$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa File: f3af929a-e159-397a-bd25-ba1d31de60ea.roa (raw, json) Hash identifier: pbMdWPH7fQLzDG+CnE1f5Up0/7l19kNw5jfSIctY2IA= Subject key identifier: 23:19:46:D9:9A:07:F2:FE:A4:AA:B1:DD:62:EA:02:B7:A9:AC:94:45 Certificate issuer: /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f Certificate serial: 010D0C9F4328584D091261AAFD4760BB926B1D00 Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 31898 IP address blocks: 2620:1b2:8b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:61:aa:fd:47:60:bb:92:6b:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=208d32cb-78a7-421c-a463-c4b52e21aa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:77:0a:d3:fc:55:1f:43:80:7b:9e:7b:a8: b3:c2:fc:f6:bc:80:2a:5b:7d:3c:70:35:78:c1:55: 82:66:ec:7a:cf:6f:a4:9e:a6:d9:ca:76:e4:03:f3: 1d:c1:53:f0:d2:c2:dc:f0:c3:88:e9:2d:67:b0:2a: fc:c8:cb:f7:f0:69:1c:3e:ee:62:ca:7c:64:be:62: 9d:b5:10:d5:9f:c3:46:16:39:a4:0b:fc:fe:c0:1a: 86:19:94:12:19:c9:86:e8:0b:15:78:8f:50:a5:42: 9e:29:d5:5c:eb:b3:e6:15:16:f7:fc:1a:11:2c:98: b7:32:70:81:62:bb:d0:a2:c8:94:00:f5:b7:54:04: 31:c5:79:e5:7e:c7:c4:a4:e8:b2:60:2e:8b:8e:9f: 97:e0:89:f3:1b:41:dd:7f:1a:4b:da:99:b7:b7:bd: 08:47:6f:f8:94:3f:51:00:40:44:d1:45:1c:6d:12: 01:f8:c8:0c:8c:ef:b1:c2:43:27:77:33:08:e3:96: cc:99:15:8a:3e:54:7b:83:c7:f8:da:67:8e:c7:4b: 44:a6:2f:f9:00:74:4e:f4:02:cc:3f:bf:73:ef:b4: f3:f1:8c:a7:34:7c:d1:fe:ee:ba:c0:24:62:4d:03: 15:68:cd:59:81:d6:d5:9b:ba:cb:6f:17:0b:a9:9f: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:19:46:D9:9A:07:F2:FE:A4:AA:B1:DD:62:EA:02:B7:A9:AC:94:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl X509v3 Authority Key Identifier: keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer sbgp-ipAddrBlock: critical IPv6: 2620:1b2:8b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:94:b8:3c:60:63:c2:28:89:5b:4c:db:6a:cc:19:8a:da:39: 7f:53:e4:e4:c4:3d:46:5c:44:61:e6:3c:c5:7e:e0:62:4e:77: b9:40:2f:b5:ee:d9:13:ce:04:5f:60:4b:6f:81:59:34:9a:5a: 11:20:39:c1:92:85:24:2b:ce:75:67:f8:64:7f:b9:73:34:cd: 12:ca:66:9a:84:51:f9:62:b5:9f:1e:74:eb:39:bc:0c:67:49: 35:b6:d3:81:9b:f0:eb:73:45:97:84:ea:2f:93:7b:a4:a1:cf: 40:bf:b7:4f:45:dc:3a:c8:79:9d:7f:56:b5:1a:cb:82:85:e2: dd:0f:ca:cf:43:20:7f:dc:1b:01:d9:9f:4c:62:fb:1e:f7:7b: 18:22:16:ad:cf:ed:a0:0d:40:03:b2:4f:32:ad:be:d7:d0:7a: 26:f7:a3:03:fe:0f:10:d1:39:48:bd:f1:0a:13:d4:27:f6:80: ea:cb:03:8a:cf:3e:8e:a2:5b:61:dc:f6:ec:c1:90:71:a9:f9: fc:10:22:77:88:e8:95:4e:33:0f:37:60:43:fa:c9:99:b9:97: 75:f8:8d:a5:64:a5:38:55:ab:07:e0:72:82:fe:4b:33:4a:eb: 3a:74:56:ab:13:ad:52:b3:5d:e2:04:77:dc:55:44:0d:b5:cf: 53:d3:96:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEmGq/Udgu5JrHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy MDBmMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjA4ZDMyY2ItNzhhNy00MjFjLWE0NjMtYzRiNTJlMjFhYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rV3CtP8VR9DgHuee6izwvz2vIAqW308cDV4 wVWCZux6z2+knqbZynbkA/MdwVPw0sLc8MOI6S1nsCr8yMv38GkcPu5iynxkvmKd tRDVn8NGFjmkC/z+wBqGGZQSGcmG6AsVeI9QpUKeKdVc67PmFRb3/BoRLJi3MnCB YrvQosiUAPW3VAQxxXnlfsfEpOiyYC6Ljp+X4InzG0HdfxpL2pm3t70IR2/4lD9R AEBE0UUcbRIB+MgMjO+xwkMndzMI45bMmRWKPlR7g8f42meOx0tEpi/5AHRO9ALM P79z77Tz8YynNHzR/u66wCRiTQMVaM1ZgdbVm7rLbxcLqZ/M3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMZRtmaB/L+pKqx3WLqAreprJRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvZjNhZjkyOWEtZTE1OS0z OTdhLWJkMjUtYmExZDMxZGU2MGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi MzFlZDIwMGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABsgCL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALeUuDxgY8IoiVtM22rMGYraOX9T5OTEPUZcRGHmPMV+4GJOd7lA L7Xu2RPOBF9gS2+BWTSaWhEgOcGShSQrznVn+GR/uXM0zRLKZpqEUflitZ8edOs5 vAxnSTW204Gb8OtzRZeE6i+Te6Shz0C/t09F3DrIeZ1/VrUay4KF4t0Pys9DIH/c GwHZn0xi+x73exgiFq3P7aANQAOyTzKtvtfQeib3owP+DxDROUi98QoT1Cf2gOrL A4rPPo6iW2Hc9uzBkHGp+fwQIneI6JVOMw83YEP6yZm5l3X4jaVkpThVqwfgcoL+ SzNK6zp0VqsTrVKzXeIEd9xVRA21z1PTlgM= -----END CERTIFICATE-----Generated at Wed Mar 25 14:32:16 2026 by rpki-client