$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a916d406-3990-3013-9f15-bb7f41efb9c3.roa File: a916d406-3990-3013-9f15-bb7f41efb9c3.roa (raw, json) Hash identifier: FvGdu8Kx+8M+RZnbCK0w47jnXnmV6P0A0+aLo6wuVu0= Subject key identifier: C7:4A:B0:AC:6A:8D:90:BD:17:E6:63:E0:82:90:C3:60:59:7C:E5:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF56BA94CC929B5883920C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a916d406-3990-3013-9f15-bb7f41efb9c3.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 2603:c010:8000::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6b:a9:4c:c9:29:b5:88:39:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=00a4e663-a4a0-4e7c-9795-861fea28725f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:88:57:93:d0:7c:5b:f4:97:36:a3:8e:17: ad:bf:b1:6a:fc:b1:76:28:84:de:c0:10:d6:78:d8: db:65:63:09:10:6a:ae:08:2b:b6:3e:e0:61:42:0b: 54:b6:2e:92:a3:d9:81:f3:f9:53:e6:45:12:a5:af: b2:61:8d:fa:e8:19:5f:7a:5d:98:3b:e2:c2:43:25: 96:8e:8c:ac:3f:13:38:a0:7b:83:ba:5b:54:f7:df: 56:82:52:d8:5a:a0:02:cc:54:5d:0e:c3:17:fc:0f: 63:e6:95:4c:a7:32:04:69:21:d8:67:3d:fa:ea:5b: 6d:7b:9c:00:71:72:54:32:f8:9d:ad:5b:af:95:3b: 5d:2e:2b:e3:a1:e8:ce:bb:3b:9d:b9:c9:f4:ce:99: 2a:58:52:bc:9e:a2:ab:95:67:2c:f5:aa:cb:ec:45: 65:2d:1c:e8:6c:a8:59:d3:e9:8e:01:03:97:bd:b5: 95:a0:b3:83:a4:1b:19:5c:8f:8a:0e:5f:0c:e7:95: 15:0d:2b:7a:a9:59:89:28:2b:ab:52:e4:31:68:25: 5b:1a:df:a4:c5:f5:1d:5c:14:fc:51:37:bf:40:f5: 51:cd:6d:e1:74:04:c5:0f:4e:2a:63:ef:0d:38:ad: 2e:90:0a:78:09:64:ec:84:d2:c1:af:5d:1c:95:a0: 1a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4A:B0:AC:6A:8D:90:BD:17:E6:63:E0:82:90:C3:60:59:7C:E5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a916d406-3990-3013-9f15-bb7f41efb9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c010:8000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9d:51:b6:40:d8:48:72:d0:30:4a:62:dc:3d:76:ff:35:bb: 1d:01:a2:e3:9d:11:24:6f:ad:1d:aa:05:72:00:a4:7c:51:42: c7:2f:77:ca:59:ac:85:e8:ac:69:64:04:f2:49:48:31:49:7c: 5e:28:c4:1a:b3:7e:56:d9:62:4a:7e:5b:42:56:cf:7d:69:45: ce:b3:2f:27:af:8f:27:8c:93:c6:74:98:25:d7:03:69:15:f5: de:ea:2c:49:e4:be:8e:0f:7e:97:1c:8a:4e:a9:23:d7:ce:62: 03:f5:fb:ee:56:be:57:7f:2e:40:63:79:17:61:5c:25:3c:79: ed:be:0d:ea:79:f0:bd:b8:83:ae:5d:ab:63:cd:52:70:c7:a0: 63:2a:76:99:8a:d5:c6:7c:80:ea:3a:d2:05:cf:23:4e:38:b8: bc:f7:3d:f7:55:af:3d:cc:00:f5:f3:94:6c:9c:d4:6c:b8:ad: d8:8b:7a:ad:ae:8e:b0:ac:e6:fb:f5:f2:38:ea:19:6c:50:ed: c0:d7:d8:13:d1:25:d0:f2:52:05:4c:5b:4c:77:93:96:79:73: 7f:2a:21:ab:93:32:6b:5b:73:75:9d:35:46:c5:9b:9b:48:f3: a6:dc:74:aa:e4:d3:00:13:df:54:98:3b:79:20:26:6e:a2:8a: 8c:e7:df:20 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O9WupTMkptYg5IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDBhNGU2NjMtYTRhMC00ZTdjLTk3OTUtODYxZmVhMjg3MjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKOIV5PQfFv0lzajjhetv7Fq/LF2KITewBDW eNjbZWMJEGquCCu2PuBhQgtUti6So9mB8/lT5kUSpa+yYY366Blfel2YO+LCQyWW joysPxM4oHuDultU999WglLYWqACzFRdDsMX/A9j5pVMpzIEaSHYZz366ltte5wA cXJUMvidrVuvlTtdLivjoejOuzuducn0zpkqWFK8nqKrlWcs9arL7EVlLRzobKhZ 0+mOAQOXvbWVoLODpBsZXI+KDl8M55UVDSt6qVmJKCurUuQxaCVbGt+kxfUdXBT8 UTe/QPVRzW3hdATFD04qY+8NOK0ukAp4CWTshNLBr10claAaywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMdKsKxqjZC9F+Zj4IKQw2BZfOWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTkxNmQ0MDYtMzk5MC0z MDEzLTlmMTUtYmI3ZjQxZWZiOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgPAEIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKp1RtkDYSHLQMEpi3D12/zW7HQGi450RJG+tHaoFcgCkfFFCxy93 ylmsheisaWQE8klIMUl8XijEGrN+VtliSn5bQlbPfWlFzrMvJ6+PJ4yTxnSYJdcD aRX13uosSeS+jg9+lxyKTqkj185iA/X77la+V38uQGN5F2FcJTx57b4N6nnwvbiD rl2rY81ScMegYyp2mYrVxnyA6jrSBc8jTji4vPc991WvPcwA9fOUbJzUbLit2It6 ra6OsKzm+/XyOOoZbFDtwNfYE9El0PJSBUxbTHeTlnlzfyohq5Mya1tzdZ01RsWb m0jzptx0quTTABPfVJg7eSAmbqKKjOffIA== -----END CERTIFICATE-----Generated at Wed May 13 11:41:18 2026 by rpki-client