$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa File: ffcf3028-3ee2-3714-a697-77e69a103ad2.roa (raw, json) Hash identifier: UULb6ULBZDCxX6wq9iT45p2ykrUcSvQWWDLEo+KF7bo= Subject key identifier: 5D:13:DA:99:EC:73:58:DB:80:5C:D2:66:68:2E:4B:4D:B5:17:B1:98 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E4FF815917820F387D7ED14 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 2603:c002:3300::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:4f:f8:15:91:78:20:f3:87:d7:ed:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=e75e162f-fb36-41ae-84a5-ccf75512b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:d3:59:3e:0f:0f:29:87:6a:26:04:5e:b5: a9:15:77:0b:32:83:12:7f:bd:e1:18:85:ba:59:77: f8:ab:f8:88:54:67:93:c3:f2:45:5f:ef:c9:0e:02: df:46:6c:76:4d:c6:b1:35:67:bf:59:04:ec:36:a3: ca:3c:85:6f:04:b0:69:cf:b9:38:b9:c4:43:b2:de: 2e:29:5f:8f:40:4c:63:f5:59:45:4e:8c:b2:1e:09: dc:a5:4c:db:f2:9e:01:1c:b8:e9:7b:d3:b7:5d:7d: 8e:1f:f6:70:91:4d:55:9f:7e:1e:bb:3e:65:ba:52: b2:c1:7f:bf:74:49:82:de:e4:61:ea:e4:ff:67:7a: 13:a4:92:33:b9:f8:8d:18:b9:75:f1:0f:72:fc:6e: 53:d0:14:10:5b:38:4a:13:91:7e:1e:a9:9d:e8:35: 8b:36:7d:1e:a8:8d:02:ae:79:2e:41:0d:97:59:e8: 51:27:17:ed:08:fa:94:e3:a2:2a:82:b8:a2:61:c2: 2d:b8:3f:98:7a:cc:89:65:d2:03:83:06:4b:15:19: 4f:99:97:89:42:6b:54:21:16:49:d7:eb:83:f3:ba: af:d9:f6:59:4f:af:68:ff:14:d1:06:1a:ef:e5:ef: 96:a8:38:42:e1:81:bd:11:8c:f9:98:cf:94:d4:08: 08:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:13:DA:99:EC:73:58:DB:80:5C:D2:66:68:2E:4B:4D:B5:17:B1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ffcf3028-3ee2-3714-a697-77e69a103ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c002:3300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:89:ce:de:ed:fe:b7:09:f7:da:95:b2:ef:0e:c5:a9:75:06: 2e:2e:43:cf:fc:fb:8d:a0:82:28:02:04:4a:80:0d:6a:2f:75: d7:5a:e5:8e:b3:c7:1d:0b:70:ab:02:04:f8:98:a8:05:8f:ad: a3:a2:0a:4f:b4:48:86:db:b1:9e:c9:a3:78:e9:9b:32:f0:e7: 3f:e6:42:e8:5b:a8:ef:1c:eb:ae:7b:75:3e:dc:5e:82:03:cd: 63:8d:1f:75:1a:f3:34:b1:40:9f:ab:ce:51:e4:31:ad:58:00: 91:47:a8:e1:6c:97:33:5a:fa:1c:cd:f3:2a:0f:b6:cb:65:de: eb:bd:3f:2d:a3:11:7a:a6:bd:22:2e:77:92:c8:32:97:4c:ff: 67:72:ad:59:fe:3b:3a:1f:8f:4e:12:42:80:7d:ba:39:1a:6e: d8:5e:55:77:aa:c5:e2:f5:34:0d:42:65:28:40:6f:0e:40:b7: 68:3a:3d:07:49:32:20:a2:2b:ac:4f:c2:52:d6:23:17:10:5f: 26:9f:61:d0:e7:e0:89:a9:86:1e:24:67:73:c1:e5:85:8f:b0: 09:ad:86:c3:de:f0:50:03:5a:84:26:4b:b5:cd:61:56:f4:42: b2:44:d7:e6:36:7c:ae:59:3a:b5:ea:43:42:46:4c:2b:28:97: 92:be:ca:11 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2eT/gVkXgg84fX7RQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTc1ZTE2MmYtZmIzNi00MWFlLTg0YTUtY2NmNzU1MTJiOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+HTWT4PDymHaiYEXrWpFXcLMoMSf73hGIW6 WXf4q/iIVGeTw/JFX+/JDgLfRmx2TcaxNWe/WQTsNqPKPIVvBLBpz7k4ucRDst4u KV+PQExj9VlFToyyHgncpUzb8p4BHLjpe9O3XX2OH/ZwkU1Vn34euz5lulKywX+/ dEmC3uRh6uT/Z3oTpJIzufiNGLl18Q9y/G5T0BQQWzhKE5F+Hqmd6DWLNn0eqI0C rnkuQQ2XWehRJxftCPqU46IqgriiYcItuD+YesyJZdIDgwZLFRlPmZeJQmtUIRZJ 1+uD87qv2fZZT69o/xTRBhrv5e+WqDhC4YG9EYz5mM+U1AgIowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF0T2pnsc1jbgFzSZmguS021F7GYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmZjZjMwMjgtM2VlMi0z NzE0LWE2OTctNzdlNjlhMTAzYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAjMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh4nO3u3+twn32pWy7w7FqXUGLi5Dz/z7jaCCKAIESoANai9111rl jrPHHQtwqwIE+JioBY+to6IKT7RIhtuxnsmjeOmbMvDnP+ZC6Fuo7xzrrnt1Ptxe ggPNY40fdRrzNLFAn6vOUeQxrVgAkUeo4WyXM1r6HM3zKg+2y2Xe670/LaMReqa9 Ii53ksgyl0z/Z3KtWf47Oh+PThJCgH26ORpu2F5Vd6rF4vU0DUJlKEBvDkC3aDo9 B0kyIKIrrE/CUtYjFxBfJp9h0OfgiamGHiRnc8HlhY+wCa2Gw97wUANahCZLtc1h VvRCskTX5jZ8rlk6tepDQkZMKyiXkr7KEQ== -----END CERTIFICATE-----Generated at Wed May 13 05:21:27 2026 by rpki-client