$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/252a154d-a8e6-3bb9-ad0f-3ea100b64691.roa File: 252a154d-a8e6-3bb9-ad0f-3ea100b64691.roa (raw, json) Hash identifier: XQq/tidfXNPC81gFulT7dc9GbknuQWyrf0zNwka/Pzo= Subject key identifier: 8A:9F:8D:BA:C3:A4:AE:89:59:E7:20:CD:20:47:3B:C3:D0:A2:FB:E2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CF6ECD12AAC02E0866035D680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/252a154d-a8e6-3bb9-ad0f-3ea100b64691.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 54253 IP address blocks: 2603:c0e2::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d1:2a:ac:02:e0:86:60:35:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=cfa2d3db-ad17-4672-81a4-7919335f9403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:4e:c3:51:27:79:03:00:63:75:d7:db:79: 4b:61:80:5f:38:64:1a:c9:7f:a2:52:e6:38:ed:37: eb:9b:54:cc:c6:f1:2b:69:db:3c:ef:22:9d:ce:91: d7:b1:e7:6f:68:3b:d7:7d:0e:50:06:47:2d:4c:fe: 34:d3:85:87:8c:28:c6:c0:51:3e:5e:5b:b1:3a:3d: 7a:b6:02:d3:d5:72:87:87:93:98:16:67:e7:0d:ca: 92:b9:23:c5:24:78:72:df:1f:53:25:85:cb:19:46: 4f:68:38:d0:26:bc:52:cf:63:22:4f:89:55:6d:7b: 67:29:50:ea:f3:06:91:ed:c4:e1:01:e1:5c:af:69: 94:df:d1:d3:f3:a3:e7:b9:0d:1b:45:a8:34:77:d5: 05:d1:63:8d:ad:5d:32:f0:40:b2:41:04:c7:46:01: 09:38:33:27:75:09:e4:de:91:b2:fb:a5:f4:1c:98: b0:33:00:b1:fe:c9:bc:4d:46:26:a3:38:6f:07:9e: 83:46:ee:77:e2:b1:4d:e6:60:79:3c:6a:6c:3c:d4: bf:e6:79:15:67:7f:07:2e:11:c1:99:41:47:9c:63: 53:d8:b5:3e:eb:8e:c0:61:87:2f:c1:08:f1:d3:f3: 3c:54:5f:16:27:7f:73:1f:af:f8:9d:77:98:77:ad: fb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:8D:BA:C3:A4:AE:89:59:E7:20:CD:20:47:3B:C3:D0:A2:FB:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/252a154d-a8e6-3bb9-ad0f-3ea100b64691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0e2::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:65:29:6e:a1:99:29:bf:13:3f:f8:34:8e:95:d5:92:9f:27: df:bc:de:56:c0:0b:32:27:c1:57:b3:a2:77:98:2e:b8:7b:a2: 25:41:f1:a7:ed:ce:98:32:b8:ab:9e:a9:86:42:a9:a8:ce:df: 71:3e:94:2d:72:42:e3:98:3d:b8:5b:85:28:a2:fb:3a:fb:3e: 85:c6:31:31:02:a8:b3:4e:a9:5b:d6:69:7e:b3:38:b4:66:65: e0:3c:c9:84:13:a0:dd:1b:cf:7a:1a:f5:c6:ef:ea:e2:a0:67: 9e:1c:0d:a7:4c:93:ef:7c:6b:89:bb:a6:88:5e:1a:ea:c5:6c: 7a:13:b5:bb:1c:bf:28:56:75:2b:a0:72:d8:a5:a4:c6:2e:d7: bb:1c:f3:4e:21:1c:fb:0f:ed:a4:a5:6f:66:1e:7c:46:d8:be: ab:18:12:ef:cc:52:22:e4:bd:57:52:5a:3b:b2:1d:07:34:3a: ab:6a:42:7b:6c:ab:04:c2:05:c1:d7:1a:b1:f1:6f:04:2c:1a: f8:5e:5d:89:7c:9f:69:d0:ab:39:09:1c:96:1e:74:3e:d7:19: 1f:fd:75:ea:ae:14:de:59:b1:66:cb:e5:18:55:da:8d:d3:8c: e3:0d:56:46:32:e1:61:57:90:cd:e6:8a:53:88:ad:f8:7a:41: 5c:31:b4:1b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz27NEqrALghmA11oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk Y2ZhMmQzZGItYWQxNy00NjcyLTgxYTQtNzkxOTMzNWY5NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv51Ow1EneQMAY3XX23lLYYBfOGQayX+iUuY4 7Tfrm1TMxvErads87yKdzpHXsedvaDvXfQ5QBkctTP4004WHjCjGwFE+XluxOj16 tgLT1XKHh5OYFmfnDcqSuSPFJHhy3x9TJYXLGUZPaDjQJrxSz2MiT4lVbXtnKVDq 8waR7cThAeFcr2mU39HT86PnuQ0bRag0d9UF0WONrV0y8ECyQQTHRgEJODMndQnk 3pGy+6X0HJiwMwCx/sm8TUYmozhvB56DRu534rFN5mB5PGpsPNS/5nkVZ38HLhHB mUFHnGNT2LU+647AYYcvwQjx0/M8VF8WJ39zH6/4nXeYd6371QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIqfjbrDpK6JWecgzSBHO8PQovviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjUyYTE1NGQtYThlNi0z YmI5LWFkMGYtM2VhMTAwYjY0NjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPA4gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACGUpbqGZKb8TP/g0jpXVkp8n37zeVsALMifBV7Oid5guuHuiJUHx p+3OmDK4q56phkKpqM7fcT6ULXJC45g9uFuFKKL7Ovs+hcYxMQKos06pW9ZpfrM4 tGZl4DzJhBOg3RvPehr1xu/q4qBnnhwNp0yT73xribumiF4a6sVsehO1uxy/KFZ1 K6By2KWkxi7XuxzzTiEc+w/tpKVvZh58Rti+qxgS78xSIuS9V1JaO7IdBzQ6q2pC e2yrBMIFwdcasfFvBCwa+F5diXyfadCrOQkclh50PtcZH/116q4U3lmxZsvlGFXa jdOM4w1WRjLhYVeQzeaKU4it+HpBXDG0Gw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:13:29 2026 by rpki-client