$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42286b50-ad4f-3916-84e6-ee7d77544f14.roa File: 42286b50-ad4f-3916-84e6-ee7d77544f14.roa (raw, json) Hash identifier: 4Rm96x3KlmhoRrsoB3i9v1wWpZFxIXyaBZuRIkj5+JQ= Subject key identifier: BD:E7:AF:A0:27:64:D9:63:29:CE:47:34:AE:A2:6F:34:8E:C0:7C:11 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86957A4DCF59720A597D3C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42286b50-ad4f-3916-84e6-ee7d77544f14.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 2603:c000:c00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7a:4d:cf:59:72:0a:59:7d:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=b87ad235-8af0-4b04-b231-453a59f6b66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:5e:e8:2f:2f:84:a8:dc:e1:b9:1a:1a:cd: 50:e9:3c:17:e8:f5:83:5b:1d:d2:05:a5:05:e1:a1: a3:af:89:ca:72:50:dc:98:38:c6:69:92:b5:35:de: ed:9d:50:7e:7a:9e:f5:49:2a:bc:4a:21:f1:75:51: 87:1d:97:77:f4:b0:87:90:63:6f:f5:f3:6c:19:8a: e3:8b:29:60:f8:a8:01:b7:7b:c3:5f:93:0a:c1:70: 5d:31:12:5c:e7:64:69:9b:bc:71:67:ca:68:59:1e: d0:d2:8c:3b:39:6a:71:e5:f7:0e:1e:38:e4:cf:41: 09:ee:c5:21:51:e3:47:cf:cd:01:0b:40:3c:5d:51: 7f:bb:df:ca:b5:24:99:30:95:de:6d:83:6d:b7:3a: 3f:c7:af:3a:06:8f:10:20:0b:9f:b5:10:12:0a:60: e3:fd:8a:76:3a:f9:e4:23:09:64:e6:69:00:49:55: f8:dd:82:b2:63:1e:eb:63:c3:66:45:0d:2e:10:8f: d6:7d:9e:79:f7:4c:b3:7b:18:fc:2f:b5:9c:67:6b: db:8a:0d:53:4b:20:6f:5c:c2:c0:29:1f:a2:fd:0a: 24:38:48:ad:4a:3c:8e:7c:6e:06:fb:64:fe:c4:41: f3:4b:e9:bf:25:27:f2:8d:c5:eb:99:1e:47:b3:94: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E7:AF:A0:27:64:D9:63:29:CE:47:34:AE:A2:6F:34:8E:C0:7C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42286b50-ad4f-3916-84e6-ee7d77544f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3d:ae:8c:ec:b2:90:e2:02:81:aa:59:c2:01:ee:b0:70:ba: e6:f0:df:d6:53:c3:06:33:6c:90:25:11:bf:8c:39:af:93:55: 37:a3:8a:3e:ef:1c:6a:39:60:c9:73:b6:9a:41:4b:f7:7a:0a: 8c:4d:1d:0e:02:ae:83:04:ae:77:ab:dd:45:7e:ee:2c:5a:9c: 71:83:cc:18:2d:87:43:33:44:f7:d5:bb:17:98:03:ff:85:61: a7:e7:10:55:6a:71:69:1d:69:da:a2:20:c9:27:ec:6c:bf:2b: 83:0b:d3:5a:92:68:cc:86:fc:88:ad:9b:24:95:4e:a5:db:3e: e5:35:a4:08:18:9b:cc:78:7d:3a:c8:26:20:3d:ad:c5:4e:be: b0:ba:93:2a:86:ff:63:6f:5e:59:a6:1f:8a:fb:9f:79:f2:ad: 8c:ef:b7:ec:41:9c:ad:74:12:0d:cf:70:fa:c5:8d:88:6b:b6: f3:9c:67:0e:49:49:74:f6:ac:c5:ad:f7:7d:e0:9b:34:bd:db: 3b:c3:ef:0b:43:df:a1:a8:86:53:62:26:f1:3c:1a:25:7f:82: 77:f7:15:98:0a:44:e0:5f:14:d9:a7:ff:78:bf:8a:5b:3c:69: 41:53:f9:00:7f:67:2a:30:35:8c:33:8f:40:12:0a:bc:ae:1a: d4:7a:2d:48 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2GlXpNz1lyCll9PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk Yjg3YWQyMzUtOGFmMC00YjA0LWIyMzEtNDUzYTU5ZjZiNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxJe6C8vhKjc4bkaGs1Q6TwX6PWDWx3SBaUF 4aGjr4nKclDcmDjGaZK1Nd7tnVB+ep71SSq8SiHxdVGHHZd39LCHkGNv9fNsGYrj iylg+KgBt3vDX5MKwXBdMRJc52Rpm7xxZ8poWR7Q0ow7OWpx5fcOHjjkz0EJ7sUh UeNHz80BC0A8XVF/u9/KtSSZMJXebYNttzo/x686Bo8QIAuftRASCmDj/Yp2Ovnk Iwlk5mkASVX43YKyYx7rY8NmRQ0uEI/WfZ5590yzexj8L7WcZ2vbig1TSyBvXMLA KR+i/QokOEitSjyOfG4G+2T+xEHzS+m/JSfyjcXrmR5Hs5TwmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL3nr6AnZNljKc5HNK6ibzSOwHwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDIyODZiNTAtYWQ0Zi0z OTE2LTg0ZTYtZWU3ZDc3NTQ0ZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgz2ujOyykOICgapZwgHusHC65vDf1lPDBjNskCURv4w5r5NVN6OK Pu8cajlgyXO2mkFL93oKjE0dDgKugwSud6vdRX7uLFqccYPMGC2HQzNE99W7F5gD /4Vhp+cQVWpxaR1p2qIgySfsbL8rgwvTWpJozIb8iK2bJJVOpds+5TWkCBibzHh9 OsgmID2txU6+sLqTKob/Y29eWaYfivufefKtjO+37EGcrXQSDc9w+sWNiGu285xn DklJdPasxa33feCbNL3bO8PvC0PfoaiGU2Im8TwaJX+Cd/cVmApE4F8U2af/eL+K WzxpQVP5AH9nKjA1jDOPQBIKvK4a1HotSA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:37 2026 by rpki-client