$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a926e3-71a4-3557-a762-f614ca7d3600.roa File: 40a926e3-71a4-3557-a762-f614ca7d3600.roa (raw, json) Hash identifier: 6H/V22nNhgYVYbx0sjfQY1W/c0rWA0qfbof4MYFyG4A= Subject key identifier: D8:26:79:B9:CD:C9:2C:98:DB:4B:CD:89:21:8C:FB:26:D9:4E:47:9B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9FB56DB547DD72D876AE8800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a926e3-71a4-3557-a762-f614ca7d3600.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 2600:2000:2240::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6d:b5:47:dd:72:d8:76:ae:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=aacfae17-1b53-414f-b9c6-21fbe0d39813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:6b:5c:55:e6:dd:09:65:99:ef:bf:b9:53: 21:81:58:ed:58:1d:4d:40:d7:cc:4b:d0:fd:91:3d: 6d:97:2b:da:52:fe:cf:63:51:ea:6b:f8:22:7e:70: 32:50:aa:03:d1:39:3d:4e:b4:79:b1:19:68:7e:a8: c8:84:e8:18:d7:fa:69:a8:54:57:63:02:17:e8:69: 37:8e:e1:2b:c2:11:b7:84:da:cc:bf:5a:2a:77:ef: 0c:8b:a8:a7:94:24:25:40:cd:70:40:7d:59:2f:48: 27:6a:d5:a4:3a:e9:33:63:37:59:d3:31:3f:b4:51: da:cf:db:3d:d7:b8:f5:0f:72:a3:e5:82:f8:49:c9: d6:38:02:f0:df:7d:ec:4e:70:b9:2d:ed:77:72:be: 79:bf:19:dc:0c:84:a9:18:48:33:42:73:b0:1c:48: df:7e:f6:75:11:da:36:d4:07:ac:2d:05:94:68:28: 22:2f:8f:1d:6c:39:e6:11:54:68:74:4e:fa:45:1c: df:85:c4:b5:c9:5c:72:2a:2e:b5:c2:c6:83:20:4f: 27:2b:c1:66:16:f0:0b:55:81:50:a4:dd:94:00:b6: e6:69:aa:3c:8d:89:55:da:4d:94:91:34:fb:26:c1: be:a4:e2:c0:b0:15:0d:37:3b:a6:68:b2:f0:dc:94: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:26:79:B9:CD:C9:2C:98:DB:4B:CD:89:21:8C:FB:26:D9:4E:47:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40a926e3-71a4-3557-a762-f614ca7d3600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2240::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b5:b4:61:98:1b:1f:44:c4:c5:e2:2c:d8:44:25:29:78:59: a1:bc:4c:4e:07:95:de:c7:a1:13:7e:61:54:c4:b7:05:a4:14: 87:37:59:11:00:75:e8:e3:16:e9:ee:1a:d5:5e:a9:f8:0f:3e: 35:21:24:3e:80:7a:cb:b4:c7:98:c0:0e:81:65:7b:8c:76:60: c0:30:2b:04:d9:2f:38:d7:0f:c4:e9:50:d0:8b:60:de:d1:91: 00:89:df:1b:58:39:f3:f5:74:d7:c1:0d:53:3e:78:1a:e2:06: c1:fa:30:4c:66:f1:4c:82:50:52:6a:4e:f9:c4:9d:bb:fc:26: 05:81:7e:e4:65:bf:0e:ba:b4:5f:a4:2b:ba:ae:35:b9:60:f4: db:4e:a7:49:0a:87:e0:6f:2e:72:19:64:70:eb:56:1a:5c:10: 7b:8c:8a:22:fa:0a:91:a4:68:f1:00:47:08:fe:b4:a4:00:53: da:44:24:f4:b7:9f:f3:7e:b9:9d:57:93:e7:a4:06:21:bf:a9: 40:2c:e8:51:49:13:7e:9b:9c:b7:6e:4c:51:0d:23:c4:5b:6c: 18:df:23:68:b9:8d:d8:4e:bb:fa:a4:55:5d:54:0e:f4:e1:e0: 93:5c:4a:c3:e6:a7:94:f1:cb:23:89:66:df:a8:cf:2c:c2:68: 33:2a:ce:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2ftW21R91y2HauiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk YWFjZmFlMTctMWI1My00MTRmLWI5YzYtMjFmYmUwZDM5ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLJrXFXm3Qllme+/uVMhgVjtWB1NQNfMS9D9 kT1tlyvaUv7PY1Hqa/gifnAyUKoD0Tk9TrR5sRlofqjIhOgY1/ppqFRXYwIX6Gk3 juErwhG3hNrMv1oqd+8Mi6inlCQlQM1wQH1ZL0gnatWkOukzYzdZ0zE/tFHaz9s9 17j1D3Kj5YL4ScnWOALw333sTnC5Le13cr55vxncDISpGEgzQnOwHEjffvZ1Edo2 1AesLQWUaCgiL48dbDnmEVRodE76RRzfhcS1yVxyKi61wsaDIE8nK8FmFvALVYFQ pN2UALbmaao8jYlV2k2UkTT7JsG+pOLAsBUNNzumaLLw3JTOTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgmebnNySyY20vNiSGM+ybZTkebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDBhOTI2ZTMtNzFhNC0z NTU3LWE3NjItZjYxNGNhN2QzNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACJA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKC1tGGYGx9ExMXiLNhEJSl4WaG8TE4Hld7HoRN+YVTEtwWkFIc3 WREAdejjFunuGtVeqfgPPjUhJD6Aesu0x5jADoFle4x2YMAwKwTZLzjXD8TpUNCL YN7RkQCJ3xtYOfP1dNfBDVM+eBriBsH6MExm8UyCUFJqTvnEnbv8JgWBfuRlvw66 tF+kK7quNblg9NtOp0kKh+BvLnIZZHDrVhpcEHuMiiL6CpGkaPEARwj+tKQAU9pE JPS3n/N+uZ1Xk+ekBiG/qUAs6FFJE36bnLduTFENI8RbbBjfI2i5jdhOu/qkVV1U DvTh4JNcSsPmp5TxyyOJZt+ozyzCaDMqztM= -----END CERTIFICATE-----Generated at Wed May 13 14:05:14 2026 by rpki-client