$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa File: 85bba22a-31d7-3277-9d23-3f253e7d429a.roa (raw, json) Hash identifier: AakdkSGQjoqRcR3lyvaiC0J+UA/serdzZNcdxBVgA7A= Subject key identifier: 81:06:3D:66:91:C1:5C:59:1B:E2:2E:2A:13:DD:40:51:BE:C4:C9:B2 Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584D3F64D6F83E392B6EA7260060 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 6653 IP address blocks: 2604:280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d6:f8:3e:39:2b:6e:a7:26:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=b74b334f-b257-4b9e-9a66-d3a5978d8401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:32:bb:62:38:79:3b:e9:18:6b:f7:5d:af: 6e:e4:1a:3e:9d:39:83:17:be:0d:f1:2c:20:95:19: c4:43:74:be:b6:5d:f5:e5:c7:da:0f:cc:72:93:d0: 2b:0b:dd:29:29:30:dc:82:c1:08:16:83:e5:52:fc: 62:69:8e:18:fb:be:4d:d0:ef:0a:98:d7:65:37:d2: 36:78:a9:e1:8c:31:8c:3f:a2:7f:39:5c:a1:12:96: 97:be:92:04:4e:af:94:15:74:12:82:3d:22:89:d6: 70:ba:82:44:e6:14:a9:37:b8:7e:cd:a2:f3:6d:b5: 23:10:2d:0d:fe:47:8f:58:dc:dc:f4:49:d0:fc:01: d0:22:2c:08:99:6c:99:36:2a:d9:35:4a:07:e9:f4: ac:07:f9:c0:0a:a1:6b:4d:34:d0:53:b0:94:06:bd: 83:97:1b:68:e3:1e:12:11:93:6a:7c:be:f0:9d:58: 3f:59:92:fe:8b:c2:1f:de:e2:5c:a3:d5:af:15:59: c7:12:32:12:b0:cf:53:23:24:8f:ab:a8:44:2f:0a: 17:70:32:c1:fa:41:16:7f:6a:63:bf:42:9e:4b:a6: e3:27:ec:e9:6a:83:4c:51:c5:69:e7:6a:f5:e3:d3: a4:78:5e:9d:dc:e6:24:76:14:98:45:1b:70:c6:aa: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:3D:66:91:C1:5C:59:1B:E2:2E:2A:13:DD:40:51:BE:C4:C9:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv6: 2604:280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ff:03:ca:b5:81:91:4f:b7:82:20:93:0d:c1:54:a7:b7:cc: 30:29:60:20:d1:ed:b0:0f:f4:08:0b:f1:13:52:c9:28:90:11: a6:13:cc:ea:b1:dd:4d:54:80:a2:72:d9:b6:a3:fb:9c:f1:90: 06:dc:a8:a4:79:f4:e3:cc:c8:fe:f2:52:47:e3:36:2a:96:55: d1:5c:e9:14:8c:1b:b0:73:48:d1:b0:20:47:0f:c4:96:96:8e: e5:56:7d:25:5d:2e:07:b6:e4:8d:bb:04:f4:34:b8:af:b1:62: de:9f:19:04:1d:4f:3c:45:27:bd:25:43:fc:fb:3b:ec:91:c9: 4a:70:8b:76:55:82:98:92:b6:83:dc:a5:36:0c:f2:08:86:69: 8e:19:ee:03:7e:e2:7f:bb:79:3e:f4:ae:10:5d:ee:8a:37:9d: ad:66:f2:aa:ee:30:1f:fa:45:64:6c:1c:a9:cc:eb:cb:31:c3: f1:4a:25:0a:f1:b7:89:e5:52:ce:7c:27:c2:f7:dd:5d:e1:42: 1a:60:e0:5e:b1:a6:1d:6b:5f:fe:82:00:68:b6:4f:54:bf:fc: 94:4e:04:e9:fe:bc:17:5e:73:bb:ef:36:dd:a7:3b:28:69:a4: e9:18:d5:53:23:31:3a:e3:78:c7:e4:72:a3:3e:c2:8a:c1:16: 7c:7a:d7:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZNb4PjkrbqcmAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk Yjc0YjMzNGYtYjI1Ny00YjllLTlhNjYtZDNhNTk3OGQ4NDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndsyu2I4eTvpGGv3Xa9u5Bo+nTmDF74N8Swg lRnEQ3S+tl315cfaD8xyk9ArC90pKTDcgsEIFoPlUvxiaY4Y+75N0O8KmNdlN9I2 eKnhjDGMP6J/OVyhEpaXvpIETq+UFXQSgj0iidZwuoJE5hSpN7h+zaLzbbUjEC0N /kePWNzc9EnQ/AHQIiwImWyZNirZNUoH6fSsB/nACqFrTTTQU7CUBr2Dlxto4x4S EZNqfL7wnVg/WZL+i8If3uJco9WvFVnHEjISsM9TIySPq6hELwoXcDLB+kEWf2pj v0KeS6bjJ+zpaoNMUcVp52r149OkeF6d3OYkdhSYRRtwxqrTWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIEGPWaRwVxZG+IuKhPdQFG+xMmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvODViYmEyMmEtMzFkNy0z Mjc3LTlkMjMtM2YyNTNlN2Q0MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBc/wPKtYGRT7eCIJMNwVSnt8wwKWAg0e2wD/QIC/ETUskokBGmE8zq sd1NVICictm2o/uc8ZAG3KikefTjzMj+8lJH4zYqllXRXOkUjBuwc0jRsCBHD8SW lo7lVn0lXS4HtuSNuwT0NLivsWLenxkEHU88RSe9JUP8+zvskclKcIt2VYKYkraD 3KU2DPIIhmmOGe4DfuJ/u3k+9K4QXe6KN52tZvKq7jAf+kVkbBypzOvLMcPxSiUK 8beJ5VLOfCfC991d4UIaYOBesaYda1/+ggBotk9Uv/yUTgTp/rwXXnO77zbdpzso aaTpGNVTIzE643jH5HKjPsKKwRZ8eteo -----END CERTIFICATE-----Generated at Wed Mar 25 06:18:48 2026 by rpki-client