$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa File: 4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa (raw, json) Hash identifier: Pqg9+ZjwDVy6JMdTLOhJIapFnyLFksnAY+p08Y8BYuQ= Subject key identifier: B0:71:43:62:0F:76:F9:4D:A2:0B:E9:D3:7B:69:25:DE:94:A0:97:E8 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584D3210A4ADB504CD7434602F00 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa Signing time: Tue 17 Mar 2026 06:25:32 +0000 ROA not before: Tue 17 Mar 2026 06:25:32 +0000 ROA not after: Mon 15 Jun 2026 06:25:32 +0000 asID: 55039 IP address blocks: 2606:4b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:10:a4:ad:b5:04:cd:74:34:60:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Mar 17 06:25:32 2026 GMT Not After : Jun 15 06:25:32 2026 GMT Subject: CN=4d9c5598-9b15-4e79-9fbd-232d50e10b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:93:38:94:d1:74:d9:92:00:4f:54:ea:25:26: 5b:1b:02:f2:6c:ce:3e:71:55:16:60:a5:6c:64:e0: cc:5e:e8:ff:ee:21:64:2c:b5:6a:da:5a:f6:98:fa: f3:5a:fa:75:9e:f5:14:18:b5:c4:86:ac:60:2b:ee: 5f:19:c5:4d:5e:89:fe:79:56:f0:fc:21:e2:c1:0b: 1b:06:d2:5b:cd:72:ae:e7:ce:82:c2:0f:8b:1f:75: 81:9d:ee:9e:54:72:d8:1d:b7:03:58:b2:f6:58:a0: fc:1a:6e:95:fb:58:b7:e2:3d:4b:6d:12:e6:10:33: 7c:ca:5f:2b:85:40:1d:5b:08:e5:42:df:bc:81:fd: 53:84:bf:6e:e8:a6:91:72:10:03:76:1f:eb:05:95: 84:ef:4e:ce:45:60:37:ad:74:2a:19:b0:e9:a2:7f: b4:af:eb:98:f2:3e:52:f7:78:fc:3f:bd:b2:52:ed: a4:4e:19:27:21:ff:1b:24:c5:53:88:2b:bc:d0:db: 7d:3a:11:5e:c3:f6:6e:d9:e3:bd:90:32:4f:9a:47: 2b:0d:2d:d0:de:0c:e5:ad:e3:19:44:88:fa:78:c4: 08:82:6d:f9:5b:d3:08:2c:ee:a2:d1:ae:30:31:7e: 3c:69:34:64:94:3c:c2:41:be:3b:4e:95:20:ca:11: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:71:43:62:0F:76:F9:4D:A2:0B:E9:D3:7B:69:25:DE:94:A0:97:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv6: 2606:4b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9e:e0:11:58:a7:87:41:15:a0:04:39:94:a2:02:c0:1d:50: 3f:1b:03:5e:9d:de:15:02:bc:57:29:b4:d0:17:be:79:e0:56: e0:bd:78:3c:a4:9a:9c:3d:bc:19:5e:94:db:e5:01:87:0e:5e: 35:1e:fa:49:d6:74:b4:54:a1:b3:29:6c:db:ee:81:4d:fa:1f: 59:7c:bf:06:92:90:bb:51:10:77:17:a8:a9:0f:c4:c9:2e:79: 9a:60:45:be:c6:8b:8a:8f:a4:7e:d5:77:77:0d:35:52:38:f2: b6:f7:08:cb:e4:85:e6:ac:e5:db:63:7b:ef:4d:2e:c6:a2:7f: 71:ec:c3:3e:c6:20:a3:45:95:04:ee:dd:e5:59:ea:39:5e:4b: 6e:59:3b:9c:c7:03:10:e8:1c:12:db:30:3c:6e:e2:97:06:60: 4b:17:f4:cf:e0:09:08:c6:df:25:21:96:a8:e6:ef:7a:5a:9e: b1:0e:ac:64:fd:17:34:b9:3d:c0:ce:b1:88:33:31:94:d7:34: 2a:a7:87:dc:ba:3a:93:ec:a7:f2:4d:9c:a9:e7:d4:55:df:86: 91:69:df:17:7f:50:a3:d4:48:38:4f:0e:b0:be:54:6c:bb:3a: af:68:07:20:62:8a:a6:f2:a7:a3:13:c9:8e:4b:da:42:66:64: 34:ce:84:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0yEKSttQTNdDRgLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDMxNzA2MjUzMloXDTI2MDYxNTA2MjUzMlowLzEtMCsGA1UEAxMk NGQ5YzU1OTgtOWIxNS00ZTc5LTlmYmQtMjMyZDUwZTEwYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJM4lNF02ZIAT1TqJSZbGwLybM4+cVUWYKVs ZODMXuj/7iFkLLVq2lr2mPrzWvp1nvUUGLXEhqxgK+5fGcVNXon+eVbw/CHiwQsb BtJbzXKu586Cwg+LH3WBne6eVHLYHbcDWLL2WKD8Gm6V+1i34j1LbRLmEDN8yl8r hUAdWwjlQt+8gf1ThL9u6KaRchADdh/rBZWE707ORWA3rXQqGbDpon+0r+uY8j5S 93j8P72yUu2kThknIf8bJMVTiCu80Nt9OhFew/Zu2eO9kDJPmkcrDS3Q3gzlreMZ RIj6eMQIgm35W9MILO6i0a4wMX48aTRklDzCQb47TpUgyhGNywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLBxQ2IPdvlNogvp03tpJd6UoJfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvNGJhNTZjYzEtOWNkNC0z ZjQ3LTk3Y2QtYTBiMTEyMWFjYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZLgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBonuARWKeHQRWgBDmUogLAHVA/GwNend4VArxXKbTQF7554FbgvXg8 pJqcPbwZXpTb5QGHDl41HvpJ1nS0VKGzKWzb7oFN+h9ZfL8GkpC7URB3F6ipD8TJ LnmaYEW+xouKj6R+1Xd3DTVSOPK29wjL5IXmrOXbY3vvTS7Gon9x7MM+xiCjRZUE 7t3lWeo5XktuWTucxwMQ6BwS2zA8buKXBmBLF/TP4AkIxt8lIZao5u96Wp6xDqxk /Rc0uT3AzrGIMzGU1zQqp4fcujqT7KfyTZyp59RV34aRad8Xf1Cj1Eg4Tw6wvlRs uzqvaAcgYoqm8qejE8mOS9pCZmQ0zoR/ -----END CERTIFICATE-----Generated at Sat Mar 21 13:00:06 2026 by rpki-client