$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db497315-9bbe-3565-b74f-2aed8cfd4fe0.roa File: db497315-9bbe-3565-b74f-2aed8cfd4fe0.roa (raw, json) Hash identifier: sAzA/fSbJZKHL3s1pRRzJP+pOS6XF/XU7TQSEcnwiQw= Subject key identifier: 45:D4:EB:30:9B:74:11:E5:6B:35:88:88:E4:C0:EF:C7:71:F7:81:4A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D237A2FD4A0A557CC23886100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db497315-9bbe-3565-b74f-2aed8cfd4fe0.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 54113 IP address blocks: 2620:0:890::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2f:d4:a0:a5:57:cc:23:88:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5659a6d8-8f91-4e1c-bfbe-990985a4398d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:04:55:0c:00:b9:b5:44:b5:d8:8e:14:45: 67:06:d7:8f:ea:b9:25:fc:59:96:68:16:d7:ed:6d: 39:61:04:34:65:84:f6:41:17:56:84:55:5d:43:bc: 5d:4d:c3:34:60:2a:ff:56:69:3e:3a:ac:9a:95:b7: f1:5d:b3:01:27:20:a8:85:a9:10:2c:23:61:bc:e4: 0d:36:ad:16:d0:d7:d5:4b:af:2a:c3:ac:ab:31:ca: 0d:f7:f8:5c:3e:6a:63:cd:6a:b5:8b:16:d3:ca:9f: d7:d2:f0:b1:b6:1c:cb:97:5a:53:c5:d7:c2:57:ea: af:95:eb:b3:79:99:a4:bc:6d:28:d1:fe:58:f4:db: e2:2c:66:64:18:d3:76:45:e2:81:5e:34:a3:66:81: bb:62:f3:9b:07:a6:73:25:f1:c3:95:41:89:fb:62: 4a:18:3d:ca:bc:92:f1:9f:7b:a5:cd:af:7d:37:d3: 85:34:83:e8:d7:43:ea:7b:ea:0c:a3:70:8c:b7:11: b2:35:cc:00:ae:81:ac:d1:2c:4e:72:6f:95:b3:df: 60:2a:c5:8c:52:98:36:ed:11:c7:b2:dd:8c:c8:ef: c6:dc:b8:f4:51:0f:b6:d3:98:d9:26:d7:83:f6:52: 4e:f8:66:f7:02:1b:60:cc:06:0b:58:cf:f7:ac:bc: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D4:EB:30:9B:74:11:E5:6B:35:88:88:E4:C0:EF:C7:71:F7:81:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db497315-9bbe-3565-b74f-2aed8cfd4fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:890::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e3:a6:05:64:c5:3a:d2:0b:57:54:d7:e1:9d:27:32:d3:2e: dc:64:b0:69:93:18:78:69:24:27:a9:2d:a0:f5:5e:5c:cf:dc: e0:aa:67:1d:64:36:14:69:37:61:f3:6b:09:49:a7:46:34:ec: e9:1a:4a:1a:e7:cb:fc:92:6b:56:30:6a:05:9d:30:29:9e:3c: ce:9b:7a:26:22:d2:6a:92:46:31:3c:50:fa:a1:bd:eb:b0:df: 09:59:df:c7:dd:44:5d:ff:cf:d6:76:af:20:c1:fc:a8:e7:16: d4:e3:cc:a2:ee:fc:ab:30:4f:35:de:dd:f0:f0:6d:31:dc:ad: c4:62:e2:25:6c:45:9b:3c:64:25:3a:c1:ed:b9:c3:74:a7:1d: bf:35:ef:6d:3f:b8:5f:33:d8:94:16:8d:9b:ff:66:11:d8:97: 21:88:2c:28:e8:ea:33:ea:95:93:b2:e5:a8:67:28:d0:99:0b: c7:40:fe:07:d7:ef:eb:aa:71:98:6a:83:de:4b:e6:db:8d:3a: 3c:63:14:3a:fb:55:90:10:ca:c7:ba:b6:48:98:2a:54:5f:ba: 9a:5a:96:93:84:b7:ac:25:4a:04:ac:a7:67:ff:97:db:b1:18: ab:16:a1:cf:b0:24:1a:b7:4e:2f:b1:1c:23:c0:ee:ca:66:d5: 1c:ac:31:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jei/UoKVXzCOIYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTY1OWE2ZDgtOGY5MS00ZTFjLWJmYmUtOTkwOTg1YTQzOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlusEVQwAubVEtdiOFEVnBteP6rkl/FmWaBbX 7W05YQQ0ZYT2QRdWhFVdQ7xdTcM0YCr/Vmk+OqyalbfxXbMBJyCohakQLCNhvOQN Nq0W0NfVS68qw6yrMcoN9/hcPmpjzWq1ixbTyp/X0vCxthzLl1pTxdfCV+qvleuz eZmkvG0o0f5Y9NviLGZkGNN2ReKBXjSjZoG7YvObB6ZzJfHDlUGJ+2JKGD3KvJLx n3ulza99N9OFNIPo10Pqe+oMo3CMtxGyNcwAroGs0SxOcm+Vs99gKsWMUpg27RHH st2MyO/G3Lj0UQ+205jZJteD9lJO+Gb3AhtgzAYLWM/3rLz0nwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEXU6zCbdBHlazWIiOTA78dx94FKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI0OTczMTUtOWJiZS0z NTY1LWI3NGYtMmFlZDhjZmQ0ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAiQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJfjpgVkxTrSC1dU1+GdJzLTLtxksGmTGHhpJCepLaD1XlzP3OCq Zx1kNhRpN2HzawlJp0Y07OkaShrny/ySa1YwagWdMCmePM6beiYi0mqSRjE8UPqh veuw3wlZ38fdRF3/z9Z2ryDB/KjnFtTjzKLu/KswTzXe3fDwbTHcrcRi4iVsRZs8 ZCU6we25w3SnHb81720/uF8z2JQWjZv/ZhHYlyGILCjo6jPqlZOy5ahnKNCZC8dA /gfX7+uqcZhqg95L5tuNOjxjFDr7VZAQyse6tkiYKlRfuppalpOEt6wlSgSsp2f/ l9uxGKsWoc+wJBq3Ti+xHCPA7spm1RysMdQ= -----END CERTIFICATE-----Generated at Wed Mar 18 17:53:53 2026 by rpki-client