$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa File: 936b2aa5-beb7-33e5-8227-bafa65bda840.roa (raw, json) Hash identifier: 0c+txufK7XJofEkRaDXBlZK5IxR0vtBcooCmTD1XLj4= Subject key identifier: 46:3C:84:39:B4:B9:A1:C4:04:18:A2:63:E7:AC:18:4D:4F:6C:45:4C Certificate issuer: /CN=618a40c8-2175-4e55-926e-6516ce21ec74 Certificate serial: 010D0C9F4328584D0D427D6C5D809A4D8CE4FE00 Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 2620:1d8::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7d:6c:5d:80:9a:4d:8c:e4:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=fc3a0fac-397d-4ec3-aa6a-3a4a85de3521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:73:fc:8c:ce:7f:b8:b4:c3:6c:dc:ec:b8:a3: 19:46:2a:7b:8b:57:47:4c:44:b0:09:ff:36:99:a8: 1e:49:43:e9:d2:29:31:c3:60:9d:3c:73:9b:f2:b8: b5:a3:d0:29:7c:ca:46:c7:15:f2:bb:21:e8:e0:39: 7a:10:5b:08:15:22:2c:14:69:7a:3c:1a:f8:ac:c9: 21:c8:f5:4e:17:5b:b5:ef:16:a5:91:4d:54:73:17: 0e:cc:d9:e2:f3:48:8e:92:94:3d:84:06:1b:53:29: 2d:72:ba:73:39:38:74:fc:31:6a:1b:59:01:de:ea: 4b:cc:a6:14:e4:2f:c1:4c:ce:34:98:eb:68:59:7c: 0f:76:3f:01:49:1b:ab:4a:ec:aa:4c:af:20:89:1d: b5:2c:c4:ef:52:c9:55:60:68:92:b4:1f:99:a1:57: c8:30:71:54:c0:93:0c:17:f5:cc:2b:29:3c:0e:6a: ad:56:b3:26:62:da:b7:c3:7b:c1:93:5d:01:b4:aa: 6d:40:0f:4a:23:ec:3b:c3:85:b1:68:1c:ec:cf:b6: a7:d5:10:5f:01:3f:a3:86:f7:c4:7e:88:95:0d:ff: e1:a5:c2:4c:6c:fb:9f:54:6a:33:a6:06:3c:7e:02: 83:44:df:92:fc:28:f5:ef:8c:61:60:49:5e:b5:cc: 87:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3C:84:39:B4:B9:A1:C4:04:18:A2:63:E7:AC:18:4D:4F:6C:45:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl X509v3 Authority Key Identifier: keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d8::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:70:d7:dc:14:9f:3f:79:18:83:93:32:fe:6e:d8:3d:b8:1b: e0:09:fa:f9:7a:cb:3f:45:0d:f8:4a:2e:43:0c:c2:1e:86:7e: ab:11:00:09:6d:bb:35:fc:22:52:19:1c:59:cb:f6:d6:4e:b5: 66:ad:17:f3:da:89:fc:53:c4:6e:84:53:5b:38:ed:47:3f:7d: 17:fc:12:c5:3e:c0:c8:f1:35:e6:96:84:a3:48:13:5f:fe:37: 5b:36:21:9f:45:67:b4:14:3a:35:eb:e7:d0:a9:d1:93:4f:d4: f8:ef:15:31:46:08:74:fd:9d:f2:af:dc:0b:45:72:15:ac:94: f8:a9:96:16:13:bc:6d:b3:fa:1b:cc:70:73:90:73:c3:57:87: e7:84:44:29:94:89:99:5e:94:85:f6:1b:8d:17:fb:e0:8c:2e: 50:8b:f6:14:9b:f5:9d:c8:bd:e8:97:23:c6:ac:dc:80:e6:ca: 07:34:e9:86:b3:c5:8e:23:30:a2:3c:c4:09:cf:68:d9:35:40: f5:93:88:e9:fc:53:c6:d7:bb:55:58:82:71:b7:f4:08:8e:3e: 21:f2:33:a5:1d:64:91:8e:ae:a4:73:d4:08:ea:85:e0:6a:24: 87:90:78:9c:a2:0d:24:29:de:9b:a7:30:ff:dd:ae:8e:b4:00: 4e:de:ff:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQn1sXYCaTYzk/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YTQwYzgtMjE3NS00ZTU1LTkyNmUtNjUxNmNlMjFl Yzc0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZmMzYTBmYWMtMzk3ZC00ZWMzLWFhNmEtM2E0YTg1ZGUzNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3P8jM5/uLTDbNzsuKMZRip7i1dHTESwCf82 mageSUPp0ikxw2CdPHOb8ri1o9ApfMpGxxXyuyHo4Dl6EFsIFSIsFGl6PBr4rMkh yPVOF1u17xalkU1UcxcOzNni80iOkpQ9hAYbUyktcrpzOTh0/DFqG1kB3upLzKYU 5C/BTM40mOtoWXwPdj8BSRurSuyqTK8giR21LMTvUslVYGiStB+ZoVfIMHFUwJMM F/XMKyk8DmqtVrMmYtq3w3vBk10BtKptQA9KI+w7w4WxaBzsz7an1RBfAT+jhvfE foiVDf/hpcJMbPufVGozpgY8fgKDRN+S/Cj174xhYEletcyHKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEY8hDm0uaHEBBiiY+esGE1PbEVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MThh NDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2Y2UyMWVjNzQvOTM2YjJhYTUtYmViNy0z M2U1LTgyMjctYmFmYTY1YmRhODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjE4YTQwYzgtMjE3NS00ZTU1LTky NmUtNjUxNmNlMjFlYzc0LzYxOGE0MGM4LTIxNzUtNGU1NS05MjZlLTY1MTZjZTIx ZWM3NC5jcmwwHwYDVR0jBBgwFoAUYr8kTZ9LKuH4yy1kQwZdByzzTIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MThhNDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2 Y2UyMWVjNzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJiAB2AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGRw19wUnz95GIOTMv5u2D24G+AJ+vl6yz9FDfhKLkMMwh6GfqsR AAltuzX8IlIZHFnL9tZOtWatF/PaifxTxG6EU1s47Uc/fRf8EsU+wMjxNeaWhKNI E1/+N1s2IZ9FZ7QUOjXr59Cp0ZNP1PjvFTFGCHT9nfKv3AtFchWslPiplhYTvG2z +hvMcHOQc8NXh+eERCmUiZlelIX2G40X++CMLlCL9hSb9Z3IveiXI8as3IDmygc0 6YazxY4jMKI8xAnPaNk1QPWTiOn8U8bXu1VYgnG39AiOPiHyM6UdZJGOrqRz1Ajq heBqJIeQeJyiDSQp3punMP/dro60AE7e/7Y= -----END CERTIFICATE-----Generated at Wed Mar 4 07:39:14 2026 by rpki-client