b7:f6:fd:a4: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CC:DC:0F:C8:21:90:4F:19:DD:8D:F5:BC:71:AD:9B:64:0C:BA:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47547e02-a571-3f1c-be96-d2839a1b9b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c010:6000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:20:ec:fd:76:85:64:c7:76:f8:ad:bb:c6:2c:79:6e:fc:b6: 1f:84:7a:24:47:e9:f1:59:06:6d:ae:d5:f6:43:e3:ab:ea:ae: ae:76:b6:c4:18:95:f6:45:2b:72:3c:7e:e1:0f:da:3b:d3:e7: b1:e7:af:02:4a:49:31:75:b8:0c:86:55:c8:ab:fe:e8:80:e2: 5b:72:4c:ba:3d:5b:58:3d:45:9c:c7:35:cc:c6:2f:37:d5:e8: e0:21:34:7d:be:ef:ef:25:04:80:6f:c1:80:09:9a:13:87:f2: 97:22:4a:c0:57:42:48:e6:d8:86:b1:67:09:6e:a8:73:f4:09: 92:07:91:e8:a0:f7:8a:73:c9:6b:34:b2:75:b2:50:19:94:85: d1:28:be:54:82:39:10:e0:93:06:bd:c2:a1:a2:aa:a4:6b:1d: 7b:e8:31:b0:67:8b:8d:e1:39:61:98:33:ad:05:bb:d8:59:db: 99:91:b3:b2:a9:ec:89:00:5a:17:36:d5:7b:79:58:3d:9a:dd: 77:1f:50:c6:90:be:cc:03:d4:a9:d6:3c:ae:bf:99:63:92:20: e1:52:0b:bf:d0:88:36:d6:24:2e:6c:e0:21:38:ab:7f:cd:04: f2:5a:48:9a:f1:75:10:a4:fd:b7:09:a9:f2:69:eb:e5:f8:a5: b0:8a:2c:94 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuXr/k6sTrmJJZxKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWRiMGVlM2EtNzNmNC00MDMyLWI5YjktM2QwOWJiNGFjNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCE8lWPy3Dlhcqwia7v/u+3n7lgG3zw/fIgQ OwGp6cJGYD2RDAJs/0FKoqE5fmhxxxgXxzsN2r4JfvCQcc0p39a/xfjPhugeIMsa UethTYOCAQKFjPtk25YAT3t58dka4j1bHYINw1/6Ut591O1NYKVUdhuB8WroiF5O +7tuUwg1gq1ogytCpSZAtt6feF3moutX+GHx711hCMXwVmW1LtMFa3E0tnsmKw8V knid2qutt9T5ROx2KFtnbz2Q0f7H9TeqdE+hexJDG+KqSrk0lnpVtUhDBWDeccwp Kzx2aDIbYtGcYTpMdHZTKzygaFE0jr4PHfx9UJsZcbf2/aRLNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCXM3A/IIZBPGd2N9bxxrZtkDLr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDc1NDdlMDItYTU3MS0z ZjFjLWJlOTYtZDI4MzlhMWI5YjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAEGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHyDs/XaFZMd2+K27xix5bvy2H4R6JEfp8VkGba7V9kPjq+qurna2 xBiV9kUrcjx+4Q/aO9PnseevAkpJMXW4DIZVyKv+6IDiW3JMuj1bWD1FnMc1zMYv N9Xo4CE0fb7v7yUEgG/BgAmaE4fylyJKwFdCSObYhrFnCW6oc/QJkgeR6KD3inPJ azSydbJQGZSF0Si+VII5EOCTBr3CoaKqpGsde+gxsGeLjeE5YZgzrQW72FnbmZGz sqnsiQBaFzbVe3lYPZrddx9QxpC+zAPUqdY8rr+ZY5Ig4VILv9CINtYkLmzgITir f80E8lpImvF1EKT9twmp8mnr5filsIoslA== -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:33 2026 by rpki-client