$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa File: 0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa (raw, json) Hash identifier: tdToB3y1poaqfJnd2fUEbIzucyo9pSHFTEOHZtIXEGo= Subject key identifier: 96:82:84:EB:BB:DE:45:8F:42:35:0A:F9:50:A6:16:69:5C:41:AD:71 Certificate issuer: /CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Certificate serial: 010D0C9F4328584D59EA5D61A17B707E43978D80 Authority key identifier: 95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14585 IP address blocks: 2604:65c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5d:61:a1:7b:70:7e:43:97:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=2cbd2c31-7459-4f71-82d6-a148eed3f761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:63:ae:c4:40:a7:2d:4f:66:24:bf:ef:01:b1: c8:d2:2d:63:6c:82:42:cf:7d:1b:11:81:93:40:76: 41:57:11:2c:d9:2f:89:69:b8:ee:3e:44:f9:1e:2a: 33:ea:e9:a2:6e:01:77:2e:83:b3:e6:81:9d:48:28: ab:6e:6a:70:ff:ff:7b:75:bc:3c:28:9b:0f:7b:ba: 4f:40:25:36:ea:cb:f7:25:8d:86:14:9e:86:0e:32: 49:77:07:61:ee:8a:53:67:e3:ac:eb:0d:d8:43:21: b3:42:c5:cd:6e:e0:3f:28:57:0f:83:be:03:b3:92: b7:df:89:d7:ab:49:84:9d:8b:2c:09:e1:85:cb:c7: da:8b:52:a5:ba:f4:43:86:4e:75:30:fb:65:0f:f0: 56:8b:a1:4c:a9:ba:02:91:76:dc:4d:af:06:5e:4e: 6c:ff:af:33:51:58:01:0e:dd:f5:4c:01:0a:9d:88: d0:8b:e3:77:89:09:fa:a8:46:b4:d5:8b:46:eb:60: 64:5b:a7:92:95:76:34:60:77:e2:2d:b4:c8:eb:7b: ef:63:13:0d:cb:e1:5a:c7:a0:32:3a:b1:e0:61:97: c8:d9:9e:6a:0f:87:a7:dd:76:9d:71:b6:6a:40:d8: 9b:e3:1c:ea:2a:31:42:a1:11:a7:f9:c6:ff:66:4e: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:84:EB:BB:DE:45:8F:42:35:0A:F9:50:A6:16:69:5C:41:AD:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl X509v3 Authority Key Identifier: keyid:95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer sbgp-ipAddrBlock: critical IPv6: 2604:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d3:5e:b9:bb:07:4b:38:3c:c7:f9:ce:6b:b1:3a:fe:9d:f8: 18:bb:82:03:2e:26:e8:4a:c5:42:0e:ce:ce:7a:02:84:8a:02: d9:bf:f6:27:6f:bb:d9:e5:d1:3d:40:d4:d9:0c:40:46:f8:a5: f2:7d:22:5b:78:ee:50:40:29:3b:da:e3:fd:b8:51:5b:fb:0e: 60:6f:15:84:2a:54:24:3b:00:46:19:e7:c4:a3:4b:f4:4f:7a: 64:80:3d:3d:c4:98:bd:62:cf:b0:71:56:5f:89:d8:2f:3e:0e: 1a:72:29:e7:93:69:6d:5d:da:da:fb:5c:c3:be:24:1a:d6:19: 56:92:dd:4e:42:c0:7f:f1:d7:39:cc:ea:1e:e7:75:06:ca:54: 48:dc:25:d8:bb:b7:14:f4:55:7c:cf:e5:ad:eb:4a:40:99:d8: 5b:e9:86:10:5e:69:87:a2:b6:62:73:1c:b3:2a:bb:40:ed:1c: a5:8f:bb:ae:91:8c:0a:0d:03:b3:da:ef:1f:f7:9b:6b:3e:db: 19:52:64:47:b4:ac:de:f3:a2:bd:91:ca:53:59:ed:e1:d3:6a: e9:9c:b2:ed:05:cb:2d:a0:04:85:5d:92:6d:03:d9:0f:9e:99: 9c:42:9b:e2:03:b7:21:85:5a:dd:dc:1d:8c:1c:f5:8f:c5:86: f8:f4:9e:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Z6l1hoXtwfkOXjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QzODE2MjYtMGI3MC00YmJjLWIyZjEtMGVhYzRmMDgw MWY2MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MmNiZDJjMzEtNzQ1OS00ZjcxLTgyZDYtYTE0OGVlZDNmNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWOuxECnLU9mJL/vAbHI0i1jbIJCz30bEYGT QHZBVxEs2S+JabjuPkT5Hioz6umibgF3LoOz5oGdSCirbmpw//97dbw8KJsPe7pP QCU26sv3JY2GFJ6GDjJJdwdh7opTZ+Os6w3YQyGzQsXNbuA/KFcPg74Ds5K334nX q0mEnYssCeGFy8fai1KluvRDhk51MPtlD/BWi6FMqboCkXbcTa8GXk5s/68zUVgB Dt31TAEKnYjQi+N3iQn6qEa01YtG62BkW6eSlXY0YHfiLbTI63vvYxMNy+Fax6Ay OrHgYZfI2Z5qD4en3XadcbZqQNib4xzqKjFCoRGn+cb/Zk6bTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJaChOu73kWPQjUK+VCmFmlcQa1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4 MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFjNGYwODAxZjYvMGUxN2Y2YTEtOWYyNi0z OGYxLTkzYmMtMGMwYTZkYTY4MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2QzODE2MjYtMGI3MC00YmJjLWIy ZjEtMGVhYzRmMDgwMWY2L2NkMzgxNjI2LTBiNzAtNGJiYy1iMmYxLTBlYWM0ZjA4 MDFmNi5jcmwwHwYDVR0jBBgwFoAUleDTwKqq2PWm8uGCyVlyFvBiUfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFj NGYwODAxZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBx0165uwdLODzH+c5rsTr+nfgYu4IDLiboSsVCDs7OegKEigLZv/Yn b7vZ5dE9QNTZDEBG+KXyfSJbeO5QQCk72uP9uFFb+w5gbxWEKlQkOwBGGefEo0v0 T3pkgD09xJi9Ys+wcVZfidgvPg4acinnk2ltXdra+1zDviQa1hlWkt1OQsB/8dc5 zOoe53UGylRI3CXYu7cU9FV8z+Wt60pAmdhb6YYQXmmHorZicxyzKrtA7Rylj7uu kYwKDQOz2u8f95trPtsZUmRHtKze86K9kcpTWe3h02rpnLLtBcstoASFXZJtA9kP npmcQpviA7chhVrd3B2MHPWPxYb49J5Z -----END CERTIFICATE-----Generated at Thu Apr 9 02:30:08 2026 by rpki-client