$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa File: c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa (raw, json) Hash identifier: Wh7eAokW7yD9YIxitgbJOe0YCj4bn6rendjF44hokAg= Subject key identifier: 0C:2E:88:51:43:43:05:FA:B2:0D:4A:E7:D1:01:6F:8B:03:14:45:6C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBF171BE870B294877D1EB080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 31898 IP address blocks: 2600:2000:2130::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:1b:e8:70:b2:94:87:7d:1e:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=cb79656f-035d-49f0-a3fe-461d594f73ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:2b:d2:a5:5e:c5:99:30:d7:df:d1:2a:27: 7b:fb:e6:8a:69:4e:02:c5:fc:be:7c:1f:c7:61:6d: 57:37:10:82:37:c9:7d:ed:8a:2a:eb:f9:36:8c:4c: 4b:61:8c:29:e3:33:65:41:30:c3:08:e9:83:ff:e8: 67:7d:c1:7c:78:d3:a6:d4:be:52:ed:81:8f:d8:be: 3b:df:eb:97:4e:3d:b9:bc:1d:5f:88:2c:2f:a5:72: 19:db:30:06:69:b8:58:62:28:d2:c9:92:12:a7:f8: 20:e2:dc:50:63:48:45:74:75:c1:db:89:24:21:2c: af:0f:45:7e:d8:72:22:cc:7b:e3:6c:76:52:04:1c: 9d:e5:05:f6:07:a6:c7:42:0d:bc:4d:22:13:ca:8a: fe:2d:06:21:85:f5:36:30:14:5f:96:c1:87:58:bc: 32:84:b8:d7:a4:23:55:e0:cf:2c:58:c6:57:07:71: 9f:90:af:d0:91:0f:d8:f9:94:15:be:2c:84:bb:16: cd:3e:74:37:a8:7c:58:38:7a:11:8b:0f:d3:e6:58: 87:0e:f4:66:b1:6c:49:c9:37:77:1f:1f:3c:ce:2e: 0c:28:b4:e5:a5:f7:54:db:eb:aa:7d:06:86:f6:6e: 1a:e9:64:65:91:83:7d:28:17:b7:8e:82:15:29:89: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2E:88:51:43:43:05:FA:B2:0D:4A:E7:D1:01:6F:8B:03:14:45:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:58:28:83:2e:f5:79:0d:6c:67:ef:34:ff:22:b2:7f:93:ff: c8:ab:b6:2c:20:b5:3c:12:a2:5d:80:03:44:ab:b1:9d:57:73: ad:b1:bf:65:c0:07:79:3d:58:e8:aa:89:5d:4a:f4:b5:47:53: 1e:59:12:67:36:66:73:a0:68:7a:ca:3a:13:39:be:69:cb:11: cb:79:d7:f9:13:aa:67:ed:cb:20:13:f8:be:ba:e3:17:06:39: 64:be:4b:7b:59:0e:88:b9:c7:8c:a8:cd:8b:36:b8:68:9f:3a: fe:f2:ba:ad:cb:fe:7b:91:aa:64:f8:96:20:a9:a8:99:d0:e4: 2c:fb:b7:fc:de:bf:74:fc:01:d0:16:1d:85:20:13:4d:32:aa: d3:ab:1f:96:7a:e6:1f:ba:31:87:96:da:1e:e8:83:1c:88:27: 4e:cd:65:d4:42:88:ef:c6:1f:cc:6c:7c:da:77:4d:6b:fe:9a: 89:fa:90:d2:e7:bb:11:45:5d:85:03:ab:09:37:94:1a:19:46: ee:0c:9a:83:61:2c:09:e1:8d:85:6b:ab:c5:7a:0d:96:c9:42: 3d:41:d8:4f:b6:84:ad:8a:f6:8e:26:19:f8:30:d5:95:c9:11: 2a:02:6f:db:2d:45:d5:d1:49:be:09:56:19:ab:fb:90:13:67: 82:bc:e5:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy/FxvocLKUh30esIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk Y2I3OTY1NmYtMDM1ZC00OWYwLWEzZmUtNDYxZDU5NGY3M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Ar0qVexZkw19/RKid7++aKaU4Cxfy+fB/H YW1XNxCCN8l97Yoq6/k2jExLYYwp4zNlQTDDCOmD/+hnfcF8eNOm1L5S7YGP2L47 3+uXTj25vB1fiCwvpXIZ2zAGabhYYijSyZISp/gg4txQY0hFdHXB24kkISyvD0V+ 2HIizHvjbHZSBByd5QX2B6bHQg28TSITyor+LQYhhfU2MBRflsGHWLwyhLjXpCNV 4M8sWMZXB3GfkK/QkQ/Y+ZQVviyEuxbNPnQ3qHxYOHoRiw/T5liHDvRmsWxJyTd3 Hx88zi4MKLTlpfdU2+uqfQaG9m4a6WRlkYN9KBe3joIVKYngFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAwuiFFDQwX6sg1K59EBb4sDFEVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzhhYTk4NTktZTNiYS0z YmY0LWJhMzctNTFkMTBjNzk4ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFYKIMu9XkNbGfvNP8isn+T/8irtiwgtTwSol2AA0SrsZ1Xc62x v2XAB3k9WOiqiV1K9LVHUx5ZEmc2ZnOgaHrKOhM5vmnLEct51/kTqmftyyAT+L66 4xcGOWS+S3tZDoi5x4yozYs2uGifOv7yuq3L/nuRqmT4liCpqJnQ5Cz7t/zev3T8 AdAWHYUgE00yqtOrH5Z65h+6MYeW2h7ogxyIJ07NZdRCiO/GH8xsfNp3TWv+mon6 kNLnuxFFXYUDqwk3lBoZRu4MmoNhLAnhjYVrq8V6DZbJQj1B2E+2hK2K9o4mGfgw 1ZXJESoCb9stRdXRSb4JVhmr+5ATZ4K85SU= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:19 2026 by rpki-client