$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/249a3005-93a5-321b-965c-b51f61e2ccb7.roa File: 249a3005-93a5-321b-965c-b51f61e2ccb7.roa (raw, json) Hash identifier: QiAMscNgRrjqv2IK8AlzyMtfUbxrtCW4ZBjj6ExUNYk= Subject key identifier: 96:31:E9:F5:02:19:86:D6:85:69:A1:56:59:B6:14:B2:0C:BB:C1:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D3671AA9E18838162A92AF0C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/249a3005-93a5-321b-965c-b51f61e2ccb7.roa Signing time: Wed 18 Mar 2026 20:04:15 +0000 ROA not before: Wed 18 Mar 2026 20:04:15 +0000 ROA not after: Tue 16 Jun 2026 20:04:15 +0000 asID: 54253 IP address blocks: 2603:c0d0:2800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:71:aa:9e:18:83:81:62:a9:2a:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 18 20:04:15 2026 GMT Not After : Jun 16 20:04:15 2026 GMT Subject: CN=2c10c787-4f2e-425b-8a18-19911f92cce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:ed:4a:9d:ec:8a:fc:4c:3d:d8:d3:f3:c1: 35:80:30:85:59:4f:40:46:e1:bf:1b:6d:9d:42:99: b2:c0:86:0e:d5:1b:cc:cc:81:60:c0:07:f5:68:5d: 0f:5b:c0:4e:7b:7b:64:da:39:e9:b6:59:de:b3:ef: 4c:6e:d4:e1:db:24:a5:42:e7:ac:10:4a:ef:0c:5a: ce:9f:0f:59:4a:be:d7:c6:53:8a:25:58:da:0a:2a: b0:1c:08:d3:f3:59:65:49:91:68:a0:b7:13:5f:ef: b1:2b:e1:99:7e:54:67:dc:47:68:02:d0:f2:0e:a9: b2:ee:63:bf:9f:10:a0:f4:ed:be:d7:63:74:53:8a: 32:42:21:c2:79:78:6f:0d:92:7b:61:2b:7a:fe:a0: c1:ea:21:a5:73:c3:69:c0:2d:cb:15:96:86:03:22: 04:3a:e5:ff:c2:28:c2:34:08:0c:bb:b1:b0:53:53: 50:52:db:07:21:52:d7:75:f8:93:8e:c7:9e:23:d2: d6:1d:d6:e3:25:8c:17:cb:c9:1e:05:b5:8f:a9:b4: 74:99:e2:49:55:a2:84:10:46:07:81:47:b2:b7:d5: 38:7a:f7:15:02:65:ef:72:70:9e:08:03:ff:c6:29: f8:e6:7e:09:7c:77:62:9a:7b:c2:40:f3:f6:fa:a3: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:31:E9:F5:02:19:86:D6:85:69:A1:56:59:B6:14:B2:0C:BB:C1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/249a3005-93a5-321b-965c-b51f61e2ccb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0d0:2800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c3:54:65:72:36:f8:3c:6f:88:14:99:6d:92:51:6a:a3:aa: 8d:78:64:7b:ec:50:bf:5e:8e:e0:ca:96:3d:50:fb:57:f8:f1: 09:eb:69:96:0f:2e:04:53:ec:ae:c3:67:c7:22:fd:09:b1:f1: 3e:43:8c:63:5c:2a:c7:14:c0:b6:4c:00:b5:e7:21:bd:7d:d6: cb:25:5f:57:14:62:55:a2:85:85:f9:50:ac:1d:4a:a6:60:45: 10:ce:bd:bb:84:00:ef:1c:00:ba:65:df:1d:ea:27:8b:4c:ac: b2:fa:a4:7a:4f:b5:43:64:35:1f:b9:a4:31:05:dc:73:a9:0f: 35:58:cf:56:7c:e7:f9:9b:d9:46:31:c2:ce:44:47:80:7e:34: c8:e1:e1:81:73:2c:a0:86:ad:8f:75:6e:ce:a7:d3:8a:c0:f6: a3:31:6d:2a:be:a5:02:06:59:60:d8:e0:c2:ce:68:74:d3:7d: 9d:52:c5:5e:c8:4c:d0:36:8b:07:ea:28:22:67:bf:27:b5:9f: 76:19:2d:14:50:f7:b4:84:b7:7f:9e:71:f0:53:54:85:04:13: cb:9c:93:99:c7:66:64:ae:9d:8b:0b:a1:1b:ed:aa:3b:d7:17: 76:20:de:d9:27:eb:a2:af:54:08:20:0a:40:4d:4b:ae:06:e1: fb:4a:b1:a6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE02caqeGIOBYqkq8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxODIwMDQxNVoXDTI2MDYxNjIwMDQxNVowLzEtMCsGA1UEAxMk MmMxMGM3ODctNGYyZS00MjViLThhMTgtMTk5MTFmOTJjY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsubtSp3sivxMPdjT88E1gDCFWU9ARuG/G22d QpmywIYO1RvMzIFgwAf1aF0PW8BOe3tk2jnptlnes+9MbtTh2ySlQuesEErvDFrO nw9ZSr7XxlOKJVjaCiqwHAjT81llSZFooLcTX++xK+GZflRn3EdoAtDyDqmy7mO/ nxCg9O2+12N0U4oyQiHCeXhvDZJ7YSt6/qDB6iGlc8NpwC3LFZaGAyIEOuX/wijC NAgMu7GwU1NQUtsHIVLXdfiTjseeI9LWHdbjJYwXy8keBbWPqbR0meJJVaKEEEYH gUeyt9U4evcVAmXvcnCeCAP/xin45n4JfHdimnvCQPP2+qMpEQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJYx6fUCGYbWhWmhVlm2FLIMu8EpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjQ5YTMwMDUtOTNhNS0z MjFiLTk2NWMtYjUxZjYxZTJjY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPA0Cgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARMNUZXI2+DxviBSZbZJRaqOqjXhke+xQv16O4MqWPVD7V/jxCetp lg8uBFPsrsNnxyL9CbHxPkOMY1wqxxTAtkwAtechvX3WyyVfVxRiVaKFhflQrB1K pmBFEM69u4QA7xwAumXfHeoni0yssvqkek+1Q2Q1H7mkMQXcc6kPNVjPVnzn+ZvZ RjHCzkRHgH40yOHhgXMsoIatj3VuzqfTisD2ozFtKr6lAgZZYNjgws5odNN9nVLF XshM0DaLB+ooIme/J7WfdhktFFD3tIS3f55x8FNUhQQTy5yTmcdmZK6diwuhG+2q O9cXdiDe2Sfroq9UCCAKQE1Lrgbh+0qxpg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:08:53 2026 by rpki-client