$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa File: 2455ae16-e22c-38fe-8c06-719fb9bee946.roa (raw, json) Hash identifier: AFjYUrPTE8ovuvl9xwbC1R9ddfav4l1CEuseCR/02Hc= Subject key identifier: 8C:AA:14:D3:6D:8B:41:22:F7:C8:81:B0:8A:10:82:31:82:3D:E5:A7 Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Certificate serial: 010D0C9F4328584D100CFD29D26312D1E6013700 Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 49 IP address blocks: 2610:20:6000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:fd:29:d2:63:12:d1:e6:01:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=3af89389-8c35-4b50-a5c5-de3c0f0586f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:fd:97:a0:bb:27:8e:cf:ee:3d:18:9b:68: eb:68:d3:27:25:d3:7e:fd:cc:83:46:57:e8:e1:02: 5d:1b:9b:f1:c3:9f:82:0a:e8:8f:cb:32:fc:71:a7: 73:f1:ae:11:65:a0:f2:6b:fb:39:98:4d:fd:d1:b7: 42:d4:3a:ac:cf:8d:ab:23:7f:5c:58:44:a4:0b:e5: bf:57:7e:45:bf:7a:e6:f4:6e:3b:85:ec:a8:58:29: d3:8e:03:7a:6d:2b:91:d0:d8:95:ab:03:df:59:7c: 71:5e:c2:fe:2c:2b:01:8d:92:a4:b6:fd:2b:55:46: 62:31:dc:08:9a:5d:15:39:d7:b8:cc:42:bd:0d:61: 4d:6a:3e:3d:68:cb:50:0e:08:28:95:ca:49:bf:2b: b6:09:93:9b:4b:75:17:2e:db:1a:3a:a6:2b:62:4b: 66:f4:16:c4:1b:23:4c:71:1a:ee:7b:67:4b:42:af: 34:d3:13:53:2a:b5:7e:af:a2:a9:a7:75:1c:7c:c3: 75:87:b1:35:d6:17:d0:9a:89:f8:7f:e7:a8:50:54: 96:ab:ca:0b:8b:fe:58:8c:84:9f:07:bc:92:b4:4d: aa:99:cf:d1:25:e7:e0:4c:08:10:57:a1:01:f2:54: 6e:62:cb:96:41:ce:89:ab:f5:01:cb:36:55:2a:66: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AA:14:D3:6D:8B:41:22:F7:C8:81:B0:8A:10:82:31:82:3D:E5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl X509v3 Authority Key Identifier: keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:6000::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b2:bd:83:fc:dc:97:a4:5a:64:3e:90:b8:a6:6b:e7:4b:3e: 0b:b3:15:ef:6d:22:e4:20:aa:28:97:dc:78:6e:3a:94:f5:e2: f8:c1:af:42:ee:6b:8b:94:be:55:f8:18:53:32:53:80:2f:e1: 39:4a:10:0d:8a:7d:f3:13:28:9e:9a:1f:af:7a:d9:5e:f7:46: 72:08:64:44:ca:b5:e9:60:2e:4c:a7:da:30:26:a8:2e:96:64: 67:c0:66:9c:6e:bc:b2:c3:05:fe:0a:f0:1a:5e:dc:40:6e:37: 7b:ad:fc:11:57:de:a9:2e:e3:d8:9c:8e:ce:ec:87:b7:03:49: 6d:d6:4e:27:62:ba:d1:99:8a:69:51:cd:aa:6a:6d:77:de:b7: 0e:14:ed:29:02:21:10:c5:cc:5f:27:8c:47:d1:1a:71:8e:15: 5c:22:3d:87:d7:71:99:37:da:ef:66:f3:2c:89:b0:06:f2:e1: c8:6f:9b:e4:77:d7:9e:b8:3e:9a:d8:a8:91:bf:e2:b5:ad:90: 0e:a0:9b:a7:13:40:1b:c2:9a:98:07:9b:a3:df:4d:c8:9f:05: 90:5e:e5:57:98:f9:d0:ad:5b:d7:2f:0c:8d:d4:ac:6d:2f:7c: 8d:ff:16:e4:7c:2d:33:ad:b2:4b:ce:0c:cb:b9:a0:e6:e6:88: 84:80:89:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0QDP0p0mMS0eYBNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh N2U5MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk M2FmODkzODktOGMzNS00YjUwLWE1YzUtZGUzYzBmMDU4NmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocP9l6C7J47P7j0Ym2jraNMnJdN+/cyDRlfo 4QJdG5vxw5+CCuiPyzL8cadz8a4RZaDya/s5mE390bdC1Dqsz42rI39cWESkC+W/ V35Fv3rm9G47heyoWCnTjgN6bSuR0NiVqwPfWXxxXsL+LCsBjZKktv0rVUZiMdwI ml0VOde4zEK9DWFNaj49aMtQDggolcpJvyu2CZObS3UXLtsaOqYrYktm9BbEGyNM cRrue2dLQq800xNTKrV+r6Kpp3UcfMN1h7E11hfQmon4f+eoUFSWq8oLi/5YjISf B7yStE2qmc/RJefgTAgQV6EB8lRuYsuWQc6Jq/UByzZVKmZtxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIyqFNNti0Ei98iBsIoQgjGCPeWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvMjQ1NWFlMTYtZTIyYy0z OGZlLThjMDYtNzE5ZmI5YmVlOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4 Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh YmMxMWE3ZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJhAAIGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAirK9g/zcl6RaZD6QuKZr50s+C7MV720i5CCqKJfceG46lPXi+MGv Qu5ri5S+VfgYUzJTgC/hOUoQDYp98xMonpofr3rZXvdGcghkRMq16WAuTKfaMCao LpZkZ8BmnG68ssMF/grwGl7cQG43e638EVfeqS7j2JyOzuyHtwNJbdZOJ2K60ZmK aVHNqmptd963DhTtKQIhEMXMXyeMR9EacY4VXCI9h9dxmTfa72bzLImwBvLhyG+b 5HfXnrg+mtiokb/ita2QDqCbpxNAG8KamAebo99NyJ8FkF7lV5j50K1b1y8MjdSs bS98jf8W5HwtM62yS84My7mg5uaIhICJaQ== -----END CERTIFICATE-----Generated at Sun Mar 22 14:56:22 2026 by rpki-client