$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa File: cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa (raw, json) Hash identifier: sWKfgwbYZ940PaUuQpZRtngBPWrnoJEhZ6Ktz67Mq/M= Subject key identifier: F0:55:70:B9:0E:88:3C:5C:D5:0B:5F:BC:99:F2:2B:80:22:F0:77:BA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA27305E60D92F5B72C71D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 2603:c001:4000::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:30:5e:60:d9:2f:5b:72:c7:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=aebe70c5-a89b-44d7-8681-1a2cc34fd443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:b0:07:d7:bb:a1:1c:36:16:dd:f0:11:30: db:68:08:8b:be:b6:4c:ff:41:4e:25:12:c4:80:44: 07:83:b6:31:b4:a7:91:28:34:21:30:3a:0b:31:5e: 7a:83:1e:55:f0:54:30:5f:1b:62:68:7b:69:4a:1c: 58:5e:ea:0e:46:0c:ff:eb:ef:4d:c5:84:fb:84:a1: 00:d1:ba:3e:d5:f1:9f:22:09:73:ec:d2:d9:89:5a: 2c:41:0f:31:14:0e:95:f2:bd:2c:6f:24:e8:46:59: 7b:9c:02:61:55:6b:07:76:2e:51:1f:c5:d9:06:65: 2a:0a:d5:6a:dc:04:67:d1:5f:11:7b:c5:e2:60:0c: b2:b6:84:a4:60:df:e1:5d:69:23:fe:bf:5d:bf:d6: 93:1f:ba:54:6d:32:f9:8a:92:bf:ca:de:1a:2d:84: b0:1e:d8:ea:5b:e7:9b:71:ed:d3:97:0f:25:09:90: 90:44:82:e9:21:73:3e:a2:43:f6:72:2f:96:d5:0b: 69:19:a0:42:25:9b:74:75:41:64:cb:91:64:75:3b: db:62:4e:7b:53:4c:ec:c2:34:d7:b8:33:83:89:74: 8e:a3:7e:03:22:f7:78:eb:c1:db:a5:9d:84:94:5c: c2:49:13:15:ef:2f:11:65:27:83:73:f8:80:61:88: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:55:70:B9:0E:88:3C:5C:D5:0B:5F:BC:99:F2:2B:80:22:F0:77:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb2ecdd2-9e73-3764-a349-9bcdfde9d1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c001:4000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1c:fb:d2:fd:96:42:7a:28:ba:cf:d5:52:08:e5:97:b6:97: e2:6d:d3:03:7a:04:e8:67:cd:7f:45:66:89:86:a5:98:f7:07: 29:ab:24:09:6f:39:1a:c9:c0:74:d5:29:91:91:eb:53:5d:4e: 9a:32:d8:4c:59:7b:92:ed:82:56:67:2f:9b:32:41:e7:8e:55: d5:6e:25:4d:61:9d:24:b3:e4:67:2c:24:27:6e:1f:9f:12:39: ac:57:20:b5:7f:88:59:a6:43:7e:e4:c5:74:87:9f:67:97:f9: 25:e1:df:d1:5c:bf:06:2b:f5:76:0f:4c:38:15:90:07:e9:14: 8f:ff:87:c9:b8:b8:d1:bc:f7:d2:eb:2b:64:36:b7:94:dd:e0: d4:eb:9c:b7:cb:20:62:36:80:a3:88:3f:19:04:6c:0f:ef:16: 52:e8:72:30:c5:d3:2c:1c:d1:97:2a:6f:e7:e4:ea:40:fa:48: b4:99:8c:dc:1d:95:64:e5:02:e9:5c:e2:24:97:07:44:7a:51: 67:60:33:7a:44:c5:ca:49:d1:56:e4:bb:35:5f:59:2b:a3:66: ac:49:fc:25:2c:10:80:29:8e:68:e6:d4:e5:29:d7:ab:57:55: 50:ac:bd:0b:73:2a:2e:07:da:ea:bb:36:28:ff:eb:3e:1f:bb: d5:f3:9c:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyqJzBeYNkvW3LHHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YWViZTcwYzUtYTg5Yi00NGQ3LTg2ODEtMWEyY2MzNGZkNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6OwB9e7oRw2Ft3wETDbaAiLvrZM/0FOJRLE gEQHg7YxtKeRKDQhMDoLMV56gx5V8FQwXxtiaHtpShxYXuoORgz/6+9NxYT7hKEA 0bo+1fGfIglz7NLZiVosQQ8xFA6V8r0sbyToRll7nAJhVWsHdi5RH8XZBmUqCtVq 3ARn0V8Re8XiYAyytoSkYN/hXWkj/r9dv9aTH7pUbTL5ipK/yt4aLYSwHtjqW+eb ce3Tlw8lCZCQRILpIXM+okP2ci+W1QtpGaBCJZt0dUFky5FkdTvbYk57U0zswjTX uDODiXSOo34DIvd468HbpZ2ElFzCSRMV7y8RZSeDc/iAYYixjwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPBVcLkOiDxc1QtfvJnyK4Ai8He6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2IyZWNkZDItOWU3My0z NzY0LWEzNDktOWJjZGZkZTlkMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALRz70v2WQnoous/VUgjll7aX4m3TA3oE6GfNf0VmiYalmPcHKask CW85GsnAdNUpkZHrU11OmjLYTFl7ku2CVmcvmzJB545V1W4lTWGdJLPkZywkJ24f nxI5rFcgtX+IWaZDfuTFdIefZ5f5JeHf0Vy/Biv1dg9MOBWQB+kUj/+Hybi40bz3 0usrZDa3lN3g1Ouct8sgYjaAo4g/GQRsD+8WUuhyMMXTLBzRlypv5+TqQPpItJmM 3B2VZOUC6VziJJcHRHpRZ2AzekTFyknRVuS7NV9ZK6NmrEn8JSwQgCmOaObU5SnX q1dVUKy9C3MqLgfa6rs2KP/rPh+71fOc5Q== -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:01 2026 by rpki-client