$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa File: 85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa (raw, json) Hash identifier: RvOi+x8oJQmNxy4UV8Vt+MrNJV/zfVkV2JQlc5N/fAk= Subject key identifier: AA:97:BC:FF:AC:E6:E1:B7:24:23:C8:E9:4C:FA:01:3D:2D:2E:B8:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA26FDD74D00BF78C6EB8540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 2603:c002:800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:26:fd:d7:4d:00:bf:78:c6:eb:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=9666350d-830b-40fd-8d3d-3f0f7c644ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:d5:af:0f:a9:9b:6f:7e:df:77:56:36:71: 4c:69:f5:e5:ab:12:83:46:36:6e:9a:a2:ac:4e:3a: eb:c4:c9:04:47:ca:3b:7b:4f:24:cc:ab:fd:69:f1: 2d:06:c3:dc:44:44:f0:41:8b:5a:44:f4:77:f6:c0: 7c:06:e7:0c:c2:6f:65:4f:21:13:19:fa:eb:78:da: f3:d0:d7:fa:7c:27:13:bb:cb:e5:f7:bf:39:9d:40: 09:75:04:32:9d:ff:b0:ff:61:ff:89:e7:33:99:07: 24:3b:e4:32:57:2f:99:41:bb:ad:3f:47:14:df:cd: 66:2a:19:97:49:fb:2d:4b:d5:cf:6b:49:db:ff:d0: d2:59:9c:33:09:16:b6:e0:cd:0b:c9:ab:44:32:69: 8d:c6:ab:82:84:b4:2e:b8:97:7a:6c:a1:58:29:93: 69:ff:b5:83:45:2c:7f:14:8a:80:10:33:97:d9:fb: 1e:b8:4a:95:e9:16:c7:63:24:69:bb:d2:f0:40:78: 8c:5e:c3:84:52:04:7a:83:52:64:b0:00:41:06:31: 6c:df:b8:e2:75:af:5f:8a:87:82:fa:3e:1c:94:b3: a6:8e:c1:d3:bd:0b:97:17:81:5a:ca:98:9a:db:06: ac:92:04:c8:03:dc:ac:d4:e9:21:55:39:53:bd:c3: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:97:BC:FF:AC:E6:E1:B7:24:23:C8:E9:4C:FA:01:3D:2D:2E:B8:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/85bfe32a-1f8a-3be5-9fd8-6e3da568b2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a7:29:32:91:70:2a:2d:26:ec:76:eb:70:ef:74:e8:90:39: 74:df:a6:2d:dd:4c:a9:2d:3d:f6:4f:02:4f:92:f3:e0:9b:40: af:cd:bd:0c:32:ab:f9:6f:9a:35:13:ad:b9:31:89:01:16:f6: d9:86:b3:c3:a4:be:a6:b0:4b:0d:05:7e:fa:83:07:23:54:06: 89:a3:62:56:b7:ee:29:2e:69:76:54:e3:ac:2e:db:aa:cb:c2: 33:d9:a0:a7:8b:85:17:a9:c7:9c:36:b2:12:80:12:b9:b9:a9: 91:f2:a1:94:6d:63:2e:ef:07:4e:50:f0:92:fd:38:8d:06:5f: 65:32:15:43:07:74:96:56:52:d7:f8:3e:4f:ae:07:eb:02:e3: 23:2a:f7:3a:c9:df:6a:92:9e:23:c1:bc:6e:b9:80:fe:05:57: 31:c8:2a:1f:c0:74:2f:10:8c:16:5c:1d:ab:26:83:8b:20:ba: c5:c8:ee:1a:a1:e5:2f:5b:4f:44:43:38:a0:13:c4:42:91:22: 4e:62:7c:aa:cc:6d:81:82:dd:d4:fc:e1:cc:ee:f7:96:3b:f1: 38:c7:1c:b4:d2:89:28:84:f3:9b:41:99:c1:38:d4:cb:3d:26: 24:18:e6:4d:6f:29:14:61:2c:33:fe:f7:3e:84:b0:2c:5f:2f: ae:e8:60:6a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyqJv3XTQC/eMbrhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk OTY2NjM1MGQtODMwYi00MGZkLThkM2QtM2YwZjdjNjQ0YWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGHVrw+pm29+33dWNnFMafXlqxKDRjZumqKs TjrrxMkER8o7e08kzKv9afEtBsPcRETwQYtaRPR39sB8BucMwm9lTyETGfrreNrz 0Nf6fCcTu8vl9785nUAJdQQynf+w/2H/ieczmQckO+QyVy+ZQbutP0cU381mKhmX SfstS9XPa0nb/9DSWZwzCRa24M0LyatEMmmNxquChLQuuJd6bKFYKZNp/7WDRSx/ FIqAEDOX2fseuEqV6RbHYyRpu9LwQHiMXsOEUgR6g1JksABBBjFs37jida9fioeC +j4clLOmjsHTvQuXF4Faypia2waskgTIA9ys1OkhVTlTvcOwGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKqXvP+s5uG3JCPI6Uz6AT0tLricMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODViZmUzMmEtMWY4YS0z YmU1LTlmZDgtNmUzZGE1NjhiMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAggw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAo6cpMpFwKi0m7HbrcO906JA5dN+mLd1MqS099k8CT5Lz4JtAr829 DDKr+W+aNROtuTGJARb22Yazw6S+prBLDQV++oMHI1QGiaNiVrfuKS5pdlTjrC7b qsvCM9mgp4uFF6nHnDayEoASubmpkfKhlG1jLu8HTlDwkv04jQZfZTIVQwd0llZS 1/g+T64H6wLjIyr3OsnfapKeI8G8brmA/gVXMcgqH8B0LxCMFlwdqyaDiyC6xcju GqHlL1tPREM4oBPEQpEiTmJ8qsxtgYLd1PzhzO73ljvxOMcctNKJKITzm0GZwTjU yz0mJBjmTW8pFGEsM/73PoSwLF8vruhgag== -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:31 2026 by rpki-client