$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa File: 60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (raw, json) Hash identifier: 1vJj+PPaHOu+umBl7RPsh9i3WI+dOW+ehU0uM8XhF70= Subject key identifier: 14:43:93:19:DA:39:53:C0:67:F2:89:E1:31:47:C8:D0:70:C7:5A:BB Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584D100CF86F4ABCCE5B0AAEB880 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 32058 IP address blocks: 2620:0:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f8:6f:4a:bc:ce:5b:0a:ae:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=08475194-3eea-403a-83e9-78960c21625f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:2c:ed:79:0a:f4:5d:d9:15:41:73:eb:9b: a5:43:64:d6:58:9c:52:df:c2:69:9b:43:c9:0c:0e: 00:f0:42:c9:9f:b3:39:e7:62:59:8f:40:1f:65:3c: 40:0d:13:99:d1:a2:43:f9:e7:73:b1:00:7f:06:00: d9:18:9a:dd:0a:b4:5a:d6:42:fd:c3:ea:0b:ac:7f: cd:a6:29:c7:96:64:28:a7:17:e5:7f:da:ac:af:85: 4d:1d:7b:22:12:40:3c:31:61:51:c7:ec:7c:cc:69: 12:e8:77:d9:9f:35:30:8e:a4:42:6e:19:f8:1d:05: 76:44:f3:70:d4:36:e0:b2:66:22:0c:fc:10:24:ba: a6:89:a1:ed:b0:2e:4a:ad:91:9a:57:6b:5e:da:0d: 55:f0:ce:42:9d:76:b0:2a:b3:63:73:ec:95:8a:0d: e0:de:f0:d7:5b:c1:3c:f7:8f:f7:1e:62:09:8b:26: b7:9a:da:84:ba:10:18:66:58:3d:d8:32:99:b8:15: 53:90:b4:d8:72:8b:5e:89:fa:1c:1d:cc:15:2a:4e: 04:58:a9:71:94:12:df:04:0e:53:51:19:c4:63:fe: 0b:a6:a6:2d:22:ae:3f:c7:36:ad:9c:4d:f0:6f:41: 83:1e:98:51:7c:a0:0a:8b:97:86:e5:fb:44:c6:18: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:43:93:19:DA:39:53:C0:67:F2:89:E1:31:47:C8:D0:70:C7:5A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:37:a1:5d:10:1e:8b:f0:1c:df:61:2f:63:d2:09:3b:70:68: 9e:54:05:cd:40:81:05:49:85:3c:4a:6e:ab:7a:43:80:f0:b8: 39:7e:df:b7:f6:20:e6:a5:e6:dd:8b:c7:e0:95:2a:bb:98:6d: ce:86:11:8e:01:7e:f6:bc:df:90:66:b0:92:a7:00:b6:ec:cc: fe:30:18:f3:15:6e:12:ea:6e:f4:e2:6d:85:29:c9:40:8d:eb: 59:e6:26:4b:17:18:e8:89:42:77:38:5f:dc:00:01:f1:a8:15: 29:55:5c:1b:17:e6:97:cf:dc:c1:5c:0f:8c:8b:9a:2d:a7:e3: 26:a8:5d:de:c7:44:24:f0:4b:b9:62:0b:ea:9d:39:09:28:4c: e6:2a:51:ec:43:d2:1d:1e:4f:02:33:4c:71:3c:b8:38:a8:3a: b9:73:44:e6:d5:5d:9a:6b:ee:34:b0:a4:08:89:50:df:bc:70: f5:49:4b:5e:03:27:38:3a:55:40:21:ea:8f:33:a7:7c:b8:6d: 22:07:2f:78:63:db:7f:79:cc:05:a7:d1:85:4b:dd:04:0c:80: fb:9d:1b:47:04:69:ee:ca:6d:69:a7:98:33:2d:b7:a5:87:6d: fa:a2:9a:75:20:61:34:40:9d:ed:d4:14:ae:c9:42:d3:af:35: 53:8e:8d:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0QDPhvSrzOWwquuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk MDg0NzUxOTQtM2VlYS00MDNhLTgzZTktNzg5NjBjMjE2MjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xss7XkK9F3ZFUFz65ulQ2TWWJxS38Jpm0PJ DA4A8ELJn7M552JZj0AfZTxADROZ0aJD+edzsQB/BgDZGJrdCrRa1kL9w+oLrH/N pinHlmQopxflf9qsr4VNHXsiEkA8MWFRx+x8zGkS6HfZnzUwjqRCbhn4HQV2RPNw 1DbgsmYiDPwQJLqmiaHtsC5KrZGaV2te2g1V8M5CnXawKrNjc+yVig3g3vDXW8E8 94/3HmIJiya3mtqEuhAYZlg92DKZuBVTkLTYcoteifocHcwVKk4EWKlxlBLfBA5T URnEY/4LpqYtIq4/xzatnE3wb0GDHphRfKAKi5eG5ftExhgbfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRDkxnaOVPAZ/KJ4TFHyNBwx1q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvNjBkZjZmOGYtMWI3Zi0z MmU2LThhYTMtZjdhYWYxYzJjZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJQ3oV0QHovwHN9hL2PSCTtwaJ5UBc1AgQVJhTxKbqt6Q4DwuDl+ 37f2IOal5t2Lx+CVKruYbc6GEY4Bfva835BmsJKnALbszP4wGPMVbhLqbvTibYUp yUCN61nmJksXGOiJQnc4X9wAAfGoFSlVXBsX5pfP3MFcD4yLmi2n4yaoXd7HRCTw S7liC+qdOQkoTOYqUexD0h0eTwIzTHE8uDioOrlzRObVXZpr7jSwpAiJUN+8cPVJ S14DJzg6VUAh6o8zp3y4bSIHL3hj2395zAWn0YVL3QQMgPudG0cEae7KbWmnmDMt t6WHbfqimnUgYTRAne3UFK7JQtOvNVOOjaE= -----END CERTIFICATE-----Generated at Fri Mar 13 11:19:52 2026 by rpki-client