$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa File: b5060e1b-5649-3da3-90ed-6368bf81760a.roa (raw, json) Hash identifier: c9Mh0Gan1EnImawFn/otKlOc7TvPC7CTQg3jPJg2POA= Subject key identifier: F5:36:3D:3F:2B:36:8B:CF:24:3B:1D:F9:30:DD:BB:BE:F6:2E:8C:7B Certificate issuer: /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Certificate serial: 010D0C9F4328584D386A4D2AB35CE05FC95EADC0 Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 14228 IP address blocks: 2620:d5:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4d:2a:b3:5c:e0:5f:c9:5e:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=79117a1c-fdd1-467c-a8bb-a78750f275f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:11:c0:ea:41:b5:9e:e9:09:44:6a:67:fa: 9d:0c:af:94:98:08:11:50:54:33:ba:79:82:13:91: c8:5e:fa:34:91:27:87:44:b6:e5:cd:42:b4:98:1b: 48:68:c1:51:f8:9b:07:2c:43:72:01:1b:6e:29:8e: 1b:38:73:ae:ac:b5:7f:43:d2:22:17:a3:96:d5:26: 01:75:d4:ca:0d:55:6c:8a:f3:a7:18:02:51:c5:89: b7:ca:2e:b3:fb:39:0a:74:ee:58:92:2a:0f:fb:7d: f2:06:3d:88:57:e6:75:9e:0a:11:1c:73:c8:3c:65: d7:db:c8:90:55:50:34:0d:ac:27:7d:99:e5:43:6e: 3d:9c:f9:a8:7e:66:de:6a:07:69:e2:8c:f4:97:f7: a1:2f:11:6a:bc:96:37:ed:8c:4e:0a:54:4b:fd:64: 4d:df:08:b9:b6:b5:12:dd:fa:8c:23:23:f4:6d:c1: 53:2a:d8:ef:88:f3:4d:92:ed:9d:a9:e1:c1:19:4e: cd:30:b2:9f:b8:8b:12:5e:6e:6a:d8:b4:0b:b7:f5: 84:de:b1:26:5a:d2:54:4e:3e:f8:b5:3a:b6:5f:a1: f1:96:3b:63:f0:33:f7:d4:ac:14:ad:f7:10:d4:96: 80:a7:17:81:db:f3:0c:d4:80:22:51:88:4b:af:24: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:36:3D:3F:2B:36:8B:CF:24:3B:1D:F9:30:DD:BB:BE:F6:2E:8C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl X509v3 Authority Key Identifier: keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:33:c6:12:ac:b4:68:da:51:8b:7f:22:15:60:5f:be:37:4d: fd:4b:5f:99:54:6c:b3:23:62:43:7f:bf:75:58:4d:82:21:47: 29:58:2e:91:7b:ea:e9:53:eb:cb:03:8f:26:13:9b:91:8b:33: f0:5a:33:cc:13:89:f3:45:93:2e:60:5f:32:17:f2:3e:b4:82: 9f:cc:2c:8e:fd:ba:d3:a0:1f:cb:31:e4:ec:0f:5c:a1:6c:d6: 57:5a:f5:f9:96:9f:a4:9b:cb:b5:2c:ac:c8:5d:59:fc:ec:76: 2e:cb:36:fe:2f:1d:0b:90:63:97:75:97:5d:b5:e9:ca:46:d6: 20:93:57:4c:06:49:b4:b1:fb:f0:34:01:95:45:b0:10:de:12: 84:81:b1:cd:c9:57:de:12:3a:bd:11:a4:06:50:56:9a:9f:88: c8:13:c1:54:56:b2:b5:b0:7a:59:df:8d:31:76:35:97:ea:93: 6f:24:43:04:f6:96:2e:70:c1:b2:87:19:e1:2f:60:77:f0:e3: a3:72:5a:3d:d6:84:d8:de:9e:23:d2:90:21:66:bb:b0:58:82: 71:71:24:0e:b9:3c:85:2c:18:ff:22:cf:8f:39:9a:45:c3:9a: c7:d7:af:1f:81:2e:09:0b:7c:03:69:83:c8:21:b7:3d:a2:cb: 5c:c9:68:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04ak0qs1zgX8lercAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U2NWM2MTAtZmE0OS00ZDdiLWEyZTctNjkxMjRmMWU1 Yzg1MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NzkxMTdhMWMtZmRkMS00NjdjLWE4YmItYTc4NzUwZjI3NWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUwRwOpBtZ7pCURqZ/qdDK+UmAgRUFQzunmC E5HIXvo0kSeHRLblzUK0mBtIaMFR+JsHLENyARtuKY4bOHOurLV/Q9IiF6OW1SYB ddTKDVVsivOnGAJRxYm3yi6z+zkKdO5YkioP+33yBj2IV+Z1ngoRHHPIPGXX28iQ VVA0DawnfZnlQ249nPmofmbeagdp4oz0l/ehLxFqvJY37YxOClRL/WRN3wi5trUS 3fqMIyP0bcFTKtjviPNNku2dqeHBGU7NMLKfuIsSXm5q2LQLt/WE3rEmWtJUTj74 tTq2X6Hxljtj8DP31KwUrfcQ1JaApxeB2/MM1IAiUYhLryTi+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPU2PT8rNovPJDsd+TDdu772Lox7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1 YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYxZTVjODUvYjUwNjBlMWItNTY0OS0z ZGEzLTkwZWQtNjM2OGJmODE3NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U2NWM2MTAtZmE0OS00ZDdiLWEy ZTctNjkxMjRmMWU1Yzg1LzNlNjVjNjEwLWZhNDktNGQ3Yi1hMmU3LTY5MTI0ZjFl NWM4NS5jcmwwHwYDVR0jBBgwFoAU8UDtM/qZ+uZow0I3AcJrTGquNSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEy NGYxZTVjODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1UAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKszxhKstGjaUYt/IhVgX743Tf1LX5lUbLMjYkN/v3VYTYIhRylY LpF76ulT68sDjyYTm5GLM/BaM8wTifNFky5gXzIX8j60gp/MLI79utOgH8sx5OwP XKFs1lda9fmWn6Sby7UsrMhdWfzsdi7LNv4vHQuQY5d1l1216cpG1iCTV0wGSbSx +/A0AZVFsBDeEoSBsc3JV94SOr0RpAZQVpqfiMgTwVRWsrWwelnfjTF2NZfqk28k QwT2li5wwbKHGeEvYHfw46NyWj3WhNjeniPSkCFmu7BYgnFxJA65PIUsGP8iz485 mkXDmsfXrx+BLgkLfANpg8ghtz2iy1zJaF0= -----END CERTIFICATE-----Generated at Sat Mar 21 20:57:04 2026 by rpki-client