$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa File: fbbba54b-950b-302b-a65a-9cf427e72454.roa (raw, json) Hash identifier: SxYoSdmC+2zriX6hY8bZgtwK1roKlUvKHYQ0Oz4iz60= Subject key identifier: D6:9A:74:A3:27:7E:3B:0A:13:27:FA:A5:FD:0C:2A:68:98:87:99:E2 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584D6AAA64D3F1F3A9BCDA5FD3C0 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 23102 IP address blocks: 2620:95::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:64:d3:f1:f3:a9:bc:da:5f:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=0b561b0f-8ed5-481f-b156-2e8d5c6dddfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:fb:a9:82:f8:7a:7f:c5:79:ec:ff:1f:ca: a8:83:0c:58:ac:60:7d:17:c9:ca:d0:5d:c4:f7:33: 1f:3f:bf:df:7c:c7:40:27:28:ea:d8:79:10:61:ad: 83:52:b1:06:55:59:7a:30:1c:0a:30:16:20:06:c5: b4:40:0f:ec:26:33:f6:59:c8:df:2e:e0:78:e3:ea: 67:af:30:37:b9:d7:ae:6b:8f:69:fe:16:bf:a1:d2: 67:dc:08:60:c0:97:13:65:d2:dd:05:0c:8c:07:dd: 40:59:0a:ae:4d:f4:d3:77:ac:80:ff:75:18:80:ae: 5a:61:67:db:11:44:14:38:2b:7e:fc:d9:71:06:26: a0:a4:93:0d:b5:0a:3e:f8:4d:48:bf:cb:ff:a6:21: ca:b7:da:cd:bf:1c:83:ef:5d:fc:e6:1b:83:04:f9: 26:f2:c3:98:6e:39:f1:cf:f4:b4:f5:9c:80:8a:b2: 73:d8:4a:b7:f8:1e:b7:07:86:45:cb:30:30:12:80: 9f:af:fb:64:fa:dc:e5:a1:36:18:a0:a9:58:96:e8: 02:8d:d6:3b:c8:14:7e:12:63:56:0a:c6:2e:ca:45: c4:ff:66:71:31:91:a0:c1:88:f0:80:b1:14:d0:12: 08:75:95:2c:c6:1b:05:88:e1:44:40:22:05:53:fa: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9A:74:A3:27:7E:3B:0A:13:27:FA:A5:FD:0C:2A:68:98:87:99:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv6: 2620:95::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:86:0a:6e:6a:c5:a9:2f:d6:88:76:29:17:14:23:70:0e:ba: ed:55:f0:70:9e:1d:35:49:46:25:e3:21:3e:86:df:07:e9:ee: 1d:0a:21:69:cd:5a:2f:cc:dc:0b:1c:93:8e:bf:89:e4:c0:f3: fc:47:4d:5f:36:88:2b:6d:f7:12:57:ec:8e:35:d5:45:c4:a7: 6f:fa:e4:de:6e:da:32:94:dd:2a:b9:41:6b:81:3c:a0:2d:5f: 39:be:9e:5e:61:8a:5d:00:43:21:a7:62:04:72:c4:7c:64:6b: ed:1a:65:a6:0f:41:62:b5:70:da:af:7d:ef:c4:09:91:fa:ce: 00:b7:3a:37:46:47:5d:41:fa:9b:15:79:3a:5b:9e:8a:cd:86: f3:52:1c:a0:02:ea:00:ad:ac:46:ec:ad:80:db:c8:81:ed:c4: 8f:3a:b0:17:81:71:d2:d1:0c:b1:e2:9d:81:f6:68:3f:13:bb: 3f:20:46:3b:7a:09:9f:92:19:f1:fb:9d:bd:e5:e6:d5:3b:d3: 48:1a:2c:2f:31:04:d2:3b:fa:f0:6f:72:13:c5:7e:43:c8:52: da:4d:4b:99:fc:6f:a2:1a:73:cf:a5:42:d1:f2:d9:38:c3:9b: 72:32:6d:5c:46:2d:c9:83:8e:ca:8c:90:55:07:48:4a:ba:19: 46:c8:60:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1qqmTT8fOpvNpf08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MGI1NjFiMGYtOGVkNS00ODFmLWIxNTYtMmU4ZDVjNmRkZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7H7qYL4en/Feez/H8qogwxYrGB9F8nK0F3E 9zMfP7/ffMdAJyjq2HkQYa2DUrEGVVl6MBwKMBYgBsW0QA/sJjP2WcjfLuB44+pn rzA3udeua49p/ha/odJn3AhgwJcTZdLdBQyMB91AWQquTfTTd6yA/3UYgK5aYWfb EUQUOCt+/NlxBiagpJMNtQo++E1Iv8v/piHKt9rNvxyD71385huDBPkm8sOYbjnx z/S09ZyAirJz2Eq3+B63B4ZFyzAwEoCfr/tk+tzloTYYoKlYlugCjdY7yBR+EmNW CsYuykXE/2ZxMZGgwYjwgLEU0BIIdZUsxhsFiOFEQCIFU/reKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNaadKMnfjsKEyf6pf0MKmiYh5niMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvZmJiYmE1NGItOTUwYi0z MDJiLWE2NWEtOWNmNDI3ZTcyNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAlQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWGCm5qxakv1oh2KRcUI3AOuu1V8HCeHTVJRiXjIT6G3wfp7h0K IWnNWi/M3Asck46/ieTA8/xHTV82iCtt9xJX7I411UXEp2/65N5u2jKU3Sq5QWuB PKAtXzm+nl5hil0AQyGnYgRyxHxka+0aZaYPQWK1cNqvfe/ECZH6zgC3OjdGR11B +psVeTpbnorNhvNSHKAC6gCtrEbsrYDbyIHtxI86sBeBcdLRDLHinYH2aD8Tuz8g Rjt6CZ+SGfH7nb3l5tU700gaLC8xBNI7+vBvchPFfkPIUtpNS5n8b6Iac8+lQtHy 2TjDm3IybVxGLcmDjsqMkFUHSEq6GUbIYIk= -----END CERTIFICATE-----Generated at Wed Apr 15 15:56:42 2026 by rpki-client