$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa File: 67ad4caf-49f0-33da-b621-fa3822cdc420.roa (raw, json) Hash identifier: jZuxod2a2FlqgZ2lVXigwfXz4RotELihVUN+z3kmKFk= Subject key identifier: F4:3F:1E:B7:FA:5F:51:27:32:72:A9:35:A3:88:03:BE:34:D7:E1:93 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D143D2E26DC39C291B0685780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 852 IP address blocks: 2001:568:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:2e:26:dc:39:c2:91:b0:68:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=45c3b713-8a82-4750-aeeb-8fecdf0f2e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:c4:55:f9:30:22:a9:ff:da:0d:6c:37:ca: 67:ef:32:26:0c:c3:41:b7:95:ee:23:48:46:0c:17: f6:f4:5c:bb:b5:8d:6f:6b:9c:6b:c4:a8:28:1e:5c: 18:e2:49:97:fe:22:d0:21:63:c6:b7:b3:39:dd:79: d4:cd:8c:88:6c:20:b7:95:69:6d:89:dd:6b:34:ca: d4:66:8c:3e:eb:ad:c6:8d:5b:af:e4:d7:28:7f:dc: d0:58:36:f6:7e:8a:3a:77:bc:e3:d4:00:56:9a:f8: 18:54:11:d1:5c:9c:f7:60:e3:ce:ef:f2:51:5c:e9: 56:a4:b4:ab:19:72:d0:0c:6e:74:3a:9a:bc:11:44: 59:c6:13:97:2d:91:0e:f1:80:f1:6d:bf:5c:9b:df: 92:70:ea:7b:9d:42:20:51:81:a6:c6:a2:8b:d4:aa: 93:76:fb:ab:26:07:63:bf:ab:93:7c:06:68:18:e4: 61:3d:d1:1b:5a:5c:0d:d7:25:17:20:36:b1:27:66: d7:db:82:01:f6:98:69:ab:af:6b:93:e8:ed:94:c5: 8d:04:06:88:07:7a:48:e8:69:44:2a:e6:34:f2:95: 48:83:9c:c9:1a:34:b3:c1:e8:b6:1c:9b:b0:ce:fe: 66:b8:36:58:b2:ce:92:71:99:2f:9d:8d:77:2f:76: fd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3F:1E:B7:FA:5F:51:27:32:72:A9:35:A3:88:03:BE:34:D7:E1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:203::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cb:b1:d4:96:19:10:6e:58:7b:a4:65:89:db:f7:9b:2e:f0: 75:05:8e:6d:d3:a5:4d:00:b3:20:5f:70:65:1c:2b:a4:2e:aa: f7:6d:20:d1:58:8d:eb:8f:44:83:03:81:01:2c:30:a5:93:85: 25:9f:7b:bd:e6:d3:9e:4b:4e:52:ce:80:d5:db:49:f1:fb:08: fe:a1:1f:d5:f3:ce:b6:99:59:70:0b:35:94:18:ef:52:2a:72: 28:ec:9d:1a:eb:c3:7a:66:5f:32:29:af:8c:aa:51:6c:50:2e: 41:be:db:5c:99:ba:80:79:3e:ba:31:1b:56:16:c6:be:e2:6c: 78:d6:68:7d:a2:31:d7:da:42:63:f3:db:d1:d2:96:6f:7f:4e: 95:ea:32:eb:87:ae:f2:4b:5d:3e:ad:f6:f9:9f:7e:bb:0b:b2: e0:f3:58:c6:53:d5:58:93:48:00:3e:5e:2a:50:b9:da:a0:a6: 8d:cb:19:23:fb:37:74:04:88:fd:db:df:5a:8e:60:f1:3b:57: 50:2a:b2:ff:d7:e0:a8:e9:a0:94:c3:ff:d0:4c:e7:1f:54:16: 39:1d:17:6d:17:14:07:bf:ee:9a:dd:81:99:75:b4:e9:79:5a: 4d:a0:9d:d9:1a:8b:29:b3:85:e0:07:18:f9:04:7c:9a:2f:80: d3:64:e7:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPS4m3DnCkbBoV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDVjM2I3MTMtOGE4Mi00NzUwLWFlZWItOGZlY2RmMGYyZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHfEVfkwIqn/2g1sN8pn7zImDMNBt5XuI0hG DBf29Fy7tY1va5xrxKgoHlwY4kmX/iLQIWPGt7M53XnUzYyIbCC3lWltid1rNMrU Zow+663GjVuv5Ncof9zQWDb2foo6d7zj1ABWmvgYVBHRXJz3YOPO7/JRXOlWpLSr GXLQDG50Opq8EURZxhOXLZEO8YDxbb9cm9+ScOp7nUIgUYGmxqKL1KqTdvurJgdj v6uTfAZoGORhPdEbWlwN1yUXIDaxJ2bX24IB9phpq69rk+jtlMWNBAaIB3pI6GlE KuY08pVIg5zJGjSzwei2HJuwzv5muDZYss6ScZkvnY13L3b9zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPQ/Hrf6X1EnMnKpNaOIA7401+GTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjdhZDRjYWYtNDlmMC0z M2RhLWI2MjEtZmEzODIyY2RjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAID MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnLsdSWGRBuWHukZYnb95su8HUFjm3TpU0AsyBfcGUcK6Quqvdt INFYjeuPRIMDgQEsMKWThSWfe73m055LTlLOgNXbSfH7CP6hH9XzzraZWXALNZQY 71IqcijsnRrrw3pmXzIpr4yqUWxQLkG+21yZuoB5ProxG1YWxr7ibHjWaH2iMdfa QmPz29HSlm9/TpXqMuuHrvJLXT6t9vmffrsLsuDzWMZT1ViTSAA+XipQudqgpo3L GSP7N3QEiP3b31qOYPE7V1Aqsv/X4KjpoJTD/9BM5x9UFjkdF20XFAe/7prdgZl1 tOl5Wk2gndkaiymzheAHGPkEfJovgNNk55o= -----END CERTIFICATE-----Generated at Fri Mar 13 23:54:15 2026 by rpki-client