$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a8baa85-811e-3307-8e12-dc1ab4a5f333.roa File: 8a8baa85-811e-3307-8e12-dc1ab4a5f333.roa (raw, json) Hash identifier: dvZTin3B/hwB5ENxgi+EIcaZ7lD66ZY/Lzvso1Xp32A= Subject key identifier: F6:DD:CD:DB:31:4B:F0:2E:18:EE:5D:64:7A:B6:12:AD:64:D3:29:A7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5706C11986DB3E3D167000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a8baa85-811e-3307-8e12-dc1ab4a5f333.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 2603:c002:9700::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:06:c1:19:86:db:3e:3d:16:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b5aea2a4-debe-4f57-8ec5-3aebbae49566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:48:fb:45:54:d2:06:ad:34:45:5e:54:78:91: ee:94:39:94:af:b9:a5:d2:84:36:08:59:58:9e:64: f0:40:30:9d:35:c2:09:46:cc:a8:03:91:16:6c:b3: 13:51:ba:81:5a:02:15:d0:43:b5:f7:3d:53:53:99: 7f:ab:38:49:48:31:85:11:28:08:26:5d:1d:fb:e1: f5:22:42:0e:95:c4:c8:95:38:6c:8d:65:03:18:fa: 1c:53:65:30:5c:e2:cf:b9:fa:16:b3:68:02:6c:17: 2e:51:67:1e:56:34:9d:00:79:43:dd:35:05:02:2d: fc:24:d2:7a:5f:c4:d7:7f:69:a2:d2:d7:7a:7f:97: 81:47:2c:26:70:30:15:4f:87:27:27:b7:3e:b0:98: 37:5d:5b:a6:3d:ba:27:dd:d7:b6:dd:14:9b:aa:b4: 25:69:55:e2:d8:c6:83:af:b6:ed:47:c5:d8:37:e7: d2:c6:94:dc:b3:c8:39:b9:c0:05:ec:2a:0e:bd:6f: 60:88:57:61:7f:e5:bb:20:f2:9f:3d:38:b6:f3:fb: 65:f2:e2:db:d6:92:ab:58:ab:12:59:cf:b6:24:48: ca:de:e6:95:ff:97:3a:c1:df:42:73:a1:dc:e7:fb: b4:62:31:74:24:37:bb:3a:e7:19:62:04:30:87:23: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DD:CD:DB:31:4B:F0:2E:18:EE:5D:64:7A:B6:12:AD:64:D3:29:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a8baa85-811e-3307-8e12-dc1ab4a5f333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:9700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f0:4f:08:d2:de:69:2b:3b:c8:1f:46:e3:1e:96:58:de:80: 6c:0d:63:1a:21:cf:7a:04:9b:51:12:3d:dd:d6:dc:b3:4d:13: 6c:0d:15:b7:ea:9c:ec:76:a7:bc:89:b6:a2:e9:c4:ef:88:9a: a8:1b:6d:ec:db:7e:f5:cc:bc:c9:d2:ba:00:99:ab:19:05:65: c7:c7:9c:74:83:c4:f7:88:e3:9e:f1:c9:ca:18:d0:d7:d9:98: 08:c8:e6:a8:42:36:c6:01:e3:1e:b3:38:a5:6c:70:07:83:6b: 13:f3:3d:7c:18:3b:6c:ad:63:00:34:84:e7:10:ac:00:fe:a8: d9:c7:d6:3e:6c:7b:a9:bb:f7:5a:da:d7:21:60:bc:8f:92:fc: 69:2b:74:06:8e:16:f2:77:05:6b:60:9c:7c:71:26:b1:7b:56: 19:ed:44:20:cc:9b:a3:32:88:72:39:d3:5b:71:4a:c3:49:56: 0a:b0:a9:1c:49:e0:94:e6:e5:91:4c:79:1f:d2:09:92:f5:24: 7a:c7:85:7a:4d:4b:be:b4:b2:d6:b2:12:c1:1e:9e:46:e1:b1: bf:2f:d9:1c:cd:6d:7f:12:28:c4:03:29:3c:ec:d5:a4:d5:6a: 01:bf:eb:5d:cf:e8:26:5b:0a:3e:b4:59:c6:66:e7:a4:d3:0d: 84:83:df:84 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuVwbBGYbbPj0WcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjVhZWEyYTQtZGViZS00ZjU3LThlYzUtM2FlYmJhZTQ5NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70j7RVTSBq00RV5UeJHulDmUr7ml0oQ2CFlY nmTwQDCdNcIJRsyoA5EWbLMTUbqBWgIV0EO19z1TU5l/qzhJSDGFESgIJl0d++H1 IkIOlcTIlThsjWUDGPocU2UwXOLPufoWs2gCbBcuUWceVjSdAHlD3TUFAi38JNJ6 X8TXf2mi0td6f5eBRywmcDAVT4cnJ7c+sJg3XVumPbon3de23RSbqrQlaVXi2MaD r7btR8XYN+fSxpTcs8g5ucAF7CoOvW9giFdhf+W7IPKfPTi28/tl8uLb1pKrWKsS Wc+2JEjK3uaV/5c6wd9Cc6Hc5/u0YjF0JDe7OucZYgQwhyNZZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPbdzdsxS/AuGO5dZHq2Eq1k0ymnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGE4YmFhODUtODExZS0z MzA3LThlMTItZGMxYWI0YTVmMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAApcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAH/BPCNLeaSs7yB9G4x6WWN6AbA1jGiHPegSbURI93dbcs00TbA0V t+qc7HanvIm2ounE74iaqBtt7Nt+9cy8ydK6AJmrGQVlx8ecdIPE94jjnvHJyhjQ 19mYCMjmqEI2xgHjHrM4pWxwB4NrE/M9fBg7bK1jADSE5xCsAP6o2cfWPmx7qbv3 WtrXIWC8j5L8aSt0Bo4W8ncFa2CcfHEmsXtWGe1EIMybozKIcjnTW3FKw0lWCrCp HEnglOblkUx5H9IJkvUkeseFek1LvrSy1rISwR6eRuGxvy/ZHM1tfxIoxAMpPOzV pNVqAb/rXc/oJlsKPrRZxmbnpNMNhIPfhA== -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:58 2026 by rpki-client