$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2328ef54-a563-3592-82fc-a414dd746420.roa File: 2328ef54-a563-3592-82fc-a414dd746420.roa (raw, json) Hash identifier: BUqy8apxcZHmUTBeuX/IivwTFMmMBahEbux6aqiGDW8= Subject key identifier: 22:B2:17:72:78:FD:33:82:C5:43:1C:81:AE:E4:83:34:40:1B:B2:69 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A81E27BFBCA32B9D4CEC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2328ef54-a563-3592-82fc-a414dd746420.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 2603:c024:8000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:81:e2:7b:fb:ca:32:b9:d4:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=7f35622d-c182-4da6-914b-beb43edc6fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f1:53:55:22:12:3b:f4:06:9f:1c:9d:1f:54: 2f:dd:2f:9d:e1:82:4f:1d:32:5e:5b:8c:0f:c2:79: 5d:21:a6:cc:76:9d:bf:01:f3:0c:84:52:9a:f6:1f: e9:b8:d0:37:25:9b:fd:96:1b:82:2c:47:11:2c:9b: 3b:48:ad:c2:6c:4b:f1:2d:7a:89:f5:34:63:e5:e2: d8:8c:18:2e:50:38:52:7a:d5:5c:1b:13:ad:93:95: e3:cf:ca:cb:80:11:1d:4d:a5:3c:00:80:2d:2c:42: 42:7b:a5:47:83:a4:a3:91:7d:c7:46:60:80:cd:f8: 38:70:ef:7c:eb:43:42:ad:ae:9d:1f:e0:82:c5:c1: 46:a3:ab:46:6f:aa:82:cb:55:8e:1a:a2:03:db:8d: 9d:b7:97:7f:19:23:c1:0e:0a:f0:09:33:4a:51:73: 98:40:4a:93:06:d1:e8:68:6e:a7:fb:b3:f0:86:7c: 71:37:5f:d8:4b:c0:26:17:24:73:5f:90:d5:df:7e: 2e:2d:b0:c3:ba:49:c9:d6:47:b8:01:08:82:f9:9e: e7:6b:86:71:07:d2:17:a5:13:38:b1:9f:73:75:24: 04:ad:80:5f:72:4c:b3:c8:8d:b0:c5:28:4c:74:2a: c2:92:7d:ae:4a:cb:cc:1e:ee:c2:6b:e3:da:db:42: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B2:17:72:78:FD:33:82:C5:43:1C:81:AE:E4:83:34:40:1B:B2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2328ef54-a563-3592-82fc-a414dd746420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c024:8000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2d:43:51:06:98:92:77:0d:6f:f4:92:4e:da:01:e9:57:5a: fc:a1:20:b9:68:6a:e9:d1:0f:15:b1:1f:db:51:72:8a:ed:a5: 2b:f8:f4:70:eb:51:5a:da:a6:97:e3:7c:a8:79:2a:6f:e4:1e: b9:d6:42:08:0e:e8:59:75:b7:24:78:02:44:44:e0:d9:7e:e5: 88:06:37:35:fe:aa:89:ce:1b:03:50:f5:65:21:83:bd:a5:0a: 71:e5:cd:c0:1d:4b:6e:b2:d1:9a:a0:af:cd:77:f0:6a:e9:ad: b9:e7:d5:7f:a0:17:85:25:fb:15:4a:82:3b:90:8c:f5:aa:b3: 63:24:70:f6:a4:90:4a:10:e0:77:d3:49:da:41:be:7e:1c:9b: 8e:5c:25:ab:96:39:84:58:ca:33:6c:d9:51:7d:f0:00:2e:8d: bd:93:22:56:f9:ce:00:92:81:44:b2:41:86:2f:b1:92:38:81: 0c:13:5b:cd:6f:01:34:42:29:e5:c4:19:ca:bb:8e:7f:9b:be: eb:04:95:f6:42:81:30:73:28:5a:ca:b7:14:cf:68:5d:76:a8: 73:1a:8f:cd:6b:e1:2e:3d:e1:dc:61:a8:6a:42:5f:29:2f:ec: 3c:50:72:19:8d:51:8d:84:c7:b9:80:e4:2c:f5:5e:ef:b6:60: 8c:77:10:90 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1/moHie/vKMrnUzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk N2YzNTYyMmQtYzE4Mi00ZGE2LTkxNGItYmViNDNlZGM2ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfFTVSISO/QGnxydH1Qv3S+d4YJPHTJeW4wP wnldIabMdp2/AfMMhFKa9h/puNA3JZv9lhuCLEcRLJs7SK3CbEvxLXqJ9TRj5eLY jBguUDhSetVcGxOtk5Xjz8rLgBEdTaU8AIAtLEJCe6VHg6SjkX3HRmCAzfg4cO98 60NCra6dH+CCxcFGo6tGb6qCy1WOGqID242dt5d/GSPBDgrwCTNKUXOYQEqTBtHo aG6n+7PwhnxxN1/YS8AmFyRzX5DV334uLbDDuknJ1ke4AQiC+Z7na4ZxB9IXpRM4 sZ9zdSQErYBfckyzyI2wxShMdCrCkn2uSsvMHu7Ca+Pa20JW7wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCKyF3J4/TOCxUMcga7kgzRAG7JpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjMyOGVmNTQtYTU2My0z NTkyLTgyZmMtYTQxNGRkNzQ2NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAJIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOC1DUQaYkncNb/SSTtoB6Vda/KEguWhq6dEPFbEf21Fyiu2lK/j0 cOtRWtqml+N8qHkqb+QeudZCCA7oWXW3JHgCRETg2X7liAY3Nf6qic4bA1D1ZSGD vaUKceXNwB1LbrLRmqCvzXfwaumtuefVf6AXhSX7FUqCO5CM9aqzYyRw9qSQShDg d9NJ2kG+fhybjlwlq5Y5hFjKM2zZUX3wAC6NvZMiVvnOAJKBRLJBhi+xkjiBDBNb zW8BNEIp5cQZyruOf5u+6wSV9kKBMHMoWsq3FM9oXXaocxqPzWvhLj3h3GGoakJf KS/sPFByGY1RjYTHuYDkLPVe77ZgjHcQkA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:36 2026 by rpki-client