$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa File: 2bf642a2-d07c-3c1f-84d7-221096477507.roa (raw, json) Hash identifier: dYO+mLQ01kNHD1T1H1oS4EeDLP/6ZgkzCi51VvBY+FU= Subject key identifier: 41:58:C3:B9:E6:BE:0B:07:BB:B0:15:15:B6:7E:E8:A8:35:AB:BD:A2 Certificate issuer: /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Certificate serial: 010D0C9F4328584D09125E8E170F82C36A1A6A40 Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397122 IP address blocks: 2606:9080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5e:8e:17:0f:82:c3:6a:1a:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=f689e816-e9ce-4991-a0fe-c04f26b3ea8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:71:26:e7:a3:a4:14:51:f9:e0:1e:5e:d6: 40:48:02:e1:85:d9:a4:71:2e:43:2c:d5:5f:d8:f5: ee:fa:a7:32:b2:b7:41:bb:89:f0:5d:c5:74:d7:44: d4:19:e0:d2:6d:b4:cc:dc:3f:3d:44:30:64:e4:26: 2a:4e:74:d4:e3:e3:75:78:f6:7f:ee:9a:19:40:ec: cb:1f:08:ac:7e:47:f2:f1:77:66:63:da:17:86:50: 6f:6d:39:70:07:c7:f1:00:2b:7e:14:ee:ae:6d:b2: eb:a2:0d:ee:4e:aa:12:e1:df:02:a1:74:ea:a6:de: 4b:65:ab:a6:a8:67:45:5e:04:e9:00:2b:ab:e2:96: 6d:c8:9e:e7:79:38:e2:63:55:73:28:cc:f1:02:96: 83:ea:b1:1d:d3:ab:40:2f:96:0c:4c:99:d7:15:70: 4b:fa:ff:78:4f:b2:44:c2:a6:b3:6b:db:2e:75:cb: 38:da:79:5a:ca:81:87:de:83:95:44:35:86:69:ab: 30:28:1d:81:e2:4d:89:8f:e0:1f:ef:14:52:b4:d0: 58:84:dd:73:e7:6a:ff:c2:6c:43:a0:ef:92:65:9b: 71:c2:7f:0a:12:25:d4:ca:33:d6:69:c1:09:6f:f8: d5:6f:c8:2b:1e:19:89:8d:61:30:55:9e:34:53:06: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:58:C3:B9:E6:BE:0B:07:BB:B0:15:15:B6:7E:E8:A8:35:AB:BD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl X509v3 Authority Key Identifier: keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer sbgp-ipAddrBlock: critical IPv6: 2606:9080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:cc:07:f7:39:71:b4:ee:fa:cd:d8:2e:cf:49:a1:3a:00:8e: 66:25:b3:e1:3d:0a:75:70:49:dd:94:32:df:11:30:15:17:de: 39:b9:56:0f:1b:43:15:a9:c7:82:68:ff:ca:84:2a:d8:4f:00: fe:bd:c5:df:6a:23:79:24:bd:3c:00:20:2d:e9:49:a2:8d:fd: 1e:0c:49:42:53:aa:d8:ef:37:ed:27:93:1e:b2:64:c4:30:6b: f7:d8:96:d3:73:3d:f2:11:0f:32:6a:03:16:8d:eb:4d:02:52: e3:21:4a:06:6a:94:2c:81:b7:9b:c5:07:2f:1f:44:7b:9b:84: c8:6d:a6:77:62:a2:b2:3b:38:7d:f9:b1:a8:f9:ed:45:a4:d9: ec:97:30:96:38:46:c4:81:62:b5:b4:53:53:a2:31:05:a5:c6: 28:22:3d:ee:84:db:fb:bd:52:98:c0:56:0a:de:de:ba:75:f1: fb:a1:f4:61:1e:40:01:e4:47:e4:e5:4e:a9:6f:31:8a:4a:e9: 7a:03:7c:ae:9b:24:0e:6b:ba:a3:c2:95:ca:4a:e7:f1:cb:b2: 34:26:4d:97:68:de:a9:a9:31:cd:58:01:f1:f5:b7:9b:dc:00: bc:77:ef:69:80:a8:66:57:69:2a:fe:f7:99:f3:fa:1c:e8:a2: ca:f0:47:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0JEl6OFw+Cw2oaakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY0MTRiOTktYmI5Zi00OTJhLWExYWMtOTM1YTQ5OTM1 ZDlkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjY4OWU4MTYtZTljZS00OTkxLWEwZmUtYzA0ZjI2YjNlYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5lxJuejpBRR+eAeXtZASALhhdmkcS5DLNVf 2PXu+qcysrdBu4nwXcV010TUGeDSbbTM3D89RDBk5CYqTnTU4+N1ePZ/7poZQOzL Hwisfkfy8XdmY9oXhlBvbTlwB8fxACt+FO6ubbLrog3uTqoS4d8CoXTqpt5LZaum qGdFXgTpACur4pZtyJ7neTjiY1VzKMzxApaD6rEd06tAL5YMTJnXFXBL+v94T7JE wqaza9sudcs42nlayoGH3oOVRDWGaaswKB2B4k2Jj+Af7xRStNBYhN1z52r/wmxD oO+SZZtxwn8KEiXUyjPWacEJb/jVb8grHhmJjWEwVZ40UwbsnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEFYw7nmvgsHu7AVFbZ+6Kg1q72iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNjQx NGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVhNDk5MzVkOWQvMmJmNjQyYTItZDA3Yy0z YzFmLTg0ZDctMjIxMDk2NDc3NTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjY0MTRiOTktYmI5Zi00OTJhLWEx YWMtOTM1YTQ5OTM1ZDlkL2Y2NDE0Yjk5LWJiOWYtNDkyYS1hMWFjLTkzNWE0OTkz NWQ5ZC5jcmwwHwYDVR0jBBgwFoAUXyjgr3R9K6UUhQRsKCjt7dfyvZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNjQxNGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVh NDk5MzVkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaQgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZzAf3OXG07vrN2C7PSaE6AI5mJbPhPQp1cEndlDLfETAVF945uVYP G0MVqceCaP/KhCrYTwD+vcXfaiN5JL08ACAt6Umijf0eDElCU6rY7zftJ5MesmTE MGv32JbTcz3yEQ8yagMWjetNAlLjIUoGapQsgbebxQcvH0R7m4TIbaZ3YqKyOzh9 +bGo+e1FpNnslzCWOEbEgWK1tFNTojEFpcYoIj3uhNv7vVKYwFYK3t66dfH7ofRh HkAB5Efk5U6pbzGKSul6A3yumyQOa7qjwpXKSufxy7I0Jk2XaN6pqTHNWAHx9beb 3AC8d+9pgKhmV2kq/veZ8/oc6KLK8EfX -----END CERTIFICATE-----Generated at Sun Mar 22 09:59:17 2026 by rpki-client