$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: eNhHflsYNN9kuk540Zt4g7RXDwM4zPsuN7Y0IMsWG2k= Subject key identifier: E6:17:5D:E5:C0:2F:94:8D:D9:FB:4A:94:02:90:B6:E5:49:F6:50:52 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584D1F4A1B9FCF676DE548D8A080 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1b:9f:cf:67:6d:e5:48:d8:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=6e7bcc52-a5aa-4ebc-b07d-e92b7339a823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f5:02:bd:57:73:28:c3:c1:fa:20:7e:54:e9: bf:d0:81:d7:da:82:77:99:cd:03:19:31:93:f2:74: ad:d5:e1:bf:73:ff:14:9c:89:ff:3e:d6:20:50:1a: f8:88:e4:09:c4:a8:28:9e:19:f9:7a:06:11:4d:90: 72:f6:4b:01:0f:95:e8:07:fa:50:38:96:f9:bb:a9: 03:0f:a1:e4:82:52:da:d9:e0:52:53:db:29:2e:cc: 35:ba:26:b9:2f:fd:9a:d4:78:f0:50:79:af:e9:91: 94:75:3a:c2:d7:67:e1:c5:11:5a:b4:8e:17:6d:c2: 17:c3:66:c5:57:b3:4f:03:eb:97:48:d1:10:a3:3e: ee:b2:d9:b3:2d:ed:48:46:90:02:15:dd:0c:88:a1: 88:29:bb:0a:54:57:43:db:cc:47:7e:89:7f:27:c4: a3:84:fb:ef:9b:21:1a:4a:ad:8e:25:ce:42:1e:a4: 3e:f8:cd:a1:45:cc:e6:0f:cf:a5:c7:c9:47:3a:41: 63:c2:06:54:35:48:86:48:90:a9:60:ac:41:11:d8: fe:56:64:06:f4:a5:1b:17:72:7f:ef:85:a0:2d:a6: 6b:d0:58:07:fc:69:63:7c:ea:78:42:24:4a:d6:fe: 4b:24:af:b4:cd:fd:6a:ac:fd:d5:64:21:14:e7:03: 1e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:17:5D:E5:C0:2F:94:8D:D9:FB:4A:94:02:90:B6:E5:49:F6:50:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c2:5c:fc:42:67:b3:07:e9:c6:b1:cb:f7:33:31:a6:42:b0: 66:8b:54:e1:b7:dc:d8:0a:05:a4:8d:4e:28:2b:3b:3f:bf:47: 5b:da:a4:02:9c:3a:fd:9f:ee:e2:fd:44:60:d8:a6:c8:4c:3f: af:1d:41:60:05:f0:b6:01:69:1e:6f:41:d1:07:20:42:8b:bc: 3a:d0:be:d0:cc:86:c3:f6:62:16:3f:69:d0:fc:07:3b:6a:04: 2d:60:6d:c3:cb:21:c3:2e:a0:17:d4:c0:d6:9f:7d:48:10:65: 74:f7:0c:39:25:c3:7d:66:fa:ec:4c:f1:d6:ec:99:26:0d:9e: 23:77:56:ed:ac:70:b9:0c:09:82:d2:ac:5d:61:ce:52:08:74: f9:9e:53:15:99:ea:1c:5f:7b:9d:a4:87:06:4d:10:42:7f:8c: 99:69:41:18:a6:c7:ea:56:4a:1f:3b:67:28:34:50:c4:01:d8: 9a:a5:36:3f:25:3b:de:7c:dd:61:47:9c:63:18:90:dc:84:a3: e7:d1:38:3c:42:c5:18:b8:2c:b0:e5:5f:de:4b:c2:10:dc:23: f4:fc:73:5e:0a:c6:c4:57:d7:7f:69:b1:19:cd:e2:39:13:51: bf:fe:c2:a1:52:5f:f7:90:fd:ad:98:93:59:76:96:db:51:f1: 20:16:57:6f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0fShufz2dt5UjYoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NmU3YmNjNTItYTVhYS00ZWJjLWIwN2QtZTkyYjczMzlhODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/UCvVdzKMPB+iB+VOm/0IHX2oJ3mc0DGTGT 8nSt1eG/c/8UnIn/PtYgUBr4iOQJxKgonhn5egYRTZBy9ksBD5XoB/pQOJb5u6kD D6HkglLa2eBSU9spLsw1uia5L/2a1HjwUHmv6ZGUdTrC12fhxRFatI4XbcIXw2bF V7NPA+uXSNEQoz7ustmzLe1IRpACFd0MiKGIKbsKVFdD28xHfol/J8SjhPvvmyEa Sq2OJc5CHqQ++M2hRczmD8+lx8lHOkFjwgZUNUiGSJCpYKxBEdj+VmQG9KUbF3J/ 74WgLaZr0FgH/GljfOp4QiRK1v5LJK+0zf1qrP3VZCEU5wMedQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOYXXeXAL5SN2ftKlAKQtuVJ9lBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdwlz8QmezB+nGscv3MzGmQrBmi1Tht9zYCgWkjU4oKzs/v0db2qQC nDr9n+7i/URg2KbITD+vHUFgBfC2AWkeb0HRByBCi7w60L7QzIbD9mIWP2nQ/Ac7 agQtYG3DyyHDLqAX1MDWn31IEGV09ww5JcN9ZvrsTPHW7JkmDZ4jd1btrHC5DAmC 0qxdYc5SCHT5nlMVmeocX3udpIcGTRBCf4yZaUEYpsfqVkofO2coNFDEAdiapTY/ JTvefN1hR5xjGJDchKPn0Tg8QsUYuCyw5V/eS8IQ3CP0/HNeCsbEV9d/abEZzeI5 E1G//sKhUl/3kP2tmJNZdpbbUfEgFldv -----END CERTIFICATE-----Generated at Tue Mar 17 00:40:44 2026 by rpki-client