$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef9bc3a-eb29-3db3-ad1b-25cffe5aedf9.roa File: 4ef9bc3a-eb29-3db3-ad1b-25cffe5aedf9.roa (raw, json) Hash identifier: +fDVjDaEVjJE97h7dXCE3OVCXMiltJGrw0GZkdslvDU= Subject key identifier: 4A:24:2E:0C:17:86:6A:56:37:1A:79:2D:8B:27:4F:2C:BE:3F:8E:21 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBF172AC79F26F94436A9E600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef9bc3a-eb29-3db3-ad1b-25cffe5aedf9.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 31898 IP address blocks: 2600:2000:2120::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:2a:c7:9f:26:f9:44:36:a9:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=2a0ba6d5-617e-4143-a5ed-f3eb9bfde255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:6d:53:9b:bc:8f:b7:69:3c:c8:da:b2:37: e8:ff:25:29:ad:b6:19:48:0d:96:02:18:34:eb:22: 7d:d7:a4:67:c5:06:71:6f:17:85:b0:66:26:dc:88: 8c:b2:7f:68:41:20:bb:d2:26:70:4e:5b:34:27:c8: 11:bf:d8:9a:c8:8b:2b:9f:d0:c0:74:06:b7:81:5f: a0:c9:c9:0b:d0:d9:c5:0d:fa:44:f1:33:2e:10:7c: 77:c0:45:54:97:c0:9a:2b:59:f5:6a:c0:f6:29:9a: fe:20:c2:71:21:a0:36:78:0d:d3:2f:60:de:85:ae: 51:e6:b0:00:98:4b:b8:01:20:b9:52:f4:d8:2e:4f: 8c:9e:80:05:e9:d2:d3:41:02:6b:c1:e6:0e:a1:50: 61:b7:c7:46:45:30:8b:2b:37:d8:30:5b:cb:c7:36: 1e:32:dd:4b:34:dd:99:03:c4:35:90:16:f3:5d:12: ee:06:7f:71:ae:37:05:02:73:0b:aa:d4:63:3d:e5: a8:77:95:ee:05:cb:3b:6b:75:77:c8:f8:16:fc:b9: 6f:9f:85:0c:01:46:6e:05:e1:b8:bf:db:3e:5a:89: 76:b5:0c:f0:87:98:0a:4b:a5:a4:19:bf:4c:21:82: c9:59:6d:92:cb:bc:e5:3b:5c:63:32:ec:d6:68:54: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:24:2E:0C:17:86:6A:56:37:1A:79:2D:8B:27:4F:2C:BE:3F:8E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef9bc3a-eb29-3db3-ad1b-25cffe5aedf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2120::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f4:3f:ad:9c:80:19:12:57:72:5f:07:b4:d4:9a:0e:15:a8: d9:be:42:00:7e:ff:0e:c2:2a:48:75:e8:25:33:76:aa:62:07: 8d:2d:0f:92:59:03:30:56:69:24:10:b3:0c:e5:2a:f7:1b:1b: d5:cf:53:a7:59:6e:29:ab:d5:a5:2b:db:22:c2:a8:54:38:c8: 5c:c7:85:26:9f:6e:93:03:7d:bc:7b:2d:7b:3b:a7:a7:c0:53: 3e:40:f8:84:40:f6:c8:ee:0a:8c:33:b2:09:52:34:2b:72:74: 11:02:7c:44:c8:c9:bf:b2:02:c4:47:88:05:10:73:9d:d7:77: 5a:fe:75:3d:e6:b6:c6:73:04:38:53:b8:c3:58:4b:9c:ee:25: ab:b3:ae:2b:27:37:8b:5c:4d:80:ab:40:7e:87:52:b1:27:45: 24:b7:eb:b2:3a:51:cf:7e:44:7b:57:59:8c:0a:4d:4c:30:01: 2e:52:de:b0:e4:92:1b:d2:f2:81:9a:a4:71:ad:e2:a2:e2:fe: 82:29:2f:52:9a:3a:38:19:90:f3:38:3a:45:fd:48:44:35:77: 28:80:39:5a:f0:5e:0e:7d:e3:49:4b:ec:bf:31:86:0b:2c:52: 0a:71:65:b1:10:69:43:66:23:f6:e3:63:36:45:11:a1:3d:b7: 47:2d:7b:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy/FyrHnyb5RDap5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk MmEwYmE2ZDUtNjE3ZS00MTQzLWE1ZWQtZjNlYjliZmRlMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0ptU5u8j7dpPMjasjfo/yUprbYZSA2WAhg0 6yJ916RnxQZxbxeFsGYm3IiMsn9oQSC70iZwTls0J8gRv9iayIsrn9DAdAa3gV+g yckL0NnFDfpE8TMuEHx3wEVUl8CaK1n1asD2KZr+IMJxIaA2eA3TL2Deha5R5rAA mEu4ASC5UvTYLk+MnoAF6dLTQQJrweYOoVBht8dGRTCLKzfYMFvLxzYeMt1LNN2Z A8Q1kBbzXRLuBn9xrjcFAnMLqtRjPeWod5XuBcs7a3V3yPgW/Llvn4UMAUZuBeG4 v9s+Wol2tQzwh5gKS6WkGb9MIYLJWW2Sy7zlO1xjMuzWaFToeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEokLgwXhmpWNxp5LYsnTyy+P44hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVmOWJjM2EtZWIyOS0z ZGIzLWFkMWItMjVjZmZlNWFlZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/0P62cgBkSV3JfB7TUmg4VqNm+QgB+/w7CKkh16CUzdqpiB40t D5JZAzBWaSQQswzlKvcbG9XPU6dZbimr1aUr2yLCqFQ4yFzHhSafbpMDfbx7LXs7 p6fAUz5A+IRA9sjuCowzsglSNCtydBECfETIyb+yAsRHiAUQc53Xd1r+dT3mtsZz BDhTuMNYS5zuJauzrisnN4tcTYCrQH6HUrEnRSS367I6Uc9+RHtXWYwKTUwwAS5S 3rDkkhvS8oGapHGt4qLi/oIpL1KaOjgZkPM4OkX9SEQ1dyiAOVrwXg5940lL7L8x hgssUgpxZbEQaUNmI/bjYzZFEaE9t0cte3U= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:33 2026 by rpki-client