$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb43e775-3052-3980-b89e-0a91b1979969.roa File: cb43e775-3052-3980-b89e-0a91b1979969.roa (raw, json) Hash identifier: qLF/7mY+D9axxnZlY+NwCvp9W+MqUiPdww1Vo/h/ZUc= Subject key identifier: 3C:FD:86:10:39:9A:48:6A:41:E3:55:22:B4:6D:38:68:F8:77:AC:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D300AAAE595913B532CDCFE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb43e775-3052-3980-b89e-0a91b1979969.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 2001:579:1114::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:aa:e5:95:91:3b:53:2c:dc:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e53f70ba-509b-45e3-860a-7ab38440e135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:ff:94:c0:fd:87:d2:47:17:46:a9:33:f6: 9d:1b:56:f9:cf:af:b6:1a:4c:05:dd:50:65:c6:01: dd:1b:a7:f2:73:fe:c5:85:38:77:6f:72:4d:10:61: 9b:56:c7:a0:9b:c3:40:33:ef:df:13:d1:ee:89:e7: a9:14:48:ad:28:60:b1:40:f7:7c:c7:44:ac:b5:3c: 1f:09:9c:d4:eb:e4:81:f3:ac:70:66:5e:6f:6e:f6: ff:ef:c0:30:34:dd:cf:68:50:4e:a5:4f:46:7f:6c: 61:20:77:f2:e9:c7:88:df:41:e0:80:f3:90:ea:f0: 28:cf:f6:5e:58:8b:2b:54:f0:25:a0:c4:b3:3b:96: bb:7b:ce:8d:9f:e3:e4:a6:eb:91:bb:cf:29:2d:da: 07:75:07:e1:26:88:42:5a:42:1a:93:f5:c6:6e:48: 77:fd:47:f7:60:34:7c:f0:6c:d7:75:5d:ef:a1:03: 8c:3f:69:14:9e:86:9b:a6:2c:7d:98:06:4a:fa:d8: dd:12:13:6f:bd:a3:c6:56:ab:1f:0e:0a:36:d9:23: 61:cb:fa:8d:f2:4a:aa:c4:47:ba:d8:c8:42:4c:db: 1c:e8:30:99:fd:ee:91:75:b1:12:d2:41:8a:cb:ad: 35:9b:0e:6b:c5:fe:2f:1b:2a:24:09:e0:d3:9d:fa: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FD:86:10:39:9A:48:6A:41:E3:55:22:B4:6D:38:68:F8:77:AC:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb43e775-3052-3980-b89e-0a91b1979969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:1114::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:69:42:a5:12:26:20:c5:72:1d:b6:9f:9a:ac:a1:ee:f2:00: cc:80:50:d5:ab:c9:8f:fc:3d:ec:0c:ad:9e:b0:d4:78:94:49: 88:f3:d1:82:6f:31:7d:8d:cb:7d:f7:72:f0:41:70:6a:c1:86: 44:ed:cc:d3:f9:49:8e:b5:26:96:28:d0:5f:72:3b:3c:7e:d2: c2:52:c0:e0:aa:4e:4f:5c:07:a4:3c:b7:6c:0c:3e:2b:d4:51: 25:e6:56:25:50:3d:08:c4:10:1c:b8:18:0d:cb:12:6a:ed:82: ef:b9:63:0c:d2:b4:0f:36:87:ca:94:01:47:07:63:14:91:3c: 66:2d:d6:0a:e8:f6:3e:d0:a0:83:36:c8:7c:95:10:61:a5:a2: 4f:2f:c8:b7:8b:54:55:78:18:6e:81:e5:52:aa:5e:17:4a:47: 04:4f:0f:03:70:c1:6d:83:d1:54:f8:b8:3d:81:b1:bc:17:9c: ca:ad:dd:6c:8a:be:6c:1c:bb:84:83:05:0d:39:76:29:d7:1b: 30:06:39:98:6b:32:65:0b:f5:85:25:ed:c9:52:cd:2a:b1:ee: 17:82:8b:54:63:8b:b9:6e:d2:59:71:8a:b2:68:47:26:b5:24: 8d:09:33:35:e2:95:6b:ee:30:a4:b2:23:35:05:1b:f1:bb:da: 5d:2f:b1:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCqrllZE7Uyzc/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTUzZjcwYmEtNTA5Yi00NWUzLTg2MGEtN2FiMzg0NDBlMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu7/lMD9h9JHF0apM/adG1b5z6+2GkwF3VBl xgHdG6fyc/7FhTh3b3JNEGGbVsegm8NAM+/fE9HuieepFEitKGCxQPd8x0SstTwf CZzU6+SB86xwZl5vbvb/78AwNN3PaFBOpU9Gf2xhIHfy6ceI30HggPOQ6vAoz/Ze WIsrVPAloMSzO5a7e86Nn+PkpuuRu88pLdoHdQfhJohCWkIak/XGbkh3/Uf3YDR8 8GzXdV3voQOMP2kUnoabpix9mAZK+tjdEhNvvaPGVqsfDgo22SNhy/qN8kqqxEe6 2MhCTNsc6DCZ/e6RdbES0kGKy601mw5rxf4vGyokCeDTnfp2BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDz9hhA5mkhqQeNVIrRtOGj4d6xaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I0M2U3NzUtMzA1Mi0z OTgwLWI4OWUtMGE5MWIxOTc5OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeREU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENpQqUSJiDFch22n5qsoe7yAMyAUNWryY/8PewMrZ6w1HiUSYjz 0YJvMX2Ny333cvBBcGrBhkTtzNP5SY61JpYo0F9yOzx+0sJSwOCqTk9cB6Q8t2wM PivUUSXmViVQPQjEEBy4GA3LEmrtgu+5YwzStA82h8qUAUcHYxSRPGYt1gro9j7Q oIM2yHyVEGGlok8vyLeLVFV4GG6B5VKqXhdKRwRPDwNwwW2D0VT4uD2BsbwXnMqt 3WyKvmwcu4SDBQ05dinXGzAGOZhrMmUL9YUl7clSzSqx7heCi1Rji7lu0llxirJo Rya1JI0JMzXilWvuMKSyIzUFG/G72l0vsds= -----END CERTIFICATE-----Generated at Sun Mar 22 07:02:28 2026 by rpki-client