$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da687128-4e9c-3517-add1-96b405d31a91.roa File: da687128-4e9c-3517-add1-96b405d31a91.roa (raw, json) Hash identifier: dSRqx96Ogf5NGKlZQqpb3gU09A9HSZ87Y0PX6RZ3voc= Subject key identifier: D1:48:75:6E:24:D0:50:92:AC:98:DB:AC:6F:A3:9C:0F:BD:98:DD:27 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DE150AB500C2CCD2F1FAACCC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da687128-4e9c-3517-add1-96b405d31a91.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 54253 IP address blocks: 2603:c06a::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:ab:50:0c:2c:cd:2f:1f:aa:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=4a4cabb9-81fe-4522-9c1f-31301592b3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:a6:02:e2:16:e2:21:fd:6f:1a:f0:1a:49: 86:79:c5:09:33:77:45:bb:6b:ba:2d:28:a0:a0:35: e6:05:84:40:5d:28:3c:09:01:bc:7b:8c:37:f9:cc: 35:e2:4f:da:9f:a7:8d:65:5d:ad:07:25:62:8b:0e: 6e:c9:81:c4:ce:58:08:96:61:8a:96:74:c7:14:4c: d0:92:d1:f0:43:13:24:3c:2a:7e:d3:0d:a4:53:b1: c2:1b:a5:e2:d7:d6:9c:e1:39:ad:6e:97:7e:65:8c: 8a:fa:26:d6:b2:3e:5c:8d:b0:a1:af:3f:de:96:39: d4:ac:95:a3:f8:5a:49:e4:80:a4:f7:f7:2d:ba:b2: f9:25:a1:bd:43:2d:72:0e:d0:40:08:cd:d9:b4:2a: 95:4f:ad:3e:a3:51:55:ff:f5:e9:1c:a3:50:8a:54: d3:f6:43:fa:ea:4b:32:da:cd:a2:10:98:d4:20:6a: 96:e2:49:13:bf:63:7e:e5:ad:58:91:40:3a:e9:a7: bc:ed:8e:2f:26:b4:8f:89:6f:cb:62:3f:e2:f3:6e: ae:ef:59:03:c0:16:b8:d5:6a:79:88:5b:a0:42:12: 3c:53:52:2a:60:34:0c:53:9c:ae:2c:e2:e0:6d:78: e9:01:a0:ad:d5:d7:88:79:5f:7a:f5:15:15:bf:02: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:48:75:6E:24:D0:50:92:AC:98:DB:AC:6F:A3:9C:0F:BD:98:DD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da687128-4e9c-3517-add1-96b405d31a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c06a::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:bc:f3:44:e7:e4:67:8f:3f:ec:1b:63:24:bb:7b:6d:47:a5: e8:67:80:57:0d:26:5b:87:eb:e5:f4:59:54:c5:2d:ca:84:da: 76:54:63:6c:ac:06:ac:0f:ae:bb:96:c8:1a:ef:34:37:40:84: f7:05:20:e8:1e:01:f6:6e:29:2e:4d:cb:91:a1:90:b5:d0:52: cf:04:e4:f3:98:2b:1a:c2:08:55:07:f6:3c:42:ff:dd:d7:20: a4:d1:d3:41:10:dc:fd:8f:f0:d8:4c:e1:7b:93:f0:ff:7a:b9: 95:00:db:06:c4:bb:26:20:e5:5d:a1:3e:de:5f:bd:d6:c9:86: 9b:ae:b1:bb:a6:79:a7:d1:d1:61:b3:61:bb:61:31:85:5f:2f: 76:11:8e:b8:79:5b:77:63:40:6a:c3:9b:72:b4:c9:55:93:65: ea:81:90:dd:2c:26:3d:2e:56:99:52:fc:30:14:4b:df:6e:35: c8:c7:1b:93:17:72:ed:cc:89:20:21:a3:80:3f:db:b8:f5:3a: b3:e8:67:12:69:bc:c3:00:1f:b3:5b:e2:81:f9:90:a6:b7:d4: b7:b0:92:3c:af:93:70:cd:a6:73:a9:c9:da:2c:87:d5:8b:95: 37:53:7a:a4:ba:56:9a:7c:b2:a2:e3:1c:c9:30:e4:8e:e2:a9: 32:6f:00:22 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3hUKtQDCzNLx+qzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk NGE0Y2FiYjktODFmZS00NTIyLTljMWYtMzEzMDE1OTJiM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn76mAuIW4iH9bxrwGkmGecUJM3dFu2u6LSig oDXmBYRAXSg8CQG8e4w3+cw14k/an6eNZV2tByViiw5uyYHEzlgIlmGKlnTHFEzQ ktHwQxMkPCp+0w2kU7HCG6Xi19ac4Tmtbpd+ZYyK+ibWsj5cjbChrz/eljnUrJWj +FpJ5ICk9/cturL5JaG9Qy1yDtBACM3ZtCqVT60+o1FV//XpHKNQilTT9kP66ksy 2s2iEJjUIGqW4kkTv2N+5a1YkUA66ae87Y4vJrSPiW/LYj/i826u71kDwBa41Wp5 iFugQhI8U1IqYDQMU5yuLOLgbXjpAaCt1deIeV969RUVvwKlnwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNFIdW4k0FCSrJjbrG+jnA+9mN0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGE2ODcxMjgtNGU5Yy0z NTE3LWFkZDEtOTZiNDA1ZDMxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAagAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZ7zzROfkZ48/7BtjJLt7bUel6GeAVw0mW4fr5fRZVMUtyoTadlRj bKwGrA+uu5bIGu80N0CE9wUg6B4B9m4pLk3LkaGQtdBSzwTk85grGsIIVQf2PEL/ 3dcgpNHTQRDc/Y/w2Ezhe5Pw/3q5lQDbBsS7JiDlXaE+3l+91smGm66xu6Z5p9HR YbNhu2ExhV8vdhGOuHlbd2NAasObcrTJVZNl6oGQ3SwmPS5WmVL8MBRL3241yMcb kxdy7cyJICGjgD/buPU6s+hnEmm8wwAfs1vigfmQprfUt7CSPK+TcM2mc6nJ2iyH 1YuVN1N6pLpWmnyyouMcyTDkjuKpMm8AIg== -----END CERTIFICATE-----Generated at Thu May 28 17:04:31 2026 by rpki-client