$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/293f1574-042b-3086-8ed0-fa8956f04343.roa File: 293f1574-042b-3086-8ed0-fa8956f04343.roa (raw, json) Hash identifier: 5KwzaRCwotv9Y8gYqa9RrY8aYvRaERo6AZQ137Y2a60= Subject key identifier: 62:7D:F3:E3:5E:E2:4D:00:DE:97:17:D4:1F:F7:CF:96:86:B6:E6:C9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1F4A0A8AA6E11B7DBC98A540 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/293f1574-042b-3086-8ed0-fa8956f04343.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 852 IP address blocks: 2001:569:c00c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:0a:8a:a6:e1:1b:7d:bc:98:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=0dc6dff1-22ed-4d53-96e1-7e4365ab0fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:66:73:91:11:8f:a0:a5:44:89:81:c5:ba: 04:5e:55:5f:2a:f2:96:a6:dd:5c:68:75:c2:19:40: e0:05:6d:f0:aa:21:01:8a:9a:3e:55:f2:ff:1c:94: e7:0f:66:e8:9f:e1:34:12:18:d9:bb:68:d6:a9:36: 60:dc:35:93:d8:2a:57:3c:ec:c1:96:7a:1e:7a:12: a9:43:9f:0d:21:2a:26:fd:dc:d9:fa:05:f2:c4:f9: 77:9e:b5:f6:85:8d:bc:46:c7:ec:d3:9c:e0:7a:7c: 00:5e:a1:6a:f2:56:01:3a:64:78:5f:d4:7e:53:96: 85:fe:09:a5:20:db:d0:74:45:2e:79:ac:42:c6:63: 7f:e8:d1:38:27:02:37:67:2d:e3:a9:eb:81:1e:c9: dc:f3:50:df:d2:9b:c7:8b:ef:81:c5:17:b7:7a:db: fa:1f:79:34:94:b2:8c:02:44:0e:ae:12:38:de:e4: 37:a8:02:2f:a0:43:17:ea:b3:9c:24:44:f1:c0:3e: 82:69:1c:6a:75:01:51:52:58:ed:a5:cf:b4:3a:0c: 15:1f:96:0e:ae:46:9c:e4:a0:e7:0c:ce:9e:a3:6a: e5:d3:c9:4b:57:88:20:05:9b:0b:cc:c6:a7:ab:ca: 81:e2:ff:25:fc:43:6f:d4:05:ff:67:28:c2:2e:13: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7D:F3:E3:5E:E2:4D:00:DE:97:17:D4:1F:F7:CF:96:86:B6:E6:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/293f1574-042b-3086-8ed0-fa8956f04343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:c00c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:71:92:a2:23:d5:3e:8d:a6:c2:74:d0:7d:19:bd:30:9c:41: 66:4b:55:cc:09:71:18:e8:7e:68:f9:42:89:35:12:1d:40:14: 93:12:01:71:3a:94:78:93:b6:ef:de:15:cf:49:c6:8c:8b:04: 45:af:2a:74:3f:05:8e:b5:63:5c:5d:f0:ed:81:cb:2a:16:83: 27:e1:09:de:b7:cc:cf:40:af:18:db:67:a1:58:12:4e:21:bb: a0:1b:8b:03:54:f1:76:14:21:b7:a2:60:c6:36:07:73:29:54: a8:82:cf:c5:2b:fa:76:40:df:dc:c8:cf:7b:2f:45:07:d7:f9: e8:c1:53:19:f2:2f:09:70:a8:b8:dc:fe:66:d0:b1:ad:df:f1: d8:85:07:8a:41:56:7c:81:7d:e0:67:37:41:38:ae:29:de:68: e4:1d:55:25:41:51:55:f1:2a:35:4f:90:73:b7:61:52:9c:7f: 06:df:b0:3d:65:75:d3:a7:16:66:e6:ec:a7:0c:29:32:55:b1: 4a:ea:0e:97:48:53:8d:5c:a3:eb:77:1a:24:fe:aa:33:fc:39: 28:b3:86:7b:61:5d:ba:bf:20:2a:6f:19:0c:dd:4f:ad:ec:34: b4:31:cb:a5:dc:45:d8:90:03:3b:0e:01:e6:9a:8a:35:02:5a: f9:a2:f4:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fSgqKpuEbfbyYpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MGRjNmRmZjEtMjJlZC00ZDUzLTk2ZTEtN2U0MzY1YWIwZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3tmc5ERj6ClRImBxboEXlVfKvKWpt1caHXC GUDgBW3wqiEBipo+VfL/HJTnD2bon+E0EhjZu2jWqTZg3DWT2CpXPOzBlnoeehKp Q58NISom/dzZ+gXyxPl3nrX2hY28Rsfs05zgenwAXqFq8lYBOmR4X9R+U5aF/gml INvQdEUueaxCxmN/6NE4JwI3Zy3jqeuBHsnc81Df0pvHi++BxRe3etv6H3k0lLKM AkQOrhI43uQ3qAIvoEMX6rOcJETxwD6CaRxqdQFRUljtpc+0OgwVH5YOrkac5KDn DM6eo2rl08lLV4ggBZsLzManq8qB4v8l/ENv1AX/ZyjCLhPT/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGJ98+Ne4k0A3pcX1B/3z5aGtubJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjkzZjE1NzQtMDQyYi0z MDg2LThlZDAtZmE4OTU2ZjA0MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFacAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJhxkqIj1T6NpsJ00H0ZvTCcQWZLVcwJcRjofmj5Qok1Eh1AFJMS AXE6lHiTtu/eFc9JxoyLBEWvKnQ/BY61Y1xd8O2ByyoWgyfhCd63zM9ArxjbZ6FY Ek4hu6AbiwNU8XYUIbeiYMY2B3MpVKiCz8Ur+nZA39zIz3svRQfX+ejBUxnyLwlw qLjc/mbQsa3f8diFB4pBVnyBfeBnN0E4rineaOQdVSVBUVXxKjVPkHO3YVKcfwbf sD1lddOnFmbm7KcMKTJVsUrqDpdIU41co+t3GiT+qjP8OSizhnthXbq/ICpvGQzd T63sNLQxy6XcRdiQAzsOAeaaijUCWvmi9Ck= -----END CERTIFICATE-----Generated at Fri Mar 13 23:55:09 2026 by rpki-client