$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cebdca18-b648-36c3-a50f-af6208a69466.roa File: cebdca18-b648-36c3-a50f-af6208a69466.roa (raw, json) Hash identifier: cFBCiWd6+OE3I3yBKjPMuiKz3el8KUQCLWQGgnoW/DM= Subject key identifier: 3B:31:A1:0C:25:91:F9:33:AF:7C:5A:C5:D4:30:E6:15:BA:37:D3:23 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DF210BB54C91D975BCB1F1260 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cebdca18-b648-36c3-a50f-af6208a69466.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 54253 IP address blocks: 2600:2004:2100::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:bb:54:c9:1d:97:5b:cb:1f:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=35c061f9-3080-4d12-a415-eb556cadc75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:cb:08:09:ae:1c:f1:51:ab:dc:dd:11:cb: 66:08:99:ac:85:c5:f6:c1:60:2c:39:61:eb:d3:38: be:a9:7e:0f:5d:32:24:a2:57:7c:dc:73:4c:5b:f2: f4:e1:44:83:13:5f:2d:43:10:0f:c7:22:e4:db:5c: 69:d8:06:bb:76:c2:fa:07:8b:e0:93:57:d6:17:5d: e3:c4:7f:55:82:05:24:43:3b:1b:a8:ec:7e:23:78: 85:83:34:ea:44:0e:f2:ba:28:8d:09:8a:a5:9b:a6: ab:d0:dd:a1:9e:0a:d3:3d:59:9d:0d:89:84:9f:de: 26:e4:d1:ba:b7:c8:1c:d7:17:7c:c3:ff:a4:47:28: b7:81:7e:74:c7:58:cd:90:62:05:36:17:77:fd:1e: b4:64:de:6c:ff:5e:34:06:ed:c5:f4:25:88:1d:d1: ba:f5:6b:e6:cc:43:05:84:9c:16:74:81:ba:c9:6c: ea:7e:f3:36:8b:28:d5:16:84:c9:65:43:a4:c9:2a: 7b:eb:77:18:5a:f4:ed:56:62:cc:2e:fc:93:47:96: b5:3e:69:8d:14:7d:71:7d:17:5c:20:1f:01:b3:bf: 5f:c3:b8:50:47:c4:ff:7a:73:fa:09:f8:e9:f2:65: 6b:e7:82:54:42:fc:ba:77:57:c7:3e:6b:7e:5c:4c: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:31:A1:0C:25:91:F9:33:AF:7C:5A:C5:D4:30:E6:15:BA:37:D3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cebdca18-b648-36c3-a50f-af6208a69466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2004:2100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:80:7f:05:4a:e5:81:57:b3:69:ae:ce:0d:1a:f3:00:1c:7b: de:d7:e2:03:bc:fa:55:31:a2:0c:91:63:06:0c:63:5b:3c:a1: 74:5f:43:c7:21:d0:cc:86:78:c2:52:f4:50:32:4a:a5:4a:f6: cc:b3:7d:a0:86:b7:30:e8:21:b7:cb:0b:7a:f2:85:8a:14:45: 2d:da:57:fc:92:55:67:9f:8b:76:3a:5b:e0:3a:c3:da:ba:e8: 1f:a4:e7:b0:43:b9:47:8f:e7:c7:50:74:a2:50:52:bc:d1:c8: 85:c7:4c:f9:81:2c:be:61:c9:98:12:57:85:3d:0f:9b:07:39: 78:6a:34:37:0e:19:c9:a1:42:c9:5f:fc:c5:80:d9:82:3f:87: 2d:70:c0:ba:fc:24:e0:e7:7c:dd:f7:04:e0:14:7c:84:d1:74: c5:ec:22:df:e6:4a:53:3b:27:9f:13:3b:db:bf:02:84:51:61: 0a:96:19:d1:db:74:7b:6e:5e:35:e8:1e:6a:74:b5:4b:02:5f: fa:3e:46:cc:4d:e6:66:af:e5:cb:41:44:8b:c2:ba:23:d2:de: bd:12:34:44:05:b9:79:96:64:e5:a6:3a:6f:4b:e8:63:cc:6c: b2:31:1d:e5:61:c2:6d:5f:dd:29:4c:fc:1d:49:10:05:d1:ce: b1:d5:37:84 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3yELtUyR2XW8sfEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk MzVjMDYxZjktMzA4MC00ZDEyLWE0MTUtZWI1NTZjYWRjNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KPLCAmuHPFRq9zdEctmCJmshcX2wWAsOWHr 0zi+qX4PXTIkold83HNMW/L04USDE18tQxAPxyLk21xp2Aa7dsL6B4vgk1fWF13j xH9VggUkQzsbqOx+I3iFgzTqRA7yuiiNCYqlm6ar0N2hngrTPVmdDYmEn94m5NG6 t8gc1xd8w/+kRyi3gX50x1jNkGIFNhd3/R60ZN5s/140Bu3F9CWIHdG69WvmzEMF hJwWdIG6yWzqfvM2iyjVFoTJZUOkySp763cYWvTtVmLMLvyTR5a1PmmNFH1xfRdc IB8Bs79fw7hQR8T/enP6Cfjp8mVr54JUQvy6d1fHPmt+XEwNrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDsxoQwlkfkzr3xaxdQw5hW6N9MjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2ViZGNhMTgtYjY0OC0z NmMzLWE1MGYtYWY2MjA4YTY5NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAgBCEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARoB/BUrlgVezaa7ODRrzABx73tfiA7z6VTGiDJFjBgxjWzyhdF9D xyHQzIZ4wlL0UDJKpUr2zLN9oIa3MOght8sLevKFihRFLdpX/JJVZ5+Ldjpb4DrD 2rroH6TnsEO5R4/nx1B0olBSvNHIhcdM+YEsvmHJmBJXhT0Pmwc5eGo0Nw4ZyaFC yV/8xYDZgj+HLXDAuvwk4Od83fcE4BR8hNF0xewi3+ZKUzsnnxM7278ChFFhCpYZ 0dt0e25eNegeanS1SwJf+j5GzE3mZq/ly0FEi8K6I9LevRI0RAW5eZZk5aY6b0vo Y8xssjEd5WHCbV/dKUz8HUkQBdHOsdU3hA== -----END CERTIFICATE-----Generated at Thu May 28 17:05:07 2026 by rpki-client