$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ce8c6a3-bf66-3c37-802b-ab3a4a43d123.roa File: 9ce8c6a3-bf66-3c37-802b-ab3a4a43d123.roa (raw, json) Hash identifier: QJmn7YB6bjMAVUxp728md5XxebKKTJdW+UmV7d31E+A= Subject key identifier: 53:14:47:58:DE:00:A2:F8:AF:B8:52:C3:AB:27:10:E7:32:1E:77:5A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D6EEC5F01826A036099F8ABA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ce8c6a3-bf66-3c37-802b-ab3a4a43d123.roa Signing time: Wed 08 Apr 2026 01:36:45 +0000 ROA not before: Wed 08 Apr 2026 01:36:45 +0000 ROA not after: Tue 07 Jul 2026 01:36:45 +0000 asID: 11049 IP address blocks: 2603:c040:2000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:ec:5f:01:82:6a:03:60:99:f8:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 8 01:36:45 2026 GMT Not After : Jul 7 01:36:45 2026 GMT Subject: CN=4a5c8880-8401-4faf-bf60-b8c92c2ddaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:8c:0a:99:98:c4:03:19:40:01:2e:21:85: a2:07:07:04:b1:4d:c0:3f:42:94:3f:45:a6:34:38: 1b:cf:71:1f:d4:0b:2f:48:d4:a4:21:5a:90:b9:5b: 02:23:3c:f4:b3:59:7a:ae:3f:88:73:bc:f5:2d:c5: 29:6a:6e:4c:27:ec:df:f8:42:13:57:85:5f:7c:f0: 40:0a:be:0b:8e:eb:25:a8:2e:ba:6f:d1:b3:6b:13: bd:a4:3e:b9:10:23:18:42:c8:a8:dd:ca:85:dd:79: 8e:cc:01:e7:68:d6:2b:e2:23:af:e3:36:98:40:5d: 4f:05:3d:63:2a:34:8f:f5:c7:6c:e6:40:94:03:9e: 7f:8a:10:ba:1a:ab:8c:33:dc:31:df:f3:59:0a:ae: 1a:cd:0c:5e:1b:10:02:29:ca:d6:ee:bf:84:29:b2: 85:e7:c4:7a:01:8c:11:df:f8:1b:2e:14:17:64:66: 0a:10:45:ff:a5:dd:bc:26:25:c0:31:ff:f5:c4:78: ae:08:f9:85:ef:82:0f:ce:3e:b0:fd:2e:a4:0e:cb: 61:d4:2a:b6:d5:5f:ec:a5:64:fc:09:4e:f5:bd:c3: 6b:a8:e5:a0:79:93:ec:70:ae:2b:07:9b:31:5c:06: 12:34:d8:f1:cc:c0:67:c2:3b:9f:a0:3c:28:ae:9e: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:14:47:58:DE:00:A2:F8:AF:B8:52:C3:AB:27:10:E7:32:1E:77:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9ce8c6a3-bf66-3c37-802b-ab3a4a43d123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c040:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9f:b5:73:fc:d0:a8:7e:d8:b6:02:42:f4:03:05:70:c0:ac: b9:1e:67:32:7a:92:29:82:9a:e5:61:31:3a:71:b4:e0:7c:8e: 7c:02:01:0d:b9:ce:e9:be:24:76:06:f0:4f:6c:2a:22:fd:43: 67:f1:3a:a2:b9:88:f8:c0:3b:20:ae:33:52:c9:94:42:ad:cb: 1b:06:e5:69:43:c4:11:55:b1:9e:f3:3f:d3:1b:9e:d3:a7:47: 68:e7:32:21:2e:28:2d:c6:d4:3d:8b:38:ad:1a:9e:c1:33:da: 7f:68:48:9b:7c:9c:73:f8:37:d6:f8:cd:7f:52:4e:34:65:08: 89:d1:38:01:2c:61:57:00:1c:83:dc:b5:70:c4:0d:f7:56:af: 96:f9:0e:98:15:65:83:8e:3d:23:73:c7:8d:e1:23:53:39:39: 07:fa:49:31:ba:e1:6f:7f:dc:38:d1:d1:18:f1:1f:62:30:73: e6:2a:4c:c3:a9:4f:5e:c6:f8:61:32:3d:00:dd:de:b5:21:0c: c5:e9:06:2c:36:c5:94:99:ce:16:e5:91:91:b3:fa:d8:d0:0e: ae:33:ba:1e:d0:46:d2:10:fd:df:26:76:eb:ab:3a:de:42:1e: 41:57:f6:9b:40:06:31:bb:dd:9e:f5:42:fc:23:c1:e7:70:7d: c5:9a:2c:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1u7F8BgmoDYJn4q6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQwODAxMzY0NVoXDTI2MDcwNzAxMzY0NVowLzEtMCsGA1UEAxMk NGE1Yzg4ODAtODQwMS00ZmFmLWJmNjAtYjhjOTJjMmRkYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYGMCpmYxAMZQAEuIYWiBwcEsU3AP0KUP0Wm NDgbz3Ef1AsvSNSkIVqQuVsCIzz0s1l6rj+Ic7z1LcUpam5MJ+zf+EITV4VffPBA Cr4LjuslqC66b9GzaxO9pD65ECMYQsio3cqF3XmOzAHnaNYr4iOv4zaYQF1PBT1j KjSP9cds5kCUA55/ihC6GquMM9wx3/NZCq4azQxeGxACKcrW7r+EKbKF58R6AYwR 3/gbLhQXZGYKEEX/pd28JiXAMf/1xHiuCPmF74IPzj6w/S6kDsth1Cq21V/spWT8 CU71vcNrqOWgeZPscK4rB5sxXAYSNNjxzMBnwjufoDworp4POQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFMUR1jeAKL4r7hSw6snEOcyHndaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWNlOGM2YTMtYmY2Ni0z YzM3LTgwMmItYWIzYTRhNDNkMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAQCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbJ+1c/zQqH7YtgJC9AMFcMCsuR5nMnqSKYKa5WExOnG04HyOfAIB DbnO6b4kdgbwT2wqIv1DZ/E6ormI+MA7IK4zUsmUQq3LGwblaUPEEVWxnvM/0xue 06dHaOcyIS4oLcbUPYs4rRqewTPaf2hIm3ycc/g31vjNf1JONGUIidE4ASxhVwAc g9y1cMQN91avlvkOmBVlg449I3PHjeEjUzk5B/pJMbrhb3/cONHRGPEfYjBz5ipM w6lPXsb4YTI9AN3etSEMxekGLDbFlJnOFuWRkbP62NAOrjO6HtBG0hD93yZ266s6 3kIeQVf2m0AGMbvdnvVC/CPB53B9xZosnA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:42:32 2026 by rpki-client