$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a21ea6d1-ef68-3852-8be4-9d460ac89c32.roa File: a21ea6d1-ef68-3852-8be4-9d460ac89c32.roa (raw, json) Hash identifier: 3UFHog+mfwooNUTZYFejt32y0hy+5tF6jnp3EPlfdzM= Subject key identifier: 21:92:3D:E6:7D:E6:F4:54:70:6C:06:69:49:48:AC:F8:2A:EC:AE:96 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DD4C07F24AC48BEEF4E694060 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a21ea6d1-ef68-3852-8be4-9d460ac89c32.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 2603:c0dc:1000::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:7f:24:ac:48:be:ef:4e:69:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=bd254a7a-a1d1-492e-8e83-0322dd58720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e6:4a:e8:e4:d9:f4:b1:9d:b6:22:33:9d:b4: 1e:bc:17:57:ee:b6:85:6a:23:2a:75:a7:a2:34:41: cd:9f:62:c9:fb:2b:f6:51:ea:d9:a5:2c:b6:c1:be: 2c:25:aa:e8:ef:b8:69:0f:49:b7:44:87:d5:57:81: 03:2a:13:5e:5d:f3:a8:0a:b5:dc:9d:82:d7:75:16: 18:4b:bb:16:74:54:27:15:e6:74:07:f3:6c:43:4b: b8:7b:b8:d5:e0:4c:b8:ae:42:2a:23:54:4b:56:a6: 36:cb:d4:c2:5b:e7:f8:b8:63:d2:d7:1c:4a:8b:99: 2c:5b:86:81:ea:ae:12:14:0a:07:1e:25:d0:21:f7: 0c:d3:d3:dc:9f:9f:2c:2c:c5:5d:fd:98:1a:8d:e2: c2:72:b0:2c:a8:f6:2e:7c:5c:65:28:d9:6d:d2:7d: 7c:e8:87:fc:61:76:d7:cc:d9:2e:d7:38:c7:bf:a4: 24:f3:4e:aa:c2:2b:bb:03:e9:88:12:7a:b5:6a:97: e9:0a:4e:40:cd:43:29:47:8e:74:16:51:cb:f1:2e: 8c:1e:3b:de:e1:a8:e2:3c:c4:ba:11:a2:78:2b:1e: f9:c9:ca:70:a3:5f:b2:e5:bf:af:d0:b1:e4:14:85: 39:2a:51:b2:27:6b:62:80:0c:c0:04:4c:32:77:c6: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:92:3D:E6:7D:E6:F4:54:70:6C:06:69:49:48:AC:F8:2A:EC:AE:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a21ea6d1-ef68-3852-8be4-9d460ac89c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0dc:1000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:46:2c:0d:69:0f:a6:3d:b9:e4:51:7b:d9:f7:92:77:37:e9: 23:85:92:98:92:fb:db:be:ec:bd:bd:56:fa:c2:f6:39:33:b2: b0:d0:e8:f8:54:91:14:16:d8:5c:2f:68:6a:d6:81:44:d8:eb: 8a:a2:66:8e:c5:65:c6:bc:f3:f6:3a:7b:e5:04:a2:3d:9a:ba: 3d:0f:bb:a4:a1:ff:81:ac:a7:f1:66:6b:c1:d3:d3:b4:cd:2d: 30:5d:22:d5:70:39:e8:14:e1:e7:9a:d5:86:a0:c7:4f:2c:b4: 8b:b8:21:82:3d:a8:af:7f:87:50:74:9a:4c:51:fa:e2:8e:e4: f4:01:16:37:a2:f4:3a:f2:dd:d2:37:b1:ea:e2:e7:f0:61:b8: e9:f5:a3:5d:ff:8f:cc:33:c6:b2:d0:e0:e2:f6:d3:83:ce:37: c2:06:66:9e:14:57:c5:ff:ab:4e:2a:f6:c0:6c:98:bc:85:c6: 93:8f:cb:ea:da:2c:88:c3:3c:72:7a:a4:40:94:c3:45:96:a6: 0c:c9:dd:2d:16:72:30:02:04:85:43:fe:8a:ab:1a:64:a9:06: 60:25:72:3a:8b:f3:61:1a:0d:d3:23:e0:ac:2a:a8:18:89:27: 1f:57:02:43:a7:5e:f6:64:9c:ba:5d:f8:de:6c:84:3b:1f:76: 78:11:e2:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3UwH8krEi+705pQGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk YmQyNTRhN2EtYTFkMS00OTJlLThlODMtMDMyMmRkNTg3MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieZK6OTZ9LGdtiIznbQevBdX7raFaiMqdaei NEHNn2LJ+yv2UerZpSy2wb4sJaro77hpD0m3RIfVV4EDKhNeXfOoCrXcnYLXdRYY S7sWdFQnFeZ0B/NsQ0u4e7jV4Ey4rkIqI1RLVqY2y9TCW+f4uGPS1xxKi5ksW4aB 6q4SFAoHHiXQIfcM09Pcn58sLMVd/ZgajeLCcrAsqPYufFxlKNlt0n186If8YXbX zNku1zjHv6Qk806qwiu7A+mIEnq1apfpCk5AzUMpR450FlHL8S6MHjve4ajiPMS6 EaJ4Kx75ycpwo1+y5b+v0LHkFIU5KlGyJ2tigAzABEwyd8YtxQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCGSPeZ95vRUcGwGaUlIrPgq7K6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTIxZWE2ZDEtZWY2OC0z ODUyLThiZTQtOWQ0NjBhYzg5YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPA3BAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkkYsDWkPpj255FF72feSdzfpI4WSmJL7277svb1W+sL2OTOysNDo +FSRFBbYXC9oataBRNjriqJmjsVlxrzz9jp75QSiPZq6PQ+7pKH/gayn8WZrwdPT tM0tMF0i1XA56BTh55rVhqDHTyy0i7ghgj2or3+HUHSaTFH64o7k9AEWN6L0OvLd 0jex6uLn8GG46fWjXf+PzDPGstDg4vbTg843wgZmnhRXxf+rTir2wGyYvIXGk4/L 6tosiMM8cnqkQJTDRZamDMndLRZyMAIEhUP+iqsaZKkGYCVyOovzYRoN0yPgrCqo GIknH1cCQ6de9mScul343myEOx92eBHicA== -----END CERTIFICATE-----Generated at Thu May 28 17:05:06 2026 by rpki-client