$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa File: ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa (raw, json) Hash identifier: 8NMyrIIK8ePpLNEkv6Qk64y9yam+KdnYSMvFr+gevO0= Subject key identifier: 0D:01:52:7E:83:4C:E7:92:F9:E6:33:0A:F0:F5:FC:B1:23:E2:BC:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA26FD0610FAE7E14ED75000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 2603:c028::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:26:fd:06:10:fa:e7:e1:4e:d7:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=30a3f7b0-c7c6-47bf-9024-b875bebcbedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:2f:92:13:97:05:7f:4e:10:51:c9:68:2d: dd:1d:09:3e:f3:65:dd:54:2d:bd:75:ec:97:89:29: 5f:d8:18:93:a3:18:35:b0:08:67:53:e8:7d:18:3e: 0c:d6:5f:7a:e0:1b:de:4c:aa:13:fa:73:e7:86:63: a6:97:bb:c1:0b:ba:11:f7:46:50:2b:a9:cf:93:1a: 80:36:90:9d:c6:d1:8c:ed:90:6f:6e:5b:a4:4d:30: d9:19:b1:84:f6:18:97:72:2c:e0:97:dd:68:ab:7d: 4b:94:12:f4:24:44:70:2b:71:a0:95:f4:72:a1:24: 12:f1:ce:74:a5:a2:2a:69:5c:a0:a6:c8:6f:7f:d9: 08:5f:c6:d7:33:f4:8c:15:8f:a3:f5:20:79:bf:29: 14:8a:22:3e:cd:17:98:08:bf:d1:41:91:f1:e5:d0: ad:e6:64:fb:e8:0e:69:c5:d6:c6:53:48:ca:2f:85: d6:a4:04:ba:fa:cb:11:4e:c4:e0:8a:de:2a:70:6b: e4:b7:1d:d6:1c:7e:77:76:17:03:cb:39:0d:2c:54: 91:83:09:73:c1:99:2e:e5:4e:ee:34:d3:74:c0:6a: fa:37:e8:b8:e6:29:d0:92:d9:d8:10:4a:4b:f8:4c: b3:fe:a2:87:7d:c8:6f:9c:3f:e8:2c:4d:a1:26:7e: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:01:52:7E:83:4C:E7:92:F9:E6:33:0A:F0:F5:FC:B1:23:E2:BC:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba7ecb61-880b-3a77-be42-ab2812b59ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c028::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e1:b7:aa:ce:44:4d:09:ed:7a:80:7b:9f:f7:43:d0:51:9f: 9a:6f:81:a6:c7:37:69:71:db:9c:1b:f9:74:8e:5d:b7:8d:35: a1:1c:7a:23:22:8c:a6:ed:f7:bc:b9:75:34:97:c5:21:ed:05: 7d:3d:40:31:b7:7b:4f:26:ef:d1:bc:b5:55:1e:16:ca:01:dd: 74:5d:eb:46:f9:f6:9b:6c:a4:ab:94:06:9f:8d:a5:da:54:f8: b2:c6:ee:76:97:d5:c7:b3:3d:eb:1c:d5:46:69:84:bd:cf:fc: c6:95:29:a3:33:6d:61:13:c0:58:33:1e:e8:f5:57:af:43:8f: 5a:2e:d6:32:b7:ac:71:58:b2:e1:97:0f:96:db:d8:8a:8e:7f: 09:16:c3:1c:d4:67:cc:c2:36:72:21:19:b8:6e:30:37:1f:02: 94:69:d0:de:d4:22:67:2d:d6:c7:3e:02:db:a8:8b:c4:7d:ac: 07:8d:de:66:a7:ed:c4:9e:e4:ef:9f:6d:15:91:a2:a9:6f:f5: 3a:6a:66:1b:cc:0d:55:cc:bd:51:61:5d:65:f7:87:f7:0c:07: 02:f5:8f:2e:4c:88:3e:a0:e8:61:50:34:5e:56:66:24:39:5b: 75:71:84:9b:48:b8:f3:3e:9b:5d:13:2a:78:46:c2:dc:94:3d: f2:53:43:80 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyqJv0GEPrn4U7XUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MzBhM2Y3YjAtYzdjNi00N2JmLTkwMjQtYjg3NWJlYmNiZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOIvkhOXBX9OEFHJaC3dHQk+82XdVC29deyX iSlf2BiToxg1sAhnU+h9GD4M1l964BveTKoT+nPnhmOml7vBC7oR90ZQK6nPkxqA NpCdxtGM7ZBvblukTTDZGbGE9hiXcizgl91oq31LlBL0JERwK3GglfRyoSQS8c50 paIqaVygpshvf9kIX8bXM/SMFY+j9SB5vykUiiI+zReYCL/RQZHx5dCt5mT76A5p xdbGU0jKL4XWpAS6+ssRTsTgit4qcGvktx3WHH53dhcDyzkNLFSRgwlzwZku5U7u NNN0wGr6N+i45inQktnYEEpL+Eyz/qKHfchvnD/oLE2hJn6ovQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA0BUn6DTOeS+eYzCvD1/LEj4ryzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE3ZWNiNjEtODgwYi0z YTc3LWJlNDItYWIyODEyYjU5YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAKAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAneG3qs5ETQnteoB7n/dD0FGfmm+Bpsc3aXHbnBv5dI5dt401oRx6 IyKMpu33vLl1NJfFIe0FfT1AMbd7Tybv0by1VR4WygHddF3rRvn2m2ykq5QGn42l 2lT4ssbudpfVx7M96xzVRmmEvc/8xpUpozNtYRPAWDMe6PVXr0OPWi7WMrescViy 4ZcPltvYio5/CRbDHNRnzMI2ciEZuG4wNx8ClGnQ3tQiZy3Wxz4C26iLxH2sB43e ZqftxJ7k759tFZGiqW/1OmpmG8wNVcy9UWFdZfeH9wwHAvWPLkyIPqDoYVA0XlZm JDlbdXGEm0i48z6bXRMqeEbC3JQ98lNDgA== -----END CERTIFICATE-----Generated at Thu Feb 26 05:00:24 2026 by rpki-client