$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa File: 3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa (raw, json) Hash identifier: pUjXwxK/ph4IPnWjsIQpjOmJj2zV2jf/FrSffO6Y5aY= Subject key identifier: 65:2D:3D:E3:1B:BD:30:C0:0A:5E:B7:10:7E:72:13:DC:1C:03:56:C8 Certificate issuer: /CN=5dd53d9e-382d-4f16-b9d4-08067d598d81 Certificate serial: 010D0C9F4328584D40CA4B710F5F2E2348319080 Authority key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 2635 IP address blocks: 2620:115:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4b:71:0f:5f:2e:23:48:31:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=d1ac0673-324b-4989-b439-b31f223e760c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:92:71:f8:0b:22:dc:bb:e3:8c:b5:a7:95: dc:a0:79:e7:f7:e0:4a:3e:c9:6c:e9:ad:c4:a9:50: c6:9a:a7:59:40:08:19:b6:9f:63:f5:56:45:ee:5b: 93:89:6e:cc:5f:aa:1c:fb:5c:7d:f4:0c:3e:92:9a: 88:6b:83:83:4c:a3:5b:68:85:67:f9:37:bb:2b:47: db:bf:b2:55:48:a8:f9:87:dd:3c:ad:57:1b:d3:89: 0a:c4:b3:c6:ce:dc:11:b5:c3:0b:59:79:1e:07:a5: 99:18:1b:df:5f:d5:3a:7a:e8:91:9c:70:37:3a:a1: da:db:48:bd:16:c1:cc:a9:57:b3:54:fc:9b:7c:c3: 08:22:99:a4:1e:e2:01:74:40:4b:58:04:a9:cc:2e: 10:9a:c4:db:d4:0f:df:b3:ed:1d:ae:c8:ba:28:2d: f1:83:ed:f6:87:d5:61:06:62:51:0c:a0:7a:74:9c: 40:3d:8d:1c:6e:0b:24:67:ad:19:f3:3b:31:74:96: 5f:61:8c:ac:93:23:44:3b:19:50:9f:c6:7d:d3:65: 53:0e:1f:29:9f:18:8c:a2:29:4f:c0:36:ff:9c:c6: 1e:ce:bc:72:9a:92:b1:f5:da:d9:93:40:b7:14:eb: 66:03:3d:a8:b7:9c:8c:36:f1:27:64:84:7c:24:af: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2D:3D:E3:1B:BD:30:C0:0A:5E:B7:10:7E:72:13:DC:1C:03:56:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl X509v3 Authority Key Identifier: keyid:8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer sbgp-ipAddrBlock: critical IPv6: 2620:115:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ed:5f:89:56:d5:64:6f:4e:6e:f8:e5:ad:f0:e4:ad:bf:93: b0:85:82:46:dd:c5:73:ed:fa:f2:77:36:6e:22:57:16:c7:f9: b7:14:87:4b:0e:a1:a8:bf:cf:c5:6c:04:21:3d:97:ad:91:98: da:af:f3:c5:6b:cb:b5:8b:15:b2:37:14:a7:64:a5:cf:cd:9d: 53:ed:80:52:34:ff:8d:4b:71:15:ad:16:dc:09:35:aa:16:8b: ec:8a:74:76:b7:6d:12:e9:0b:2a:36:f4:1e:f1:ad:49:99:8e: 6c:ae:b5:84:ab:e2:0f:0f:c6:6c:99:ad:e6:96:6f:43:2f:b1: b0:e6:b7:94:91:80:c8:a6:5c:de:b7:45:23:7c:f2:a1:94:ca: 93:f1:62:a1:c9:c5:b6:e0:6e:4a:73:16:8b:f1:29:7c:4c:71: 5a:56:03:28:3b:58:00:da:3a:9b:1e:75:06:ed:41:8d:a1:65: b9:4d:ad:80:45:a2:35:33:4a:cc:09:8f:77:79:ea:87:bc:6a: 70:9c:46:54:84:64:73:7a:db:b8:c6:93:a1:e1:f8:a8:b0:d7: 34:c5:14:61:a0:68:1b:3b:92:ee:19:0c:35:8e:7d:dd:c8:5e: 96:12:79:3e:2f:a9:51:1c:92:a7:57:74:9f:6d:c8:25:63:58: 71:6d:94:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1AyktxD18uI0gxkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkNTNkOWUtMzgyZC00ZjE2LWI5ZDQtMDgwNjdkNTk4 ZDgxMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDFhYzA2NzMtMzI0Yi00OTg5LWI0MzktYjMxZjIyM2U3NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukyScfgLIty744y1p5XcoHnn9+BKPsls6a3E qVDGmqdZQAgZtp9j9VZF7luTiW7MX6oc+1x99Aw+kpqIa4ODTKNbaIVn+Te7K0fb v7JVSKj5h908rVcb04kKxLPGztwRtcMLWXkeB6WZGBvfX9U6euiRnHA3OqHa20i9 FsHMqVezVPybfMMIIpmkHuIBdEBLWASpzC4QmsTb1A/fs+0drsi6KC3xg+32h9Vh BmJRDKB6dJxAPY0cbgskZ60Z8zsxdJZfYYyskyNEOxlQn8Z902VTDh8pnxiMoilP wDb/nMYezrxympKx9drZk0C3FOtmAz2ot5yMNvEnZIR8JK/G6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGUtPeMbvTDACl63EH5yE9wcA1bIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZGQ1 M2Q5ZS0zODJkLTRmMTYtYjlkNC0wODA2N2Q1OThkODEvM2Y3MmNiZTctNmU5OS0z N2IzLWIxMWQtYzhmYjIxZDRiYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWRkNTNkOWUtMzgyZC00ZjE2LWI5 ZDQtMDgwNjdkNTk4ZDgxLzVkZDUzZDllLTM4MmQtNGYxNi1iOWQ0LTA4MDY3ZDU5 OGQ4MS5jcmwwHwYDVR0jBBgwFoAUjO0Z4oLcMQ2dpk83ULsDjVLj7i4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZGQ1M2Q5ZS0zODJkLTRmMTYtYjlkNC0wODA2 N2Q1OThkODEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABFcAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR+1fiVbVZG9ObvjlrfDkrb+TsIWCRt3Fc+368nc2biJXFsf5txSH Sw6hqL/PxWwEIT2XrZGY2q/zxWvLtYsVsjcUp2Slz82dU+2AUjT/jUtxFa0W3Ak1 qhaL7Ip0drdtEukLKjb0HvGtSZmObK61hKviDw/GbJmt5pZvQy+xsOa3lJGAyKZc 3rdFI3zyoZTKk/FiocnFtuBuSnMWi/EpfExxWlYDKDtYANo6mx51Bu1BjaFluU2t gEWiNTNKzAmPd3nqh7xqcJxGVIRkc3rbuMaToeH4qLDXNMUUYaBoGzuS7hkMNY59 3chelhJ5Pi+pURySp1d0n23IJWNYcW2UMg== -----END CERTIFICATE-----Generated at Sun Mar 22 17:42:55 2026 by rpki-client