$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa File: 935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json) Hash identifier: mrN8AhLFaM8kvfbN5LL0pFfy/8gyOqfihUD06ZcCZ0Y= Subject key identifier: 67:9E:9F:AA:AA:2C:4E:7A:92:9E:14:6A:F2:F2:E1:94:63:B8:06:19 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584D0D4258627664080A0B4F5160 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 33000 IP address blocks: 2605:fdc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:58:62:76:64:08:0a:0b:4f:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=043c2d59-6d13-4cff-a3e5-e1c803a5f487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:70:82:0a:79:33:4b:ea:81:b8:0a:14:da: f4:04:94:78:4e:74:f9:16:72:98:da:2b:1c:b2:d9: c1:71:52:19:04:71:26:9c:37:35:8e:a4:da:83:81: fb:df:30:59:5c:25:fa:14:4e:5a:46:49:48:a3:07: 29:21:b2:6c:bf:ae:13:9a:c4:8c:08:e9:56:57:4d: 9f:b9:d1:41:af:29:14:91:be:d6:5b:02:2e:1e:01: 9e:d7:33:8d:b2:e1:0c:fa:d6:f3:e3:f3:3c:d9:41: b6:2f:43:f1:6a:15:65:15:64:18:df:2f:3a:3b:69: a7:b3:cf:f2:08:27:40:9e:e2:02:94:cb:28:96:93: c3:60:c4:f2:f9:67:2d:0e:d1:74:d9:01:86:58:4b: e5:0e:c5:f2:17:0b:c3:51:ac:29:c9:e3:60:08:77: 1c:f9:43:42:a6:83:ed:0b:a1:46:6b:f9:9f:56:09: c2:b6:4a:58:84:59:42:21:b4:c1:a1:b1:b2:21:74: 97:1a:3c:a2:7c:b1:9a:a9:40:7f:79:12:af:40:22: ea:20:ef:f9:dc:07:98:c8:49:0b:1e:b9:ac:7b:bc: 7a:68:d0:f3:90:99:5c:f9:4c:e6:50:36:54:bb:77: cb:31:0b:0e:5b:95:1f:2d:ba:eb:8e:d5:6c:9b:21: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9E:9F:AA:AA:2C:4E:7A:92:9E:14:6A:F2:F2:E1:94:63:B8:06:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv6: 2605:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d4:6f:05:d9:04:47:6e:36:74:e2:e4:39:e9:5f:ee:11:6c: 69:88:8c:06:4d:8f:0d:8a:6d:89:51:82:00:8f:19:23:44:d4: 8c:29:3f:b0:d6:e1:e0:c7:9f:47:67:85:aa:39:bf:a7:10:10: 0e:a7:fc:9a:77:5a:4c:f5:ca:b4:b6:dc:10:9f:a8:33:a0:36: cb:80:db:59:55:e7:67:16:5c:01:d4:56:26:6c:6d:1a:99:f9: 2d:ef:3a:ef:81:72:8e:9a:0c:d8:d4:c6:0b:68:b7:9a:5c:28: c4:fb:5f:b4:e1:96:02:09:bd:f0:44:8b:af:c9:c2:96:87:4f: e1:ab:2e:5b:c2:60:69:a6:2b:12:5b:58:f8:79:58:e1:61:55: 4b:b9:e1:36:35:e6:70:0d:5c:0e:c8:fd:9b:6e:e8:2b:3e:62: 51:27:ed:ac:d8:18:c0:d7:ee:e3:49:ee:bf:b4:b8:dc:21:fa: ce:e3:69:b9:72:84:be:fc:7b:1f:c6:bf:c5:f2:bc:0e:17:89: b7:0d:b3:cd:71:73:23:2e:ba:7e:66:47:b4:93:2f:be:a7:18: 3b:fa:1e:c2:bf:ed:ae:83:7f:66:2e:a3:cc:55:a0:e3:b1:53: a9:99:e6:6c:dc:56:bb:9c:e7:32:c7:9d:4d:15:1b:f3:82:d6: 56:38:39:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0NQlhidmQICgtPUWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDQzYzJkNTktNmQxMy00Y2ZmLWEzZTUtZTFjODAzYTVmNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLpwggp5M0vqgbgKFNr0BJR4TnT5FnKY2isc stnBcVIZBHEmnDc1jqTag4H73zBZXCX6FE5aRklIowcpIbJsv64TmsSMCOlWV02f udFBrykUkb7WWwIuHgGe1zONsuEM+tbz4/M82UG2L0PxahVlFWQY3y86O2mns8/y CCdAnuIClMsolpPDYMTy+WctDtF02QGGWEvlDsXyFwvDUawpyeNgCHcc+UNCpoPt C6FGa/mfVgnCtkpYhFlCIbTBobGyIXSXGjyifLGaqUB/eRKvQCLqIO/53AeYyEkL Hrmse7x6aNDzkJlc+UzmUDZUu3fLMQsOW5UfLbrrjtVsmyE6+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGeen6qqLE56kp4UavLy4ZRjuAYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvOTM1MzkzYTktY2FiOC0z MzRmLWFmZDMtMGVhZjNmZmNiNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAB1G8F2QRHbjZ04uQ56V/uEWxpiIwGTY8Nim2JUYIAjxkjRNSMKT+w 1uHgx59HZ4WqOb+nEBAOp/yad1pM9cq0ttwQn6gzoDbLgNtZVednFlwB1FYmbG0a mfkt7zrvgXKOmgzY1MYLaLeaXCjE+1+04ZYCCb3wRIuvycKWh0/hqy5bwmBppisS W1j4eVjhYVVLueE2NeZwDVwOyP2bbugrPmJRJ+2s2BjA1+7jSe6/tLjcIfrO42m5 coS+/Hsfxr/F8rwOF4m3DbPNcXMjLrp+Zke0ky++pxg7+h7Cv+2ug39mLqPMVaDj sVOpmeZs3Fa7nOcyx51NFRvzgtZWODln -----END CERTIFICATE-----Generated at Sun Mar 22 09:58:19 2026 by rpki-client