$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4392347e-0852-360b-acd7-7604344b7412.roa File: 4392347e-0852-360b-acd7-7604344b7412.roa (raw, json) Hash identifier: 953aA3q+6fqEQ9YCf/O6EMqLi5OGFvTH7KEwYlJK2+A= Subject key identifier: 32:D2:DB:F5:B7:A9:4A:CF:02:73:28:FA:6E:51:FB:0C:28:20:C0:A8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC565CB99146D8E8D8B13AF40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4392347e-0852-360b-acd7-7604344b7412.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 31898 IP address blocks: 2603:c002:2b00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:cb:99:14:6d:8e:8d:8b:13:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=f6ad5940-15a0-4614-a0db-23752598a444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:cc:10:b9:e2:ac:b1:5e:9a:98:d2:db:2a: 93:76:ed:0a:00:b9:6d:e8:52:61:c2:38:72:6d:ad: 21:40:ac:71:27:c7:a0:7e:13:36:fa:ca:03:5f:d4: 2c:07:1f:63:ec:c7:29:04:b5:af:90:db:ce:53:29: 3c:9a:61:72:e4:be:6a:f3:54:2d:29:12:56:5e:83: 3c:47:c9:0c:3f:52:92:1d:44:73:af:e7:65:2d:19: 45:6b:72:a6:20:92:f5:fd:69:e6:d3:3f:60:36:68: af:a4:6f:80:8a:ca:4d:e9:88:ca:82:46:a9:92:23: 55:81:21:09:29:08:eb:26:0d:10:14:79:d5:9c:d5: 79:20:e4:66:31:c4:79:80:fc:61:a7:c1:77:47:0d: 6f:e7:57:1c:9b:2c:14:d9:32:61:90:17:a6:56:b9: d2:3f:b3:2b:b1:40:89:76:6a:07:68:f4:36:fd:d4: a6:a9:b1:61:e7:cc:b1:07:81:f8:34:42:99:82:4d: e9:ee:09:97:ed:b3:ff:99:e2:70:55:01:99:01:8d: d6:66:11:6a:cc:79:6e:cf:0c:82:42:cb:99:41:a2: 7c:db:99:20:e2:ec:87:64:20:aa:9d:70:67:bf:55: b6:7a:ec:b9:1f:fe:52:b4:32:76:76:5d:f0:64:11: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:DB:F5:B7:A9:4A:CF:02:73:28:FA:6E:51:FB:0C:28:20:C0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4392347e-0852-360b-acd7-7604344b7412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:2b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:0f:d8:22:d8:f4:60:5d:69:11:ec:41:60:b3:9f:7a:73:74: 10:ec:5d:f1:0a:2b:5c:af:e5:b4:82:bb:d2:fb:b0:7a:d9:7a: 9f:85:d3:61:cc:3f:15:5c:0a:83:0c:96:90:da:fc:62:48:87: 3e:63:51:87:69:e7:16:ac:71:02:e0:3a:e5:57:a4:16:a4:3d: 3b:54:e6:5e:a1:6c:1e:23:71:64:7d:65:bf:63:58:89:82:52: 12:15:d2:43:c4:f5:fa:24:39:08:c6:25:00:a5:13:46:90:4d: f4:cc:84:77:0a:0c:9b:a3:7b:0e:ee:d4:be:f7:71:1a:03:0a: 54:35:4e:84:79:1e:5f:52:31:4a:2e:f8:f2:9a:71:b9:3e:5a: ed:ef:32:da:b4:43:a2:35:3b:ca:23:56:ca:64:eb:46:18:c1: fd:0e:c6:79:cb:62:55:a4:c4:e0:f6:8d:46:6b:6b:ca:85:98: 82:0b:4d:2f:66:36:4c:32:81:88:5c:6a:a9:42:75:4e:85:37: bf:af:04:85:0f:19:2d:78:10:1c:ef:16:7d:37:5e:22:d2:79: c8:41:43:cd:92:3c:ed:23:bf:97:3a:e3:7e:ce:33:d6:d1:b0: b5:c2:0b:e3:62:5a:b7:50:98:3c:97:0f:07:e1:a5:a1:ea:2d: be:28:d4:3a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3FZcuZFG2OjYsTr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk ZjZhZDU5NDAtMTVhMC00NjE0LWEwZGItMjM3NTI1OThhNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFjMELnirLFempjS2yqTdu0KALlt6FJhwjhy ba0hQKxxJ8egfhM2+soDX9QsBx9j7McpBLWvkNvOUyk8mmFy5L5q81QtKRJWXoM8 R8kMP1KSHURzr+dlLRlFa3KmIJL1/Wnm0z9gNmivpG+AispN6YjKgkapkiNVgSEJ KQjrJg0QFHnVnNV5IORmMcR5gPxhp8F3Rw1v51ccmywU2TJhkBemVrnSP7MrsUCJ dmoHaPQ2/dSmqbFh58yxB4H4NEKZgk3p7gmX7bP/meJwVQGZAY3WZhFqzHluzwyC QsuZQaJ825kg4uyHZCCqnXBnv1W2euy5H/5StDJ2dl3wZBG1DwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDLS2/W3qUrPAnMo+m5R+wwoIMCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM5MjM0N2UtMDg1Mi0z NjBiLWFjZDctNzYwNDM0NGI3NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAisw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmA/YItj0YF1pEexBYLOfenN0EOxd8QorXK/ltIK70vuwetl6n4XT Ycw/FVwKgwyWkNr8YkiHPmNRh2nnFqxxAuA65VekFqQ9O1TmXqFsHiNxZH1lv2NY iYJSEhXSQ8T1+iQ5CMYlAKUTRpBN9MyEdwoMm6N7Du7UvvdxGgMKVDVOhHkeX1Ix Si748ppxuT5a7e8y2rRDojU7yiNWymTrRhjB/Q7GectiVaTE4PaNRmtryoWYggtN L2Y2TDKBiFxqqUJ1ToU3v68EhQ8ZLXgQHO8WfTdeItJ5yEFDzZI87SO/lzrjfs4z 1tGwtcIL42Jat1CYPJcPB+GloeotvijUOg== -----END CERTIFICATE-----Generated at Wed May 13 13:20:50 2026 by rpki-client