$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/453480c7-1cb5-34ea-9b7f-d3804e7e9664.roa File: 453480c7-1cb5-34ea-9b7f-d3804e7e9664.roa (raw, json) Hash identifier: I9ulIrHyK8dVfBRKQMkM0aQlAVsDSd7jKKwXYTNvH68= Subject key identifier: 58:A7:06:D5:D4:A3:53:B2:B5:1A:17:0C:77:8B:68:14:87:61:B7:E8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E500D16B68CCB98C5A1F880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/453480c7-1cb5-34ea-9b7f-d3804e7e9664.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 2603:c002:a300::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0d:16:b6:8c:cb:98:c5:a1:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=f8abed46-731a-45fb-9c9d-5accf84ea378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:af:66:c0:24:e4:2b:70:ec:56:e3:a8:66: 79:a6:39:1b:72:43:02:c7:16:ff:57:23:a2:bd:da: b7:09:e9:ab:c9:e6:6e:b4:a2:3c:2d:4a:99:e6:23: a3:79:92:a0:ab:53:db:d6:f5:1c:9e:5d:82:df:77: db:0e:bf:64:65:0b:18:92:80:55:45:b3:1d:a0:d1: 56:93:64:21:03:83:23:bf:41:a5:eb:f1:19:f9:35: ef:ab:22:60:3f:cc:80:2b:68:ca:fc:d1:71:26:de: f5:4f:28:c6:ba:1a:9f:c1:d2:b6:62:12:06:65:0d: b3:4e:ba:ad:5d:39:6c:f2:c5:80:3d:3c:34:b7:ae: 36:24:b2:d4:21:86:5a:00:e1:77:3d:38:a9:9a:cf: 62:ce:0b:6c:6f:64:6c:92:20:03:23:5c:0b:96:53: d9:59:4d:d9:5d:4b:b9:f0:02:11:dc:0a:90:bf:b5: c1:9d:13:00:2a:f1:a0:1b:ea:6e:47:2f:b9:e7:66: 20:97:a0:66:b3:2e:00:2b:4b:59:49:2b:cc:44:ab: 5c:1d:d5:be:78:de:e0:47:a6:ed:6f:ca:27:bd:91: 66:16:a8:d9:a4:1b:cc:9e:6b:01:af:fe:54:63:18: b4:40:83:23:e6:8f:7b:6f:ad:ce:1e:7d:cb:03:84: 73:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:06:D5:D4:A3:53:B2:B5:1A:17:0C:77:8B:68:14:87:61:B7:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/453480c7-1cb5-34ea-9b7f-d3804e7e9664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:a300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d4:90:5b:c8:b8:ca:3b:64:af:4f:76:35:9c:d0:08:1f:68: 9c:fd:64:71:6f:d4:fc:da:81:00:28:4c:9f:5d:c9:55:57:78: 04:ce:3a:d2:52:89:e0:d8:c6:bb:92:f8:37:e1:87:97:18:7b: f0:71:14:cc:d9:aa:bc:cc:87:37:e3:f5:c4:c0:60:7b:54:02: b8:24:96:c4:71:05:b8:ac:cd:f8:ea:ca:3e:74:78:21:2b:e7: 69:b8:af:be:53:d5:d0:33:bd:0c:cd:72:c9:9e:7c:89:45:48: 31:c6:e6:a9:61:dc:d1:cf:93:07:ed:7f:81:36:5e:a2:05:ea: 5a:ee:fa:2e:d1:ac:aa:94:ef:d8:2c:b5:63:cd:13:59:f2:a7: f6:74:cf:cc:a9:d0:ea:f8:85:50:8b:17:99:ae:50:f4:86:42: 45:18:02:a3:12:91:d1:16:20:86:6f:12:84:f3:87:8d:37:db: ce:4a:2a:28:b4:67:82:59:84:17:f1:d9:c7:fe:68:b0:fb:ef: f9:74:59:4f:f4:30:96:21:02:2f:c7:80:76:28:12:15:af:d2: 7b:0c:9a:48:f1:d2:c2:c4:b4:35:2b:8f:cf:bd:2f:67:70:18: d4:ca:2d:a7:12:5a:8a:2c:1b:64:e0:dc:39:c2:3f:d6:d9:8e: 92:f2:a1:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUA0WtozLmMWh+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjhhYmVkNDYtNzMxYS00NWZiLTljOWQtNWFjY2Y4NGVhMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgivZsAk5Ctw7FbjqGZ5pjkbckMCxxb/VyOi vdq3CemryeZutKI8LUqZ5iOjeZKgq1Pb1vUcnl2C33fbDr9kZQsYkoBVRbMdoNFW k2QhA4Mjv0Gl6/EZ+TXvqyJgP8yAK2jK/NFxJt71TyjGuhqfwdK2YhIGZQ2zTrqt XTls8sWAPTw0t642JLLUIYZaAOF3PTipms9izgtsb2RskiADI1wLllPZWU3ZXUu5 8AIR3AqQv7XBnRMAKvGgG+puRy+552Ygl6Bmsy4AK0tZSSvMRKtcHdW+eN7gR6bt b8onvZFmFqjZpBvMnmsBr/5UYxi0QIMj5o97b63OHn3LA4RzsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFinBtXUo1OytRoXDHeLaBSHYbfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDUzNDgwYzctMWNiNS0z NGVhLTliN2YtZDM4MDRlN2U5NjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgPAAqMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTUkFvIuMo7ZK9PdjWc0AgfaJz9ZHFv1PzagQAoTJ9dyVVXeATO OtJSieDYxruS+Dfhh5cYe/BxFMzZqrzMhzfj9cTAYHtUArgklsRxBbiszfjqyj50 eCEr52m4r75T1dAzvQzNcsmefIlFSDHG5qlh3NHPkwftf4E2XqIF6lru+i7RrKqU 79gstWPNE1nyp/Z0z8yp0Or4hVCLF5muUPSGQkUYAqMSkdEWIIZvEoTzh403285K Kii0Z4JZhBfx2cf+aLD77/l0WU/0MJYhAi/HgHYoEhWv0nsMmkjx0sLEtDUrj8+9 L2dwGNTKLacSWoosG2Tg3DnCP9bZjpLyoVI= -----END CERTIFICATE-----Generated at Wed May 13 05:22:57 2026 by rpki-client