$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f556332-1a60-3424-a368-c13473db3c26.roa File: 7f556332-1a60-3424-a368-c13473db3c26.roa (raw, json) Hash identifier: 8Dg/Omo2iDFLsQhgMqwkYTXXe3aszbtECQ34hSIVWIY= Subject key identifier: 97:39:82:64:FA:12:37:A2:DC:E8:A9:72:03:28:61:FD:00:D0:5B:66 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D25B80250A3B2EBE828F478E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f556332-1a60-3424-a368-c13473db3c26.roa Signing time: Thu 12 Mar 2026 20:17:14 +0000 ROA not before: Thu 12 Mar 2026 20:17:14 +0000 ROA not after: Wed 10 Jun 2026 20:17:14 +0000 asID: 54253 IP address blocks: 2603:c09c:2100::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:b8:02:50:a3:b2:eb:e8:28:f4:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 12 20:17:14 2026 GMT Not After : Jun 10 20:17:14 2026 GMT Subject: CN=2e1d23dc-07f5-4023-b67e-086e2b5905b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:56:92:21:ef:cb:b4:fb:f5:27:c5:c1:62: ce:2f:06:88:5b:98:01:4c:04:eb:61:23:a8:e0:da: 00:57:33:cf:4c:1c:d5:ed:73:5d:a7:37:3a:bd:18: 61:c2:3e:2b:86:c2:92:b9:1d:34:78:2e:84:eb:4f: c9:8e:43:7e:de:22:ab:a7:4e:d6:ce:90:c9:27:e7: f7:e9:ae:07:8a:3f:b4:d8:5b:f7:8f:ff:c5:dc:06: 3f:4d:02:ff:b3:4f:cf:48:5c:46:67:43:a5:bd:84: 34:37:85:fa:a1:72:38:13:20:90:82:68:cc:56:b2: 54:fb:d2:5d:a6:b7:3f:77:04:98:8e:92:3d:58:a2: bf:5a:26:be:f6:b5:ca:a6:f7:65:d0:3c:91:a8:88: 0b:8c:65:64:72:cf:6a:11:c3:92:6a:c9:1f:0c:45: e8:32:67:21:c0:47:79:7e:33:f6:7b:fd:d2:14:99: 70:3a:ad:ad:13:55:73:0e:99:e1:3d:34:62:0d:7c: 74:d7:c2:7b:ce:1f:03:0b:e4:1c:9c:56:c4:95:51: 98:46:fc:22:69:d3:87:21:e7:53:86:f4:e6:86:0e: 98:29:0f:56:d7:99:43:aa:aa:70:1b:11:88:be:2e: c6:ad:32:34:1e:af:6a:c2:33:02:aa:fe:dd:94:bb: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:39:82:64:FA:12:37:A2:DC:E8:A9:72:03:28:61:FD:00:D0:5B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f556332-1a60-3424-a368-c13473db3c26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c09c:2100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ec:87:51:78:95:b9:d1:51:aa:d0:2e:b5:da:d8:55:f1:d0: 6b:68:43:52:76:88:47:53:7c:c8:27:44:b9:a3:38:1b:da:23: ce:fa:36:be:d7:3c:d0:92:36:e2:c7:e1:db:83:52:d4:5f:5c: c3:49:15:e9:16:3a:98:35:4d:2e:bd:38:26:7c:82:aa:2b:c9: 47:c7:90:19:9c:46:0e:ea:83:7f:db:54:5f:c3:a6:59:89:5b: c3:a4:81:95:99:96:ba:b3:bb:a6:18:2c:c4:4d:60:2e:d8:4d: 11:7b:da:2e:15:5f:03:54:55:52:be:03:eb:06:52:bb:dd:a3: 54:fb:a4:8a:5a:ec:cf:51:50:40:99:d1:0a:a2:c3:5f:6e:dc: 75:8e:9f:8d:3d:43:66:9b:dc:dd:c5:04:33:44:37:3d:8f:85: 20:7a:1d:d0:26:08:7e:ce:82:79:e8:f8:71:d8:2b:2a:27:6c: e9:9a:1c:70:22:b3:98:16:b2:e0:9f:c5:f1:28:bf:22:d7:68: d0:4f:dc:31:31:17:05:7c:2b:32:e1:10:87:3d:06:6a:1b:43: c1:34:9e:c7:8c:f9:8e:eb:49:9b:15:f9:ed:52:b9:da:32:1f: 82:b1:71:1c:34:5f:f8:17:bf:c5:8a:f2:ae:bc:14:58:80:91: d8:60:99:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0luAJQo7Lr6Cj0eOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxMjIwMTcxNFoXDTI2MDYxMDIwMTcxNFowLzEtMCsGA1UEAxMk MmUxZDIzZGMtMDdmNS00MDIzLWI2N2UtMDg2ZTJiNTkwNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmFWkiHvy7T79SfFwWLOLwaIW5gBTATrYSOo 4NoAVzPPTBzV7XNdpzc6vRhhwj4rhsKSuR00eC6E60/JjkN+3iKrp07WzpDJJ+f3 6a4Hij+02Fv3j//F3AY/TQL/s0/PSFxGZ0OlvYQ0N4X6oXI4EyCQgmjMVrJU+9Jd prc/dwSYjpI9WKK/Wia+9rXKpvdl0DyRqIgLjGVkcs9qEcOSaskfDEXoMmchwEd5 fjP2e/3SFJlwOq2tE1VzDpnhPTRiDXx018J7zh8DC+QcnFbElVGYRvwiadOHIedT hvTmhg6YKQ9W15lDqqpwGxGIvi7GrTI0Hq9qwjMCqv7dlLsK0QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJc5gmT6Ejei3OipcgMoYf0A0FtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2Y1NTYzMzItMWE2MC0z NDI0LWEzNjgtYzEzNDczZGIzYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAnCEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAF+yHUXiVudFRqtAutdrYVfHQa2hDUnaIR1N8yCdEuaM4G9ojzvo2 vtc80JI24sfh24NS1F9cw0kV6RY6mDVNLr04JnyCqivJR8eQGZxGDuqDf9tUX8Om WYlbw6SBlZmWurO7phgsxE1gLthNEXvaLhVfA1RVUr4D6wZSu92jVPukilrsz1FQ QJnRCqLDX27cdY6fjT1DZpvc3cUEM0Q3PY+FIHod0CYIfs6Ceej4cdgrKids6Zoc cCKzmBay4J/F8Si/Itdo0E/cMTEXBXwrMuEQhz0GahtDwTSex4z5jutJmxX57VK5 2jIfgrFxHDRf+Be/xYryrrwUWICR2GCZ5Q== -----END CERTIFICATE-----Generated at Thu Mar 26 18:42:29 2026 by rpki-client