$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa File: f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa (raw, json) Hash identifier: D0dbeL0MtewpDjWNFIqivq9PQ3yP/vXZNBaaqVX9mWA= Subject key identifier: 4B:44:EA:70:3B:F3:49:AF:A9:76:89:A9:A2:F4:B5:41:E0:42:0E:40 Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec Certificate serial: 010D0C9F4328584D0912686175887F2F1653A800 Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396871 IP address blocks: 2604:d0c0::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:68:61:75:88:7f:2f:16:53:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=5d2f23f2-57b0-40da-a922-2707c3ad0244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:d2:de:d1:8b:3b:51:36:fa:88:1c:ca:81: 1b:32:f7:4d:ab:bb:63:92:7e:98:9c:fa:5e:74:15: 09:78:db:db:49:17:9f:7f:f2:33:08:1a:34:2b:3f: b2:7c:cf:fa:76:7f:f7:8c:d3:7a:67:1d:24:39:a0: b0:5c:e6:32:1c:ef:88:5f:47:74:a7:49:d7:9d:6a: a2:4e:1c:e8:25:78:c2:7f:83:c3:e7:84:7e:cf:72: 78:1b:2b:5e:f4:c6:72:4b:d3:df:67:cb:71:e2:f6: aa:07:bd:c6:27:7c:a6:ec:44:cf:30:2d:fe:30:f0: 3e:64:a1:ef:95:47:91:83:dd:e3:80:d1:16:8e:f9: ea:54:9e:b6:26:14:b2:5b:39:1d:8e:8e:84:a9:76: 92:d6:8d:c3:8d:b2:30:2b:cd:fe:7c:15:85:e8:34: 80:cb:07:89:62:79:64:05:83:ca:39:e4:4d:ae:46: 44:06:44:69:5a:ad:e6:99:f7:03:92:3a:1b:21:4e: f6:98:df:46:1b:8b:4c:39:4d:eb:bf:5d:4a:05:b6: 86:b8:51:e1:28:10:80:c5:0c:52:67:75:9b:ae:d3: 36:5e:18:25:1a:6b:40:08:32:e3:e7:f9:63:95:36: a6:fb:d2:65:e2:cf:73:e3:46:e6:fa:b8:0e:9a:52: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:44:EA:70:3B:F3:49:AF:A9:76:89:A9:A2:F4:B5:41:E0:42:0E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl X509v3 Authority Key Identifier: keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer sbgp-ipAddrBlock: critical IPv6: 2604:d0c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:75:a5:f4:08:09:ab:80:37:57:ef:59:cd:a0:07:41:6e:70: f7:63:25:73:9c:08:67:fe:25:cb:01:74:45:9e:da:31:af:4d: 0f:1c:1a:98:b1:b9:72:14:96:d9:02:f6:56:1d:de:49:82:61: 1c:f0:af:7e:cd:ac:2b:f2:b6:e0:4e:01:d0:ae:be:a9:f1:1a: 08:f3:56:a8:8a:9e:2a:94:76:24:c0:b4:d7:17:15:87:cf:ac: 04:fe:00:8d:9c:02:69:fe:cf:6c:95:85:47:e5:24:a5:17:02: 11:93:30:75:7b:8d:73:71:dc:c1:1f:af:9d:28:9c:80:da:ec: c3:33:3a:da:d0:72:02:92:95:ae:33:d4:bf:94:e6:29:e9:f4: fc:37:51:8c:03:5d:94:e6:ab:cf:1c:c4:fd:a5:99:2a:2d:e1: ba:22:97:ac:64:1f:ee:e1:b7:9a:65:65:e8:1d:1d:93:52:7e: 8a:cc:a7:27:8f:fb:31:fb:65:a7:05:82:54:7f:2e:b8:7f:d0: 9b:ef:36:02:5f:3a:a7:05:aa:31:1e:ce:37:d3:4d:b9:90:d7: 6c:0f:39:de:22:2c:7e:cc:88:e2:05:6a:0f:3a:0d:9c:ea:38: 54:d5:8f:80:da:ea:63:0b:1e:14:d5:de:2c:b4:2e:8d:a8:a2: fa:4a:ec:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0JEmhhdYh/LxZTqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1 MWVjMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NWQyZjIzZjItNTdiMC00MGRhLWE5MjItMjcwN2MzYWQwMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5jS3tGLO1E2+ogcyoEbMvdNq7tjkn6YnPpe dBUJeNvbSReff/IzCBo0Kz+yfM/6dn/3jNN6Zx0kOaCwXOYyHO+IX0d0p0nXnWqi ThzoJXjCf4PD54R+z3J4Gyte9MZyS9PfZ8tx4vaqB73GJ3ym7ETPMC3+MPA+ZKHv lUeRg93jgNEWjvnqVJ62JhSyWzkdjo6EqXaS1o3DjbIwK83+fBWF6DSAyweJYnlk BYPKOeRNrkZEBkRpWq3mmfcDkjobIU72mN9GG4tMOU3rv11KBbaGuFHhKBCAxQxS Z3WbrtM2XhglGmtACDLj5/ljlTam+9Jl4s9z40bm+rgOmlIAgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEtE6nA780mvqXaJqaL0tUHgQg5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvZjE3NzBlNGMtMTZjYi0z MDFhLWFhYzgtYmE3ZWM5OGI4ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2 MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4 NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3 MmRlODUxZWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTQwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2daX0CAmrgDdX71nNoAdBbnD3YyVznAhn/iXLAXRFntoxr00PHBqY sblyFJbZAvZWHd5JgmEc8K9+zawr8rbgTgHQrr6p8RoI81aoip4qlHYkwLTXFxWH z6wE/gCNnAJp/s9slYVH5SSlFwIRkzB1e41zcdzBH6+dKJyA2uzDMzra0HICkpWu M9S/lOYp6fT8N1GMA12U5qvPHMT9pZkqLeG6IpesZB/u4beaZWXoHR2TUn6KzKcn j/sx+2WnBYJUfy64f9Cb7zYCXzqnBaoxHs430025kNdsDzneIix+zIjiBWoPOg2c 6jhU1Y+A2upjCx4U1d4stC6NqKL6SuzJ -----END CERTIFICATE-----Generated at Fri Mar 13 09:58:19 2026 by rpki-client