$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43aaa6df-3de5-3b85-92ba-c1741fd69436.roa File: 43aaa6df-3de5-3b85-92ba-c1741fd69436.roa (raw, json) Hash identifier: v9SjHh6mhAHPfyX8myJdbOcs51UeXW/HDBG5kTzISUI= Subject key identifier: FF:50:C7:DA:E4:66:F3:DE:7D:83:60:D3:86:14:BC:3C:A3:8D:BC:F4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D3975F607410B5ECC9CCD4DC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43aaa6df-3de5-3b85-92ba-c1741fd69436.roa Signing time: Thu 19 Mar 2026 22:00:20 +0000 ROA not before: Thu 19 Mar 2026 22:00:20 +0000 ROA not after: Wed 17 Jun 2026 22:00:20 +0000 asID: 54253 IP address blocks: 2600:200c:2800::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:75:f6:07:41:0b:5e:cc:9c:cd:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 19 22:00:20 2026 GMT Not After : Jun 17 22:00:20 2026 GMT Subject: CN=727df295-66c1-4b00-adaa-a0aab286b31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:36:d6:3e:60:0b:8e:ea:20:5c:99:d8:d2: 9f:3e:ba:45:16:2a:cc:8d:43:64:9c:b1:72:a8:13: 4c:d6:f7:d8:72:20:e3:a6:04:04:88:e8:ba:ab:91: 1e:f2:15:c2:97:7d:bf:32:56:36:68:cc:da:89:ad: 76:8a:d3:55:64:72:f2:97:0a:e5:31:c8:db:24:19: a3:4f:71:2d:0e:6c:b5:82:df:ac:fe:cb:c9:02:ef: 6c:09:34:ca:de:90:ad:bd:f4:20:06:0a:ed:e3:13: 53:97:28:87:30:e2:7a:49:da:f2:e3:7b:5e:85:90: 80:05:ad:73:89:ea:ba:a5:2f:8f:9a:f5:1b:62:59: 46:54:7e:12:49:c0:b0:bd:a9:60:18:45:05:7d:67: ed:f2:f5:74:18:65:a6:1e:73:aa:b1:94:39:39:23: 90:36:d3:62:cd:6f:bc:d8:ea:62:c2:82:94:80:3f: 2a:d5:68:49:22:0b:7b:49:51:51:bf:7e:ad:c0:96: c8:08:58:d9:d8:f3:d0:d5:fb:e0:28:18:92:93:9e: 17:39:a2:12:62:a7:16:c8:3c:27:48:82:94:9c:ab: be:50:dd:b9:36:85:ce:ae:8c:25:71:ec:1f:2d:e2: ba:cd:d0:da:2d:21:f0:66:6d:ea:c9:4b:6d:ef:0b: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:50:C7:DA:E4:66:F3:DE:7D:83:60:D3:86:14:BC:3C:A3:8D:BC:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/43aaa6df-3de5-3b85-92ba-c1741fd69436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:200c:2800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f2:dd:32:fe:7c:6c:29:c0:0f:f6:aa:82:12:2c:9a:bd:39: 0f:9e:bf:8a:b1:72:71:84:ec:a3:93:53:40:9b:8c:91:e8:15: f1:b5:59:cc:63:a3:fc:c1:5f:e4:a9:93:29:9b:44:1b:24:21: c2:f8:51:2e:d1:fa:82:09:67:0a:c7:3f:12:bf:bd:ba:d7:ed: 8d:dc:e9:e1:33:36:0c:d7:a2:1a:51:9a:cd:a4:4d:1f:9a:1a: 66:cc:a2:e0:cf:1f:4f:6c:6e:4c:13:0f:d6:ba:9e:d8:d6:6e: 9d:ff:89:5e:91:fb:ef:61:b1:a4:2b:05:22:a5:71:14:19:ca: 36:6c:5b:45:45:33:36:57:c2:19:78:c8:82:07:2e:dd:31:62: fc:b2:c5:f7:26:8b:14:45:d0:53:ba:af:0d:09:36:db:d1:93: ee:21:b5:1f:6c:b5:91:dd:f2:7c:59:9d:8a:cc:aa:ad:2f:db: 18:98:45:6d:9f:19:59:7a:99:92:aa:cf:47:b2:c6:00:b0:3a: 4c:a3:87:fe:2c:5c:ae:6d:55:87:05:6a:17:d1:a7:42:46:54: 0c:8c:20:a3:c0:ca:f1:36:96:26:a1:5a:f4:b7:bb:ae:cb:6a: 60:8a:61:4a:bf:8c:3e:d5:f7:9e:39:bc:1d:32:5c:19:0a:24: 65:e3:b5:5f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE05dfYHQQtezJzNTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxOTIyMDAyMFoXDTI2MDYxNzIyMDAyMFowLzEtMCsGA1UEAxMk NzI3ZGYyOTUtNjZjMS00YjAwLWFkYWEtYTBhYWIyODZiMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmU21j5gC47qIFyZ2NKfPrpFFirMjUNknLFy qBNM1vfYciDjpgQEiOi6q5Ee8hXCl32/MlY2aMzaia12itNVZHLylwrlMcjbJBmj T3EtDmy1gt+s/svJAu9sCTTK3pCtvfQgBgrt4xNTlyiHMOJ6Sdry43tehZCABa1z ieq6pS+PmvUbYllGVH4SScCwvalgGEUFfWft8vV0GGWmHnOqsZQ5OSOQNtNizW+8 2OpiwoKUgD8q1WhJIgt7SVFRv36twJbICFjZ2PPQ1fvgKBiSk54XOaISYqcWyDwn SIKUnKu+UN25NoXOrowlcewfLeK6zdDaLSHwZm3qyUtt7wt+wQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP9Qx9rkZvPefYNg04YUvDyjjbz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDNhYWE2ZGYtM2RlNS0z Yjg1LTkyYmEtYzE3NDFmZDY5NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAgDCgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdvLdMv58bCnAD/aqghIsmr05D56/irFycYTso5NTQJuMkegV8bVZ zGOj/MFf5KmTKZtEGyQhwvhRLtH6gglnCsc/Er+9utftjdzp4TM2DNeiGlGazaRN H5oaZsyi4M8fT2xuTBMP1rqe2NZunf+JXpH772GxpCsFIqVxFBnKNmxbRUUzNlfC GXjIggcu3TFi/LLF9yaLFEXQU7qvDQk229GT7iG1H2y1kd3yfFmdisyqrS/bGJhF bZ8ZWXqZkqrPR7LGALA6TKOH/ixcrm1VhwVqF9GnQkZUDIwgo8DK8TaWJqFa9Le7 rstqYIphSr+MPtX3njm8HTJcGQokZeO1Xw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:26:17 2026 by rpki-client