$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa File: c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa (raw, json) Hash identifier: 5fGEa/e71XXjPHacUuWmWxJZaXo4Hz7eIESIUWEAEFM= Subject key identifier: C9:E9:F8:91:D3:4B:EC:82:08:C6:4B:9A:C4:47:74:DC:32:39:85:24 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9FB55BC51F3459ABBD821700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 2600:2000:2130::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:5b:c5:1f:34:59:ab:bd:82:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=1567a6bc-59a8-454d-ae5b-c92487e73a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:cb:68:4d:75:33:a7:08:37:89:83:e8:6e: 5b:f5:dc:db:be:b8:28:85:3b:2d:95:af:22:a4:b0: ee:ab:90:68:55:e0:28:0d:95:db:3f:4c:b3:e7:b6: 9f:e0:7b:58:19:9c:e3:7a:a9:49:2c:fa:2b:80:ab: cc:a4:72:8d:00:56:2f:85:21:04:cc:b6:b6:d0:42: 84:44:b9:a2:74:18:98:1c:8d:db:4d:d0:ee:e3:85: fc:ee:f6:74:e5:17:bb:ac:02:5d:0d:a3:97:38:52: 41:7b:19:03:6a:99:34:99:b9:9b:16:d3:b5:f6:64: bc:cc:94:4e:1b:9c:9a:d2:37:3c:34:0e:0e:14:f6: e0:5a:07:f6:60:83:b2:d2:28:f3:15:de:36:c9:ff: b6:c3:35:9e:70:9c:a2:75:e1:01:3f:22:7b:c8:57: c9:28:cd:fd:f5:48:76:21:f8:e3:7d:a9:06:ee:62: 7e:39:e5:17:9f:ce:b2:16:ba:30:39:dd:ff:7d:32: b5:a2:29:31:89:ba:6f:91:c6:4e:c7:ee:ab:9e:03: 75:3c:4b:31:2f:33:74:df:e3:20:bf:cd:f8:0c:e2: 5f:06:e9:3f:bc:f3:03:4b:b4:d8:4c:72:0a:03:f5: 1a:dc:bb:ab:a8:78:11:39:0c:c0:fb:ae:27:63:c9: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E9:F8:91:D3:4B:EC:82:08:C6:4B:9A:C4:47:74:DC:32:39:85:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c8aa9859-e3ba-3bf4-ba37-51d10c798d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:2000:2130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:61:c0:5a:fe:3c:0a:35:05:a3:b2:bf:6a:01:74:11:88:67: 98:44:b9:77:62:28:24:05:aa:bb:20:26:fc:80:95:19:56:39: c1:36:28:1c:58:92:52:f4:7a:11:7f:df:d8:e0:4f:4c:a7:02: e9:71:1e:9c:fa:57:1b:9a:fe:23:6f:a0:ce:e7:50:62:33:0f: 53:57:5f:86:da:4d:63:a4:99:3c:8f:17:36:b1:1e:7f:54:8a: e9:1d:c7:c7:c0:44:df:e5:2e:96:26:90:32:0e:32:21:04:e7: d6:bf:58:ad:69:1b:7f:ea:51:41:d4:e6:10:78:c5:1c:b2:3c: 39:08:cb:52:ad:0f:28:8d:bc:ae:28:a5:38:12:17:af:5a:de: 9b:33:99:b9:6b:5e:4b:63:1a:02:c4:0b:d5:d7:2d:aa:7f:7a: 97:96:23:c2:d4:0e:92:a4:01:46:e4:26:be:00:8e:0d:25:6e: bd:d9:4a:e5:c2:86:82:19:8d:7c:a0:8b:19:96:72:5b:b0:72: 3d:4f:95:f1:0d:33:db:c2:44:eb:e9:09:c4:1a:1f:9f:f6:57: 87:65:8c:07:21:fe:e5:6f:01:d2:a1:26:b8:3c:32:79:90:a0: 4f:0f:d9:ae:0f:91:20:86:66:06:8a:e4:7c:52:50:1c:22:af: 7d:3e:4a:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2ftVvFHzRZq72CFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk MTU2N2E2YmMtNTlhOC00NTRkLWFlNWItYzkyNDg3ZTczYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM/LaE11M6cIN4mD6G5b9dzbvrgohTstla8i pLDuq5BoVeAoDZXbP0yz57af4HtYGZzjeqlJLPorgKvMpHKNAFYvhSEEzLa20EKE RLmidBiYHI3bTdDu44X87vZ05Re7rAJdDaOXOFJBexkDapk0mbmbFtO19mS8zJRO G5ya0jc8NA4OFPbgWgf2YIOy0ijzFd42yf+2wzWecJyideEBPyJ7yFfJKM399Uh2 IfjjfakG7mJ+OeUXn86yFrowOd3/fTK1oikxibpvkcZOx+6rngN1PEsxLzN03+Mg v834DOJfBuk/vPMDS7TYTHIKA/Ua3LurqHgROQzA+64nY8l0rQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnp+JHTS+yCCMZLmsRHdNwyOYUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzhhYTk4NTktZTNiYS0z YmY0LWJhMzctNTFkMTBjNzk4ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAgACEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC9hwFr+PAo1BaOyv2oBdBGIZ5hEuXdiKCQFqrsgJvyAlRlWOcE2 KBxYklL0ehF/39jgT0ynAulxHpz6Vxua/iNvoM7nUGIzD1NXX4baTWOkmTyPFzax Hn9Uiukdx8fARN/lLpYmkDIOMiEE59a/WK1pG3/qUUHU5hB4xRyyPDkIy1KtDyiN vK4opTgSF69a3pszmblrXktjGgLEC9XXLap/epeWI8LUDpKkAUbkJr4Ajg0lbr3Z SuXChoIZjXygixmWcluwcj1PlfENM9vCROvpCcQaH5/2V4dljAch/uVvAdKhJrg8 MnmQoE8P2a4PkSCGZgaK5HxSUBwir30+Sgk= -----END CERTIFICATE-----Generated at Wed May 13 06:52:06 2026 by rpki-client