$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa File: bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa (raw, json) Hash identifier: QFg+FOJOndhL7MBJ5yZ8CdDK9n3WBPSZT6rCXegzr4w= Subject key identifier: 0F:AC:DA:EC:01:7B:F0:86:CA:9A:62:34:65:5B:A5:DF:28:28:65:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1BF8D578188B52EEA7BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 2603:c002:9600::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:bf:8d:57:81:88:b5:2e:ea:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=9c8924a2-3e6d-4e51-afc4-c28a3b77fc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:4d:0f:63:27:3e:9b:db:7e:61:c8:a3:26: 07:de:73:e9:0a:97:4c:b3:68:75:64:2d:80:05:dd: a8:3f:51:f7:de:74:dd:a8:cb:6f:d2:73:b9:f9:4d: 5d:77:f0:44:12:d3:b4:aa:df:e9:fc:93:29:18:d5: 48:61:66:21:3d:be:75:59:6a:3f:f3:b5:b1:9b:bd: cf:23:4e:c3:cb:61:85:e2:99:1f:ce:0a:8f:46:5e: 1b:27:24:98:d9:70:a7:67:3e:b9:38:04:31:32:27: e3:6c:0b:5e:8e:cd:b1:ed:98:fb:34:fe:38:f7:56: 41:31:cb:5e:49:a8:f8:6b:dd:53:4a:c3:7e:80:a9: e6:1f:27:33:ac:c4:5d:f1:aa:f9:a6:ab:fa:59:69: 97:61:1a:33:2a:38:86:ff:c1:78:1e:ee:54:72:93: 4f:e7:d4:ea:bd:b9:d7:31:79:cf:c0:53:48:0a:f8: d9:f8:49:3b:07:84:4b:4f:d8:21:56:2b:29:30:eb: e1:e5:9f:86:c2:ac:ad:30:71:ab:21:6c:b2:ff:f2: cb:31:5c:d4:dd:9c:62:61:c1:db:74:c2:36:90:af: c5:34:5c:44:b3:61:3a:53:7d:1b:e5:5e:29:64:18: 1b:4b:cc:05:a0:10:99:91:72:81:67:79:27:76:e0: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AC:DA:EC:01:7B:F0:86:CA:9A:62:34:65:5B:A5:DF:28:28:65:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfc81a38-e383-3c07-826a-f8aa9dd3d698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:9600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3b:a9:bf:52:1c:20:31:b6:65:17:c7:40:08:d9:2a:4f:78: 3d:bf:a9:78:f0:0e:6a:fa:94:4d:0b:43:cf:51:ba:9d:5d:34: ed:9b:1b:b1:61:d5:44:cd:bc:9f:0f:5b:60:b7:33:f8:fb:b1: 8a:1a:14:14:e8:2a:4b:47:6d:c6:0a:eb:f2:ff:63:da:52:8b: a3:b0:cb:2f:06:43:7f:68:44:92:f4:d3:bc:c0:df:66:31:2f: 28:5d:2a:e1:f6:9d:32:4b:d3:4c:47:68:c1:ea:37:43:dc:c0: 2e:80:23:65:31:fb:89:8d:49:7d:6f:cc:04:2d:5b:37:16:9f: 96:9a:f5:6c:2f:52:18:06:41:ae:bd:eb:06:93:d6:a1:b9:d1: 77:25:6a:90:e1:6a:ce:fc:cc:81:89:68:37:1c:45:19:85:e9: 4e:8e:a3:c3:d6:cd:9b:4f:c8:db:5d:c2:e2:52:e0:44:ab:bc: c1:19:90:8e:49:6c:89:93:bf:1c:61:18:3b:f4:ec:e0:cc:52: 92:ad:20:b6:30:aa:88:04:ed:40:f8:01:5d:88:c8:bd:cf:dd: e8:08:ae:60:06:ae:58:eb:0e:7b:dd:bd:4d:58:46:c4:64:ea: 02:1c:e1:8f:70:81:ae:3d:33:0a:5d:32:a3:2b:3c:03:49:7b: 73:57:f4:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEys8b+NV4GItS7qe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk OWM4OTI0YTItM2U2ZC00ZTUxLWFmYzQtYzI4YTNiNzdmYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUVND2MnPpvbfmHIoyYH3nPpCpdMs2h1ZC2A Bd2oP1H33nTdqMtv0nO5+U1dd/BEEtO0qt/p/JMpGNVIYWYhPb51WWo/87Wxm73P I07Dy2GF4pkfzgqPRl4bJySY2XCnZz65OAQxMifjbAtejs2x7Zj7NP4491ZBMcte Saj4a91TSsN+gKnmHyczrMRd8ar5pqv6WWmXYRozKjiG/8F4Hu5UcpNP59TqvbnX MXnPwFNICvjZ+Ek7B4RLT9ghVispMOvh5Z+GwqytMHGrIWyy//LLMVzU3ZxiYcHb dMI2kK/FNFxEs2E6U30b5V4pZBgbS8wFoBCZkXKBZ3knduA7iQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA+s2uwBe/CGyppiNGVbpd8oKGWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmZjODFhMzgtZTM4My0z YzA3LTgyNmEtZjhhYTlkZDNkNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAApYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARzupv1IcIDG2ZRfHQAjZKk94Pb+pePAOavqUTQtDz1G6nV007Zsb sWHVRM28nw9bYLcz+PuxihoUFOgqS0dtxgrr8v9j2lKLo7DLLwZDf2hEkvTTvMDf ZjEvKF0q4fadMkvTTEdoweo3Q9zALoAjZTH7iY1JfW/MBC1bNxaflpr1bC9SGAZB rr3rBpPWobnRdyVqkOFqzvzMgYloNxxFGYXpTo6jw9bNm0/I213C4lLgRKu8wRmQ jklsiZO/HGEYO/Ts4MxSkq0gtjCqiATtQPgBXYjIvc/d6AiuYAauWOsOe929TVhG xGTqAhzhj3CBrj0zCl0yoys8A0l7c1f0OA== -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:03 2026 by rpki-client