$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca95ec92-650a-3cac-ba92-02e5040b82f9.roa File: ca95ec92-650a-3cac-ba92-02e5040b82f9.roa (raw, json) Hash identifier: Jm19NoI1gObGLS5csenny0hV2Ek9LtX4WdOT1XBn4WI= Subject key identifier: 32:17:25:1F:53:A4:84:F0:B1:04:87:A3:58:BB:E2:C4:0E:52:5D:05 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA2731D8BB1F64A6452B905A Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca95ec92-650a-3cac-ba92-02e5040b82f9.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 2603:c022:8000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:31:d8:bb:1f:64:a6:45:2b:90:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=75a18ffc-73ea-46cd-95da-dfa9bdcb236c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:36:b7:33:d9:c9:26:7f:13:5a:08:b1:57: e5:ab:87:ce:9d:47:a4:50:7c:11:0c:18:1f:a7:c5: 55:ac:e5:eb:08:20:e8:ab:71:3d:0e:73:2d:2e:7c: 38:31:53:9b:e5:d7:27:1f:db:d8:13:42:4e:4d:d1: 3a:4f:02:f0:56:c9:b1:dc:41:2c:62:42:76:af:fa: 1d:0e:6f:f4:50:48:bd:b5:d7:d5:45:1d:e0:b6:69: 72:54:7b:28:2a:cd:a4:e9:f1:43:5b:4d:11:bf:62: 76:ab:16:e6:f0:7e:a8:c0:db:c5:c5:0c:a1:29:27: 4d:5d:56:5e:9c:1e:ff:e0:75:8f:7a:80:18:ce:93: a8:cd:fa:88:c3:3d:90:a1:2d:08:5b:a8:db:82:95: c1:00:d2:03:7e:43:38:51:0f:d4:56:92:96:23:e5: 05:85:bf:e6:8f:33:f6:5c:b8:37:e5:d3:d5:63:69: af:b6:ba:b4:76:a5:df:51:89:43:94:6b:74:93:9b: c1:5f:92:13:e1:94:3a:96:e7:6a:51:34:e0:3b:90: 4a:5b:b8:b1:6e:0d:a1:4d:de:66:7d:82:ff:c6:2e: 47:14:77:b9:6d:6c:95:75:c9:bd:e2:4a:b5:01:9b: da:9f:21:5e:02:2c:2e:29:dc:e5:92:d0:88:3e:ff: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:17:25:1F:53:A4:84:F0:B1:04:87:A3:58:BB:E2:C4:0E:52:5D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ca95ec92-650a-3cac-ba92-02e5040b82f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c022:8000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c8:ab:67:25:ce:7f:98:59:21:56:c7:38:92:eb:40:e8:df: ee:da:4b:52:90:d0:5a:a8:3c:be:79:92:51:dc:5d:ac:31:eb: 9d:00:35:5e:c8:42:67:8b:3a:1f:ca:54:b5:21:01:1d:88:ce: 89:3b:85:3a:fe:3e:31:46:4d:ae:38:ff:c6:c8:ef:03:9a:bd: 05:68:e4:4d:38:da:4d:bd:d0:19:b5:fb:ff:ed:1a:d5:12:b8: 6f:ea:b3:47:81:79:31:b4:26:ef:13:6a:7c:14:cb:0a:30:d8: 1e:5a:47:e8:d0:fe:c5:ac:92:b0:16:2a:19:dd:bb:f1:45:40: e2:81:9a:ae:99:71:e3:6b:51:f0:b5:53:10:a8:43:75:e0:c6: 7d:db:c3:d5:78:97:42:80:84:58:0b:8b:da:a6:8d:32:cf:4b: af:72:b1:a9:f2:24:29:34:91:cd:b4:b2:b9:be:35:a9:4f:00: b0:06:0c:8a:8a:18:e2:69:1c:6a:97:b0:9f:b4:ef:d9:19:09: 54:28:64:b3:43:1c:bc:15:d5:7b:86:04:62:d4:f4:fe:43:50: d8:0e:42:a7:9f:c4:9f:73:44:69:b6:10:a5:b8:1e:8f:2d:0c: 49:6b:4a:4e:3c:7d:02:eb:1e:a8:99:35:68:bb:d6:ec:2a:4e: 5d:e3:bb:5e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyqJzHYux9kpkUrkFowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NzVhMThmZmMtNzNlYS00NmNkLTk1ZGEtZGZhOWJkY2IyMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUk2tzPZySZ/E1oIsVflq4fOnUekUHwRDBgf p8VVrOXrCCDoq3E9DnMtLnw4MVOb5dcnH9vYE0JOTdE6TwLwVsmx3EEsYkJ2r/od Dm/0UEi9tdfVRR3gtmlyVHsoKs2k6fFDW00Rv2J2qxbm8H6owNvFxQyhKSdNXVZe nB7/4HWPeoAYzpOozfqIwz2QoS0IW6jbgpXBANIDfkM4UQ/UVpKWI+UFhb/mjzP2 XLg35dPVY2mvtrq0dqXfUYlDlGt0k5vBX5IT4ZQ6ludqUTTgO5BKW7ixbg2hTd5m fYL/xi5HFHe5bWyVdcm94kq1AZvanyFeAiwuKdzlktCIPv/IHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDIXJR9TpITwsQSHo1i74sQOUl0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2E5NWVjOTItNjUwYS0z Y2FjLWJhOTItMDJlNTA0MGI4MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAIoAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARsirZyXOf5hZIVbHOJLrQOjf7tpLUpDQWqg8vnmSUdxdrDHrnQA1 XshCZ4s6H8pUtSEBHYjOiTuFOv4+MUZNrjj/xsjvA5q9BWjkTTjaTb3QGbX7/+0a 1RK4b+qzR4F5MbQm7xNqfBTLCjDYHlpH6ND+xaySsBYqGd278UVA4oGarplx42tR 8LVTEKhDdeDGfdvD1XiXQoCEWAuL2qaNMs9Lr3KxqfIkKTSRzbSyub41qU8AsAYM iooY4mkcapewn7Tv2RkJVChks0McvBXVe4YEYtT0/kNQ2A5Cp5/En3NEabYQpbge jy0MSWtKTjx9AuseqJk1aLvW7CpOXeO7Xg== -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:21 2026 by rpki-client