$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a2a864-9941-3b94-9160-2eef3efe06e3.roa File: d3a2a864-9941-3b94-9160-2eef3efe06e3.roa (raw, json) Hash identifier: 8fQcIT9HT6l4Eq9PMMy5iiN1e2bhOeJnaOUPrdwkLIA= Subject key identifier: D1:EB:F0:CE:78:87:A7:3A:CF:EC:67:A2:84:B6:59:D6:62:BD:4A:E7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1D0EFFB79595B90115B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a2a864-9941-3b94-9160-2eef3efe06e3.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 2603:c002:1600::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d0:ef:fb:79:59:5b:90:11:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=1eb562c3-3eaa-4073-bf93-1bef5de41a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:9f:6a:28:2e:96:2f:f2:34:40:57:10:6b: c5:d6:92:70:3d:48:e5:51:57:41:1f:bd:e8:1f:6e: 1a:14:50:ff:fa:ce:72:89:a5:26:9a:e7:7a:c2:a7: 99:29:c2:22:de:6f:2f:21:db:c9:11:b1:07:3a:e6: 04:fe:09:e5:20:b1:72:a8:65:2c:a7:a8:b9:99:84: ac:78:be:89:4a:0c:34:8b:b6:9b:d7:2f:b8:f8:29: 77:ce:8b:eb:e9:fa:4a:b7:13:c9:03:fd:8d:86:90: fc:6c:d5:f8:05:50:c3:02:62:7e:06:6b:58:db:4e: 51:44:f9:d1:ed:7b:83:b4:42:20:71:06:11:98:df: 94:d6:34:46:82:fb:40:ab:2f:d2:e3:fa:8a:82:b5: 85:b6:f3:54:d4:c5:63:21:be:d6:44:82:8b:77:d9: 28:ca:5d:6a:7c:9c:6b:03:0e:0f:85:94:57:5a:e0: 38:0f:7c:93:0f:c0:53:94:4f:e1:df:37:e9:17:a3: 93:6c:1f:ea:f8:da:a6:1d:b0:39:40:1a:46:0e:63: 97:62:64:1f:e0:c6:dc:bd:28:7b:e2:ba:62:b6:e7: 03:ce:25:bb:d2:9c:ff:b7:cb:34:1a:49:2d:6f:d2: 77:13:30:7f:4b:dd:4e:e5:ba:0a:29:20:f9:0c:91: 41:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EB:F0:CE:78:87:A7:3A:CF:EC:67:A2:84:B6:59:D6:62:BD:4A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3a2a864-9941-3b94-9160-2eef3efe06e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:1600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e9:c0:b1:4e:7b:a0:dc:c6:25:2f:1b:38:1b:d2:fd:77:9d: c1:d2:01:95:b7:ed:39:b3:21:dd:19:bd:a0:cd:2a:66:e9:59: b8:63:80:58:f3:b0:ee:36:b0:84:81:1d:eb:69:07:07:c1:c2: 31:c3:c9:f0:6d:6c:cd:54:09:46:c4:d4:e6:fd:3e:1a:d0:ae: c2:87:95:51:b3:0b:5d:eb:78:84:c2:9a:e8:98:93:7b:08:cd: a0:c3:1d:6d:2d:5e:b6:90:9d:8f:86:22:88:c8:7d:78:0a:3d: 72:03:c8:78:d5:60:6b:37:74:38:2b:5c:f3:36:8e:f7:09:c6: 6a:98:83:ac:c4:6d:e5:3a:dc:7d:3a:41:1e:d8:f6:6a:b3:64: c9:c4:8a:ac:b6:1d:d2:ed:22:67:39:2e:3b:8e:50:27:8b:e2: 2a:ad:98:ce:f7:f4:f4:04:5e:10:24:eb:d0:88:52:ed:f9:35: 94:62:7a:d2:9e:c2:d7:19:d4:71:b9:32:25:9a:e3:dd:f8:37: eb:75:78:e1:12:7a:87:42:c3:bf:43:6c:17:db:99:63:cb:c0: d8:eb:ec:6b:e7:7d:d2:09:43:a9:20:f2:6c:f4:c4:85:9f:70: d1:b5:02:da:30:fc:fe:c9:7d:4b:7e:41:59:18:06:48:d4:4a: 31:27:93:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEys8dDv+3lZW5ARWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MWViNTYyYzMtM2VhYS00MDczLWJmOTMtMWJlZjVkZTQxYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMCfaiguli/yNEBXEGvF1pJwPUjlUVdBH73o H24aFFD/+s5yiaUmmud6wqeZKcIi3m8vIdvJEbEHOuYE/gnlILFyqGUsp6i5mYSs eL6JSgw0i7ab1y+4+Cl3zovr6fpKtxPJA/2NhpD8bNX4BVDDAmJ+BmtY205RRPnR 7XuDtEIgcQYRmN+U1jRGgvtAqy/S4/qKgrWFtvNU1MVjIb7WRIKLd9koyl1qfJxr Aw4PhZRXWuA4D3yTD8BTlE/h3zfpF6OTbB/q+NqmHbA5QBpGDmOXYmQf4MbcvSh7 4rpitucDziW70pz/t8s0Gkktb9J3EzB/S91O5boKKSD5DJFBWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNHr8M54h6c6z+xnooS2WdZivUrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDNhMmE4NjQtOTk0MS0z Yjk0LTkxNjAtMmVlZjNlZmUwNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAhYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARunAsU57oNzGJS8bOBvS/XedwdIBlbftObMh3Rm9oM0qZulZuGOA WPOw7jawhIEd62kHB8HCMcPJ8G1szVQJRsTU5v0+GtCuwoeVUbMLXet4hMKa6JiT ewjNoMMdbS1etpCdj4YiiMh9eAo9cgPIeNVgazd0OCtc8zaO9wnGapiDrMRt5Trc fTpBHtj2arNkycSKrLYd0u0iZzkuO45QJ4viKq2Yzvf09AReECTr0IhS7fk1lGJ6 0p7C1xnUcbkyJZrj3fg363V44RJ6h0LDv0NsF9uZY8vA2Ovsa+d90glDqSDybPTE hZ9w0bUC2jD8/sl9S35BWRgGSNRKMSeTOA== -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:57 2026 by rpki-client