$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba2cdc27-6c53-356b-a763-abc90a97c6f8.roa File: ba2cdc27-6c53-356b-a763-abc90a97c6f8.roa (raw, json) Hash identifier: ODHLUpTYPm5e/FeblM5Z6IUmmIfJSIBEicckn9H7lUE= Subject key identifier: F2:1F:AE:EF:83:43:4D:04:60:CA:E3:05:4A:F9:10:04:A1:79:65:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC756572F599F3566A4400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba2cdc27-6c53-356b-a763-abc90a97c6f8.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 2603:c010::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:75:65:72:f5:99:f3:56:6a:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=b5a6dbb5-a8b9-4691-b971-5680693d25ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:12:7f:4c:e6:a6:3d:8a:f7:e0:b6:87:98: 45:91:f8:a9:d8:1a:e6:a0:d1:5b:d2:14:36:9f:28: 3a:e2:8b:1b:2a:50:62:b9:97:e6:c7:62:5e:23:0d: 54:8f:91:94:e9:bc:f3:b1:94:aa:b1:b9:af:45:01: 9d:ff:8b:bf:27:38:5b:82:57:0f:67:a5:07:b8:fb: b1:8c:e0:c6:0d:c8:28:d5:7d:51:b1:bb:a5:4f:aa: 09:aa:c9:a9:16:63:1e:8a:63:f4:9e:95:94:37:ae: ba:5b:03:b4:13:4f:56:3f:3b:db:b4:70:45:11:65: b6:ae:ab:93:59:1d:73:de:e5:10:ba:ca:e7:c8:24: 18:c2:e9:e1:03:d5:e3:a5:2b:44:5a:6a:0c:8c:81: f5:52:d3:f0:c7:9e:c4:ef:54:93:8a:85:30:32:99: 5f:f7:6d:54:df:d6:94:33:56:89:ff:aa:02:9b:46: 82:03:98:a5:98:15:77:e6:aa:7a:98:58:26:d9:88: bb:35:df:e6:2d:7d:66:2c:f1:a0:6e:cb:89:b9:ae: 46:ab:9a:3a:0e:f5:cb:6a:e5:67:5a:3a:f5:d3:cb: 48:d1:10:3a:78:a5:1c:25:21:b4:f3:66:d1:29:cb: 35:5e:e4:65:64:ea:6d:c2:af:0d:be:22:e8:7d:39: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1F:AE:EF:83:43:4D:04:60:CA:E3:05:4A:F9:10:04:A1:79:65:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba2cdc27-6c53-356b-a763-abc90a97c6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c010::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:67:51:05:bf:76:a3:5b:00:fa:c0:43:27:6a:23:af:c6:0d: a8:c4:48:15:a3:61:a5:c6:a4:ad:0e:e9:6c:d9:1b:a0:1f:03: c3:de:26:18:0c:66:79:e5:1d:dc:11:5b:86:21:4d:86:ea:1c: 8a:4d:ea:ac:9a:ee:ab:2b:fd:81:17:19:c3:89:16:25:5d:7d: e2:b2:66:05:ae:0a:72:cd:f3:72:0e:ff:97:c0:dc:06:05:81: f8:a0:f3:7c:a0:10:48:c9:e1:62:b5:ce:5f:64:43:16:d9:29: c4:8d:8e:27:15:61:50:27:c1:60:70:ae:28:b2:e9:22:f9:21: e9:3f:1f:d1:69:cf:70:79:24:ac:a5:90:79:8b:ee:ae:a2:0f: 36:4c:27:93:b8:8f:51:7d:81:b3:00:58:1f:38:f0:b5:25:01: 19:d4:4b:63:cb:95:33:ae:29:a9:e0:39:70:bf:26:09:cb:06: d8:89:71:44:8d:b5:ea:e3:44:c3:f0:5b:62:33:80:c4:0f:9d: 8c:9a:4a:1a:c2:c2:d8:97:4e:59:d0:ee:17:45:a5:b2:d0:8d: 07:03:02:68:88:d2:0d:53:4a:57:92:b0:c1:cb:fd:b7:5c:24: 8f:2c:15:89:43:1c:07:56:aa:50:78:39:1c:c8:db:12:85:df: 28:f0:55:c1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyvvHVlcvWZ81ZqRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk YjVhNmRiYjUtYThiOS00NjkxLWI5NzEtNTY4MDY5M2QyNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW8Sf0zmpj2K9+C2h5hFkfip2BrmoNFb0hQ2 nyg64osbKlBiuZfmx2JeIw1Uj5GU6bzzsZSqsbmvRQGd/4u/JzhbglcPZ6UHuPux jODGDcgo1X1RsbulT6oJqsmpFmMeimP0npWUN666WwO0E09WPzvbtHBFEWW2rquT WR1z3uUQusrnyCQYwunhA9XjpStEWmoMjIH1UtPwx57E71STioUwMplf921U39aU M1aJ/6oCm0aCA5ilmBV35qp6mFgm2Yi7Nd/mLX1mLPGgbsuJua5Gq5o6DvXLauVn Wjr108tI0RA6eKUcJSG082bRKcs1XuRlZOptwq8NviLofTnhXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPIfru+DQ00EYMrjBUr5EASheWXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmEyY2RjMjctNmM1My0z NTZiLWE3NjMtYWJjOTBhOTdjNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAEAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgmdRBb92o1sA+sBDJ2ojr8YNqMRIFaNhpcakrQ7pbNkboB8Dw94m GAxmeeUd3BFbhiFNhuocik3qrJruqyv9gRcZw4kWJV194rJmBa4Kcs3zcg7/l8Dc BgWB+KDzfKAQSMnhYrXOX2RDFtkpxI2OJxVhUCfBYHCuKLLpIvkh6T8f0WnPcHkk rKWQeYvurqIPNkwnk7iPUX2BswBYHzjwtSUBGdRLY8uVM64pqeA5cL8mCcsG2Ilx RI216uNEw/BbYjOAxA+djJpKGsLC2JdOWdDuF0WlstCNBwMCaIjSDVNKV5Kwwcv9 t1wkjywViUMcB1aqUHg5HMjbEoXfKPBVwQ== -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:06 2026 by rpki-client