$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cd70602-ae95-364c-aea2-318c0ff46e3f.roa File: 8cd70602-ae95-364c-aea2-318c0ff46e3f.roa (raw, json) Hash identifier: L1OAsLigTW4vBuvw7cVACeutGW7XJmEdPbBuAA4aEvY= Subject key identifier: EC:A9:02:03:1E:30:1A:D9:57:E2:A8:1E:16:7C:63:18:3A:99:00:9D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC540436AEB8C39998DB700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cd70602-ae95-364c-aea2-318c0ff46e3f.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 2603:c000:500::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:40:43:6a:eb:8c:39:99:8d:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=58e9a2ca-6f38-4a85-88f2-f2ecd820f24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:bc:90:f1:c4:41:a9:c1:2b:60:a0:bc:e4: 95:ca:89:b4:a7:04:87:e8:67:47:7a:41:8a:50:84: 50:dd:28:0c:98:4c:e4:5e:26:88:6f:4e:70:1b:52: 90:a2:2d:f9:05:6e:27:ac:96:62:ac:0d:d1:2c:95: 53:63:58:e8:b8:73:a7:d4:0d:89:b5:cf:95:1d:de: 2b:d9:a7:59:0f:f6:d6:64:26:c8:0c:77:4b:55:41: 7d:c2:2c:5d:59:55:41:6b:7b:ee:74:d0:80:94:a6: 5b:36:fe:69:49:23:50:f2:e4:34:95:d5:a9:de:32: c2:64:98:c2:d9:17:8c:2a:ba:06:02:96:02:e4:d6: 68:40:e5:8b:8f:99:b1:a4:7f:9a:26:87:d3:1e:5f: 5b:23:c5:b9:8e:d3:cb:8c:84:f1:3b:32:8b:ac:25: bd:fb:99:e3:d4:2b:da:64:18:9e:d1:02:1b:38:2e: b7:c7:78:55:4f:c6:43:c5:e8:74:7d:54:41:30:cd: 69:5d:b0:8f:79:ab:e5:07:0c:83:89:27:3e:fc:d5: 01:6f:fb:e0:2f:1c:f9:e3:7b:ec:0e:8c:d9:63:96: 7e:a2:66:e7:3b:d2:5d:6d:bd:71:14:7d:94:7e:48: b1:e4:65:94:8e:9d:19:df:42:62:33:a3:94:89:66: e0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A9:02:03:1E:30:1A:D9:57:E2:A8:1E:16:7C:63:18:3A:99:00:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8cd70602-ae95-364c-aea2-318c0ff46e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:de:fc:27:27:11:01:c5:de:58:51:17:99:4d:dd:21:b7:1e: dc:0b:30:6c:19:a7:d8:a6:16:50:05:c7:12:6d:9f:f6:a4:96: 17:49:8e:d5:43:ab:50:82:94:04:07:55:e5:8e:d3:08:ab:b0: 36:03:14:3b:08:6f:a4:a3:1a:44:a8:2c:fc:6d:54:4d:7f:b1: 7a:b0:4a:01:fb:a9:95:2a:b9:bf:e4:64:68:6a:65:45:20:45: d4:d5:55:41:6e:bf:9a:86:36:c8:84:8e:56:96:27:98:74:db: 5e:f2:fc:dd:fa:ac:a6:fd:b7:d4:21:5b:24:6e:56:98:07:6d: 1a:a9:77:3e:3b:c9:1f:2b:02:25:5f:a9:7c:6f:65:43:b5:2b: cd:4e:1b:ae:b9:31:f7:e9:a6:b1:d3:a6:21:d0:5b:6b:b4:7a: ca:be:26:e9:dc:14:09:0c:cb:4d:20:a5:1e:c1:03:b1:b5:47: 51:0b:f8:57:b3:2f:de:40:31:91:69:2a:60:25:ca:c4:3f:3b: 8a:88:13:34:70:22:3e:73:56:bb:f3:bd:59:ea:99:c1:5b:5d: a3:d0:83:30:c9:0e:56:3e:f1:26:c5:b1:e5:a8:8b:4d:0e:af: 84:90:12:24:45:19:ea:dc:d8:b8:4b:2a:0e:30:c8:20:d8:33: 3f:b8:9b:39 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2KxUBDauuMOZmNtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NThlOWEyY2EtNmYzOC00YTg1LTg4ZjItZjJlY2Q4MjBmMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRi8kPHEQanBK2CgvOSVyom0pwSH6GdHekGK UIRQ3SgMmEzkXiaIb05wG1KQoi35BW4nrJZirA3RLJVTY1jouHOn1A2Jtc+VHd4r 2adZD/bWZCbIDHdLVUF9wixdWVVBa3vudNCAlKZbNv5pSSNQ8uQ0ldWp3jLCZJjC 2ReMKroGApYC5NZoQOWLj5mxpH+aJofTHl9bI8W5jtPLjITxOzKLrCW9+5nj1Cva ZBie0QIbOC63x3hVT8ZDxeh0fVRBMM1pXbCPeavlBwyDiSc+/NUBb/vgLxz543vs DozZY5Z+ombnO9Jdbb1xFH2Ufkix5GWUjp0Z30JiM6OUiWbgAQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOypAgMeMBrZV+KoHhZ8Yxg6mQCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGNkNzA2MDItYWU5NS0z NjRjLWFlYTItMzE4YzBmZjQ2ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAAUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhd78JycRAcXeWFEXmU3dIbce3AswbBmn2KYWUAXHEm2f9qSWF0mO 1UOrUIKUBAdV5Y7TCKuwNgMUOwhvpKMaRKgs/G1UTX+xerBKAfuplSq5v+RkaGpl RSBF1NVVQW6/moY2yISOVpYnmHTbXvL83fqspv231CFbJG5WmAdtGql3PjvJHysC JV+pfG9lQ7UrzU4brrkx9+mmsdOmIdBba7R6yr4m6dwUCQzLTSClHsEDsbVHUQv4 V7Mv3kAxkWkqYCXKxD87iogTNHAiPnNWu/O9WeqZwVtdo9CDMMkOVj7xJsWx5aiL TQ6vhJASJEUZ6tzYuEsqDjDIINgzP7ibOQ== -----END CERTIFICATE-----Generated at Wed May 13 09:29:37 2026 by rpki-client