$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/96d3f086-c55f-3dda-b397-71bd683cd340.roa File: 96d3f086-c55f-3dda-b397-71bd683cd340.roa (raw, json) Hash identifier: p1EDuQDgZO/UiM7fGaucsdX6nA9IgEuffYcBt+KSZQI= Subject key identifier: F3:6C:C7:02:23:7A:20:C8:06:8D:B2:47:03:FE:E3:97:20:14:AD:2F Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584D67DFB4CD89A0F1D032645B00 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/96d3f086-c55f-3dda-b397-71bd683cd340.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 36692 IP address blocks: 2620:119:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b4:cd:89:a0:f1:d0:32:64:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=46611a1f-5f58-4c99-9d98-5ece416652a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:a8:93:ce:76:6c:b9:87:30:a8:99:93:1b: af:e4:f0:24:6b:f0:dc:5e:07:30:a6:53:2f:56:40: 70:82:ab:19:99:78:0c:ff:18:dd:55:14:5a:ed:c5: 62:5a:d7:3a:15:f4:5c:f0:84:10:c6:3b:64:9d:e2: 00:ef:04:79:69:97:26:5e:d8:e2:00:a4:01:ea:c8: 2d:e9:26:d9:0c:e8:04:97:f4:76:79:5a:4d:72:12: fc:0c:9f:81:c6:31:3e:37:0b:2c:e0:2e:5f:bd:50: ab:7e:8c:cc:27:9c:fc:51:1a:51:35:88:b5:04:1e: 9c:09:e0:4b:ee:57:51:f0:40:ee:e3:f8:94:58:29: 63:a7:1e:28:ff:18:50:5e:76:f3:15:00:4d:32:3c: 0f:82:e6:38:ec:d8:0d:38:25:08:15:a8:5c:32:63: 2c:d2:65:21:de:eb:3e:14:6c:4a:0d:14:23:a2:10: 26:4d:51:d4:b0:1e:02:7e:2b:f0:10:2f:2e:d3:61: 9e:70:2e:5b:81:78:13:e4:04:3a:70:0d:78:39:7d: 1e:a8:93:39:f2:8b:8b:16:29:a6:60:bb:d9:22:40: d1:15:63:35:e6:db:d3:48:0b:80:e9:d1:ca:fb:cf: 2c:d4:66:16:2e:b0:bd:02:bc:5f:dd:76:ff:4a:e1: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6C:C7:02:23:7A:20:C8:06:8D:B2:47:03:FE:E3:97:20:14:AD:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/96d3f086-c55f-3dda-b397-71bd683cd340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv6: 2620:119:19::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9d:c1:c7:b9:c9:51:ae:71:71:7f:70:ed:85:2c:9d:cd:93: bc:5e:8a:12:2d:40:58:56:57:fa:06:87:91:09:c3:1f:3e:c8: ac:b7:89:21:3b:9b:a6:68:7d:61:f6:46:e9:fa:12:3d:c3:52: e8:44:c6:fb:95:2c:73:db:23:37:b1:62:1f:84:10:93:9b:e6: a3:d8:ec:cd:82:ce:d6:26:4b:c3:54:74:c6:6b:09:86:76:8a: e3:1d:6c:a5:a4:e4:c2:80:25:bb:7d:0c:da:d2:b2:3f:60:07: ef:29:b4:05:b0:2a:f4:a4:eb:98:5c:bd:dc:39:e2:9e:25:88: 35:df:86:ee:fa:87:24:65:1f:29:64:c3:8c:66:ec:13:e8:9d: 9e:71:25:4e:b5:46:f9:55:0c:b1:2c:cf:73:a8:86:da:95:96: d9:25:17:58:d5:66:aa:9d:58:8d:73:7e:56:20:5c:fa:cb:cf: 9e:fd:96:50:4f:ad:fe:85:5f:f2:f4:f9:ea:71:63:32:6d:cd: d9:8d:a9:ab:7f:3f:fe:19:14:2b:60:e1:61:97:0f:7a:d1:d1: 67:08:77:ee:30:ac:30:d6:58:70:a9:6e:06:25:5f:75:44:7c: 32:67:4d:f8:22:02:87:9e:3a:1d:50:e5:58:b2:38:45:7f:44: dc:b4:d1:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n37TNiaDx0DJkWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NDY2MTFhMWYtNWY1OC00Yzk5LTlkOTgtNWVjZTQxNjY1MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd6ok852bLmHMKiZkxuv5PAka/DcXgcwplMv VkBwgqsZmXgM/xjdVRRa7cViWtc6FfRc8IQQxjtkneIA7wR5aZcmXtjiAKQB6sgt 6SbZDOgEl/R2eVpNchL8DJ+BxjE+Nwss4C5fvVCrfozMJ5z8URpRNYi1BB6cCeBL 7ldR8EDu4/iUWCljpx4o/xhQXnbzFQBNMjwPguY47NgNOCUIFahcMmMs0mUh3us+ FGxKDRQjohAmTVHUsB4CfivwEC8u02GecC5bgXgT5AQ6cA14OX0eqJM58ouLFimm YLvZIkDRFWM15tvTSAuA6dHK+88s1GYWLrC9Arxf3Xb/SuHt9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPNsxwIjeiDIBo2yRwP+45cgFK0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvOTZkM2YwODYtYzU1Zi0z ZGRhLWIzOTctNzFiZDY4M2NkMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGQAZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHudwce5yVGucXF/cO2FLJ3Nk7xeihItQFhWV/oGh5EJwx8+yKy3 iSE7m6ZofWH2Run6Ej3DUuhExvuVLHPbIzexYh+EEJOb5qPY7M2CztYmS8NUdMZr CYZ2iuMdbKWk5MKAJbt9DNrSsj9gB+8ptAWwKvSk65hcvdw54p4liDXfhu76hyRl Hylkw4xm7BPonZ5xJU61RvlVDLEsz3OohtqVltklF1jVZqqdWI1zflYgXPrLz579 llBPrf6FX/L0+epxYzJtzdmNqat/P/4ZFCtg4WGXD3rR0WcId+4wrDDWWHCpbgYl X3VEfDJnTfgiAoeeOh1Q5ViyOEV/RNy00TU= -----END CERTIFICATE-----Generated at Tue Apr 7 13:30:04 2026 by rpki-client