$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3abd5b1-e87c-3505-b26a-e4acf0ac4d6f.roa File: d3abd5b1-e87c-3505-b26a-e4acf0ac4d6f.roa (raw, json) Hash identifier: iNKe8EIUxWyTtBxbt7Yt4uBr5QXqTMAVvLI2qn8NpXI= Subject key identifier: DC:78:A3:1B:A0:80:28:68:0A:0F:6A:16:A3:EE:14:B2:5E:27:AC:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D36B8F1A8E4DAF7288E85A280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3abd5b1-e87c-3505-b26a-e4acf0ac4d6f.roa Signing time: Wed 18 Mar 2026 22:27:52 +0000 ROA not before: Wed 18 Mar 2026 22:27:52 +0000 ROA not after: Tue 16 Jun 2026 22:27:52 +0000 asID: 54253 IP address blocks: 2600:200c::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:b8:f1:a8:e4:da:f7:28:8e:85:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 18 22:27:52 2026 GMT Not After : Jun 16 22:27:52 2026 GMT Subject: CN=6cc5fce6-6d9f-4e21-8a4c-1ea0a6c4ddca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:98:31:89:61:d9:60:62:b6:4b:60:83:c3: 96:e4:a3:39:fb:29:cf:8f:72:6d:0d:3d:4e:bf:ac: c8:b9:b6:fa:ae:77:27:3e:aa:a8:60:16:1b:23:01: 66:f2:d6:f3:62:42:11:23:ec:ab:4c:24:35:ef:9b: af:55:91:28:4a:7f:20:98:e3:cb:44:9a:e2:65:c0: b0:d3:14:46:b7:87:60:42:ea:2c:e0:17:ff:45:15: 14:81:d6:e3:40:6c:1d:50:74:d5:bb:69:3c:53:f8: 86:18:8e:2f:5f:40:43:07:4c:02:7e:15:be:85:b2: 81:13:47:22:62:f3:36:12:05:23:c1:11:4d:8e:d0: 19:e7:3a:3a:ec:c2:70:e8:71:49:74:54:a1:af:4c: 67:19:25:76:38:15:f0:d8:56:fb:8e:f7:b5:71:7a: 9c:62:74:ea:00:5c:02:31:0e:94:09:25:db:72:79: bf:bb:9c:2b:39:bb:12:e6:ae:97:86:a0:c7:65:a4: b8:1d:0b:6c:01:d1:a1:a3:1c:f5:b4:2a:af:6a:12: 77:d6:01:0c:66:f1:67:ca:27:71:a3:a9:19:15:5c: 07:04:19:85:bb:43:0d:f5:59:b6:5e:4c:8e:8d:38: af:22:58:c0:c1:b3:4f:08:99:f0:b3:a3:c2:c8:06: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:78:A3:1B:A0:80:28:68:0A:0F:6A:16:A3:EE:14:B2:5E:27:AC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3abd5b1-e87c-3505-b26a-e4acf0ac4d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2600:200c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cd:fb:03:f9:1d:31:0c:1c:16:2f:81:ea:01:9f:87:6d:3c: bf:6c:49:01:1d:f8:7c:50:dd:89:05:9c:b7:5a:37:30:3e:9f: d0:38:90:13:60:53:88:8d:7e:cc:e5:da:d2:57:07:2c:c9:c6: 77:46:62:26:b5:8b:1f:4b:f5:be:46:52:bb:ae:87:a6:20:3a: 6e:07:de:44:a3:a5:95:8c:a3:01:69:5b:88:e1:fc:c5:b9:00: bb:da:f1:04:72:ac:47:72:87:6c:de:0d:fd:4b:72:28:95:c8: 35:bf:33:8f:32:92:e4:37:65:44:4c:4e:57:cc:54:a3:8c:71: 8d:f4:63:54:cb:c3:0b:a0:b1:4f:43:85:eb:f1:5d:b1:15:be: d8:55:6f:14:2b:56:40:ad:18:48:be:03:42:48:10:67:b2:9b: 14:c1:7c:b2:dc:02:6b:2b:a0:04:0a:bc:48:4a:dc:ea:5d:40: 01:9b:ab:78:74:25:05:7d:1d:02:be:0d:95:5e:56:0a:ff:cf: d4:42:28:a5:f2:77:65:ae:24:6f:fe:87:d1:1f:e7:b4:89:93: 0b:26:05:01:78:1d:ac:1f:ee:4e:6e:0f:0e:94:13:07:80:74: 1a:88:e2:e3:23:44:1b:72:b8:8c:0e:b2:a9:b2:fb:6c:bd:46: de:de:43:85 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE02uPGo5Nr3KI6FooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxODIyMjc1MloXDTI2MDYxNjIyMjc1MlowLzEtMCsGA1UEAxMk NmNjNWZjZTYtNmQ5Zi00ZTIxLThhNGMtMWVhMGE2YzRkZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H+YMYlh2WBitktgg8OW5KM5+ynPj3JtDT1O v6zIubb6rncnPqqoYBYbIwFm8tbzYkIRI+yrTCQ175uvVZEoSn8gmOPLRJriZcCw 0xRGt4dgQuos4Bf/RRUUgdbjQGwdUHTVu2k8U/iGGI4vX0BDB0wCfhW+hbKBE0ci YvM2EgUjwRFNjtAZ5zo67MJw6HFJdFShr0xnGSV2OBXw2Fb7jve1cXqcYnTqAFwC MQ6UCSXbcnm/u5wrObsS5q6XhqDHZaS4HQtsAdGhoxz1tCqvahJ31gEMZvFnyidx o6kZFVwHBBmFu0MN9Vm2XkyOjTivIljAwbNPCJnws6PCyAa3twIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNx4oxuggChoCg9qFqPuFLJeJ6xhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDNhYmQ1YjEtZTg3Yy0z NTA1LWIyNmEtZTRhY2YwYWM0ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAgDAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQs37A/kdMQwcFi+B6gGfh208v2xJAR34fFDdiQWct1o3MD6f0DiQ E2BTiI1+zOXa0lcHLMnGd0ZiJrWLH0v1vkZSu66HpiA6bgfeRKOllYyjAWlbiOH8 xbkAu9rxBHKsR3KHbN4N/UtyKJXINb8zjzKS5DdlRExOV8xUo4xxjfRjVMvDC6Cx T0OF6/FdsRW+2FVvFCtWQK0YSL4DQkgQZ7KbFMF8stwCayugBAq8SErc6l1AAZur eHQlBX0dAr4NlV5WCv/P1EIopfJ3Za4kb/6H0R/ntImTCyYFAXgdrB/uTm4PDpQT B4B0Goji4yNEG3K4jA6yqbL7bL1G3t5DhQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:39:29 2026 by rpki-client