$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ff86f246-89ba-3402-8d9d-9c95a4a80405.roa File: ff86f246-89ba-3402-8d9d-9c95a4a80405.roa (raw, json) Hash identifier: 0hSjSQbUkPVIJyAqYvE7hF0Gd8rtikDC2jzfG/hN8P4= Subject key identifier: BA:02:C5:F2:BD:8A:3B:B7:09:81:DF:05:7A:4C:DA:88:E7:8A:43:C5 Certificate issuer: /CN=1b03e342-d588-4239-8704-6688d01760d9 Certificate serial: 010D0C9F4328584D55BA3BEBD022B176C164CD00 Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ff86f246-89ba-3402-8d9d-9c95a4a80405.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 397031 IP address blocks: 2620:57:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3b:eb:d0:22:b1:76:c1:64:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=597d5d74-0118-44df-b8bd-eb335a695a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:17:42:86:2c:b5:bc:3d:b5:da:7f:bf:ec: 31:d7:63:57:3d:d9:40:88:91:91:e1:bc:13:24:9b: 82:e7:0a:48:38:f6:ce:07:46:88:fc:cf:ae:49:e0: 3b:50:68:94:1c:0a:2e:49:5b:b4:1a:84:0e:e4:11: ca:6c:75:d0:29:d5:50:42:66:00:0c:28:82:18:60: f7:62:16:41:f2:2f:be:75:27:17:8d:c4:61:0e:1a: d3:50:94:d1:54:99:2c:c3:bf:28:ad:32:39:62:a5: db:39:be:aa:20:64:74:a6:5a:5f:29:9a:e0:38:2a: 8b:d1:49:88:23:45:91:c8:b0:a7:09:60:be:1d:11: fe:81:d6:2b:f0:1b:3c:fd:09:2a:38:06:da:7f:6b: b5:5d:5e:ac:c7:5f:be:fb:c0:39:15:be:f0:87:6d: ee:67:b8:72:e8:4f:70:1d:67:3f:52:ae:d1:2f:7e: f5:4d:cf:9b:ad:a9:20:c2:f3:84:1e:67:cb:2e:c5: c3:d9:45:cc:74:af:f1:8b:b7:f7:62:8d:80:30:6f: 59:f5:bf:26:16:41:c3:af:21:be:ef:88:e2:5e:fa: f0:9e:2c:96:af:08:ed:85:d6:c5:21:65:a8:8d:92: fa:49:67:b6:fc:63:38:3d:62:1c:01:6a:7e:5c:a4: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:02:C5:F2:BD:8A:3B:B7:09:81:DF:05:7A:4C:DA:88:E7:8A:43:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/ff86f246-89ba-3402-8d9d-9c95a4a80405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl X509v3 Authority Key Identifier: keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer sbgp-ipAddrBlock: critical IPv6: 2620:57:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:e3:38:9d:e4:ec:7c:d9:d8:c7:02:44:8e:dc:fe:33:b5:43: ae:6c:02:80:c5:7c:6e:24:04:2f:e0:a8:52:eb:c2:d1:d9:33: ba:f6:d2:7f:87:c9:5c:d1:ab:25:7c:a7:fe:00:28:d5:1f:67: 33:a8:18:b2:33:e5:2b:96:e7:cb:d8:68:4d:65:87:67:1b:ef: 54:a0:dd:95:3d:20:08:c3:55:2e:35:7d:ec:da:e4:5a:b8:19: ff:92:ed:59:20:86:74:10:f6:09:93:f2:b4:5f:e2:fa:e9:f7: a1:ed:6c:e5:01:ba:67:84:31:7f:ba:e5:7b:ee:b4:56:8e:13: e5:75:ba:45:a5:4f:c4:50:8a:62:eb:b1:a2:6e:c9:d1:ea:08: bd:31:e3:9c:96:64:17:90:a2:35:bb:ff:8a:c3:18:69:53:67: 3f:b0:22:2d:bc:28:ee:fa:57:34:5c:0f:64:fc:c0:ac:b5:95: 15:f2:00:01:30:39:80:56:18:5e:03:b0:e8:5d:c5:e7:c3:06: 91:1e:3e:83:c8:ff:76:6d:70:82:55:ae:fa:9b:34:4a:21:4c: 89:49:e9:05:e9:23:e4:39:91:c1:23:16:93:fe:4c:84:dd:5a: 8b:0e:d0:fc:59:06:a2:08:41:45:ca:f7:62:ed:4e:6b:15:f8: ac:87:0c:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Vujvr0CKxdsFkzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIwM2UzNDItZDU4OC00MjM5LTg3MDQtNjY4OGQwMTc2 MGQ5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NTk3ZDVkNzQtMDExOC00NGRmLWI4YmQtZWIzMzVhNjk1YTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfIXQoYstbw9tdp/v+wx12NXPdlAiJGR4bwT JJuC5wpIOPbOB0aI/M+uSeA7UGiUHAouSVu0GoQO5BHKbHXQKdVQQmYADCiCGGD3 YhZB8i++dScXjcRhDhrTUJTRVJksw78orTI5YqXbOb6qIGR0plpfKZrgOCqL0UmI I0WRyLCnCWC+HRH+gdYr8Bs8/QkqOAbaf2u1XV6sx1+++8A5Fb7wh23uZ7hy6E9w HWc/Uq7RL371Tc+brakgwvOEHmfLLsXD2UXMdK/xi7f3Yo2AMG9Z9b8mFkHDryG+ 74jiXvrwniyWrwjthdbFIWWojZL6SWe2/GM4PWIcAWp+XKSLMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLoCxfK9iju3CYHfBXpM2ojnikPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjAz ZTM0Mi1kNTg4LTQyMzktODcwNC02Njg4ZDAxNzYwZDkvZmY4NmYyNDYtODliYS0z NDAyLThkOWQtOWM5NWE0YTgwNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIwM2UzNDItZDU4OC00MjM5LTg3 MDQtNjY4OGQwMTc2MGQ5LzFiMDNlMzQyLWQ1ODgtNDIzOS04NzA0LTY2ODhkMDE3 NjBkOS5jcmwwHwYDVR0jBBgwFoAUE3B5Q6GpUgJKNAaz0vqM7Y/ikSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjAzZTM0Mi1kNTg4LTQyMzktODcwNC02Njg4 ZDAxNzYwZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAV+AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMbjOJ3k7HzZ2McCRI7c/jO1Q65sAoDFfG4kBC/gqFLrwtHZM7r2 0n+HyVzRqyV8p/4AKNUfZzOoGLIz5SuW58vYaE1lh2cb71Sg3ZU9IAjDVS41feza 5Fq4Gf+S7VkghnQQ9gmT8rRf4vrp96HtbOUBumeEMX+65XvutFaOE+V1ukWlT8RQ imLrsaJuydHqCL0x45yWZBeQojW7/4rDGGlTZz+wIi28KO76VzRcD2T8wKy1lRXy AAEwOYBWGF4DsOhdxefDBpEePoPI/3ZtcIJVrvqbNEohTIlJ6QXpI+Q5kcEjFpP+ TITdWosO0PxZBqIIQUXK92LtTmsV+KyHDM4= -----END CERTIFICATE-----Generated at Sat Apr 4 19:09:02 2026 by rpki-client