$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a1d515c-0f1f-302b-b55a-5a96f5c5b7c4.roa File: 8a1d515c-0f1f-302b-b55a-5a96f5c5b7c4.roa (raw, json) Hash identifier: H9c4Y5b1TiKyVXdH6bhtClW7Qx5/dP3WHJBOjt38oOs= Subject key identifier: BA:34:93:D3:8C:01:9C:F1:7F:04:35:3E:46:84:57:84:CE:DE:45:1B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D255AB96BF576A6C13408F4E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a1d515c-0f1f-302b-b55a-5a96f5c5b7c4.roa Signing time: Thu 12 Mar 2026 17:09:17 +0000 ROA not before: Thu 12 Mar 2026 17:09:17 +0000 ROA not after: Wed 10 Jun 2026 17:09:17 +0000 asID: 54253 IP address blocks: 2603:c0c8:1000::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:5a:b9:6b:f5:76:a6:c1:34:08:f4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 12 17:09:17 2026 GMT Not After : Jun 10 17:09:17 2026 GMT Subject: CN=7b8d800d-14b2-49ae-bd41-431bff75e1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:cc:cf:29:a8:9b:d7:44:88:cf:ea:dc:38: 50:33:c7:f9:29:f0:0a:34:e2:af:18:35:2b:22:60: ba:98:31:cd:cf:c2:a3:fa:99:99:fa:e8:fb:be:96: d2:1e:ad:3b:96:5c:53:28:5a:bf:83:d7:77:34:b8: 6b:39:71:03:21:b5:60:a5:2d:e5:55:35:d6:c6:b6: 47:09:bc:5d:34:b6:92:c1:47:40:3d:37:57:46:dc: 73:ee:75:40:fd:99:8e:f9:de:ea:fd:ba:23:9f:5f: ac:bf:da:bb:60:f4:1b:fc:7e:92:c2:29:71:6b:94: e4:ed:e3:99:0d:a8:43:be:9a:57:ab:ab:df:d4:12: 10:0e:c3:86:8c:6e:11:2d:43:3b:e5:0a:79:14:e9: f1:b4:5b:af:10:42:53:44:58:25:0c:fe:46:f2:e4: 51:03:ce:40:dc:a5:57:ac:d7:9e:47:29:40:6d:ac: 89:23:0d:68:fb:0b:f4:a7:22:b7:9f:79:ac:71:ce: e6:cc:76:5c:88:9c:78:7b:49:3e:12:68:1b:25:97: 22:4a:c7:78:6a:86:6e:d6:8a:d9:74:6a:d3:de:6e: fa:bc:2d:1d:90:03:7a:18:80:4e:ce:c9:a7:30:ea: 06:68:ce:f6:ff:40:e3:d3:7a:65:d2:70:e2:bc:78: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:93:D3:8C:01:9C:F1:7F:04:35:3E:46:84:57:84:CE:DE:45:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a1d515c-0f1f-302b-b55a-5a96f5c5b7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0c8:1000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a9:51:e0:ab:65:66:99:bc:cb:16:9c:62:c1:f2:87:01:78: 1a:21:dd:cd:90:3a:09:ca:91:70:1f:71:ae:4d:4e:15:fe:90: 8a:4a:aa:19:c0:44:7b:eb:18:8d:db:7c:f2:34:98:3f:d6:9c: 64:74:f6:23:21:ec:9e:7e:ed:c2:4f:b2:b3:48:00:12:90:f3: 86:4d:30:09:d1:07:bb:d3:3d:30:ad:56:56:70:55:dc:42:04: d5:8b:b1:06:46:fe:a0:fa:22:64:37:3e:2a:b4:0b:a2:3e:05: df:82:61:9c:2c:74:d5:eb:60:61:21:73:1e:7c:04:49:9f:d8: b3:bf:32:87:f6:a8:42:57:49:be:16:db:18:a2:27:7b:f3:fc: 6e:30:10:9d:c0:d2:34:6f:d8:2a:b4:71:b6:40:2a:1c:91:f2: dd:11:9f:1a:42:08:f8:54:9b:ce:f0:11:ca:12:00:48:c7:e0: 14:d9:01:1d:2b:2a:7a:7c:9e:1c:94:9b:3c:84:19:47:2b:f2: 34:ca:c8:27:ba:41:a5:b9:af:9c:5b:cc:7f:4a:a0:3a:17:ad: f8:18:e7:2d:b7:45:5c:b2:c3:01:02:f9:cc:8b:83:8a:5d:50: cf:92:f8:d6:c5:79:6f:68:b2:c1:59:be:4e:ec:e8:20:eb:5c: 4d:4e:f9:85 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0lWrlr9XamwTQI9OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxMjE3MDkxN1oXDTI2MDYxMDE3MDkxN1owLzEtMCsGA1UEAxMk N2I4ZDgwMGQtMTRiMi00OWFlLWJkNDEtNDMxYmZmNzVlMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfbMzymom9dEiM/q3DhQM8f5KfAKNOKvGDUr ImC6mDHNz8Kj+pmZ+uj7vpbSHq07llxTKFq/g9d3NLhrOXEDIbVgpS3lVTXWxrZH CbxdNLaSwUdAPTdXRtxz7nVA/ZmO+d7q/bojn1+sv9q7YPQb/H6Swilxa5Tk7eOZ DahDvppXq6vf1BIQDsOGjG4RLUM75Qp5FOnxtFuvEEJTRFglDP5G8uRRA85A3KVX rNeeRylAbayJIw1o+wv0pyK3n3mscc7mzHZciJx4e0k+EmgbJZciSsd4aoZu1orZ dGrT3m76vC0dkAN6GIBOzsmnMOoGaM72/0Dj03pl0nDivHg5KwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLo0k9OMAZzxfwQ1PkaEV4TO3kUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGExZDUxNWMtMGYxZi0z MDJiLWI1NWEtNWE5NmY1YzViN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAyBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW6lR4KtlZpm8yxacYsHyhwF4GiHdzZA6CcqRcB9xrk1OFf6Qikqq GcBEe+sYjdt88jSYP9acZHT2IyHsnn7twk+ys0gAEpDzhk0wCdEHu9M9MK1WVnBV 3EIE1YuxBkb+oPoiZDc+KrQLoj4F34JhnCx01etgYSFzHnwESZ/Ys78yh/aoQldJ vhbbGKIne/P8bjAQncDSNG/YKrRxtkAqHJHy3RGfGkII+FSbzvARyhIASMfgFNkB HSsqenyeHJSbPIQZRyvyNMrIJ7pBpbmvnFvMf0qgOhet+BjnLbdFXLLDAQL5zIuD il1Qz5L41sV5b2iywVm+TuzoIOtcTU75hQ== -----END CERTIFICATE-----Generated at Thu Mar 26 22:47:23 2026 by rpki-client