$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/45c94860-3721-39a9-b970-0d8db8f5f689.roa File: 45c94860-3721-39a9-b970-0d8db8f5f689.roa (raw, json) Hash identifier: z3OrQGsK1PtapQq/D9z4qj+JhRVTcDS1SZUJvw012Ck= Subject key identifier: 7B:28:10:08:39:71:BF:2F:D2:52:C8:D6:CA:65:03:F9:A4:06:86:FE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D237A33059010F0585832B380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/45c94860-3721-39a9-b970-0d8db8f5f689.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 8070 IP address blocks: 2603:1063:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:33:05:90:10:f0:58:58:32:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f77337d1-9d35-488d-af01-c31cb98a201f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:1f:7a:42:96:86:54:3f:3e:b6:6f:61:0c: c6:9c:3e:bf:2f:28:6b:50:c2:a7:b0:62:bf:86:0d: 12:58:00:ef:d4:e2:8a:5c:93:f4:42:c0:bd:ce:3d: 73:3c:45:f4:de:e8:64:1a:46:e9:a5:9e:78:8b:24: 92:b9:a2:c2:c7:d7:27:ca:e8:12:04:97:27:bc:b3: 26:c0:7b:63:d3:61:a7:b4:b3:dd:51:de:7e:f7:8f: 60:37:a2:d6:72:60:3b:12:be:e1:19:38:06:07:20: a3:f3:c5:8d:ef:07:f7:38:fb:a7:dd:80:24:0d:56: 53:82:8a:3e:dc:87:4b:5f:20:b5:c3:6b:ff:d4:20: 79:bb:1f:a7:69:40:77:39:d7:c0:56:30:31:1b:43: 15:d6:ba:5f:6d:18:ed:54:10:11:2b:53:06:06:b9: 9c:48:19:75:d5:46:f6:89:d9:b8:f2:c4:f4:61:52: 82:e1:63:39:4d:bd:03:be:38:10:49:55:32:f1:61: fc:6d:ee:4d:ce:8a:d9:21:eb:e2:a1:d9:7a:e6:bf: 4f:75:42:1c:26:ea:55:ca:28:56:6e:ea:ce:5a:33: f9:02:1b:58:f0:c8:72:d4:c8:8d:70:1a:32:e8:3d: 72:1e:b5:c5:1e:d2:5c:05:93:b0:e8:2e:f3:9e:86: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:28:10:08:39:71:BF:2F:D2:52:C8:D6:CA:65:03:F9:A4:06:86:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/45c94860-3721-39a9-b970-0d8db8f5f689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2603:1063:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d2:79:3d:4c:da:c1:34:9e:a2:75:2f:67:75:ce:0f:76:4e: b3:e1:b4:49:b4:2c:a0:52:d7:ce:56:1c:a5:aa:04:56:40:f7: 0c:c7:3a:86:d2:3d:e7:05:c1:58:73:70:57:06:83:91:6a:5a: 73:29:e6:19:16:30:c4:d1:8a:09:df:49:b3:02:68:b8:2d:27: 6d:9f:ed:2b:a5:a6:72:95:9f:5a:81:85:2f:0c:0c:9e:45:93: 6d:a7:0e:05:f8:85:8f:c6:53:33:cd:90:35:4e:cb:12:61:1c: 1f:77:7b:c0:1e:0d:bf:7b:06:fe:37:54:bd:7a:e8:c8:56:14: d3:eb:a4:9d:20:9c:5b:c0:f6:99:bc:85:77:2b:47:37:13:ea: 72:71:ff:36:76:2b:bd:2e:70:52:98:8e:f9:ef:f0:89:13:58: 21:de:d8:78:41:a8:2b:5f:f2:df:cb:70:77:f1:e5:61:34:cd: 04:21:1b:1b:cd:90:e2:1e:30:b4:96:9b:45:17:14:6f:2e:42: 88:71:c0:08:7e:b1:5f:16:81:be:50:14:51:4e:67:11:11:1b: c1:be:4c:49:6a:6d:09:97:c1:a4:89:8e:d8:9b:6a:da:9e:ec: 74:ea:07:e6:3b:8a:6d:e8:77:83:60:02:7b:30:66:22:5b:51: 4d:6c:8c:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jejMFkBDwWFgys4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Zjc3MzM3ZDEtOWQzNS00ODhkLWFmMDEtYzMxY2I5OGEyMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEIfekKWhlQ/PrZvYQzGnD6/LyhrUMKnsGK/ hg0SWADv1OKKXJP0QsC9zj1zPEX03uhkGkbppZ54iySSuaLCx9cnyugSBJcnvLMm wHtj02GntLPdUd5+949gN6LWcmA7Er7hGTgGByCj88WN7wf3OPun3YAkDVZTgoo+ 3IdLXyC1w2v/1CB5ux+naUB3OdfAVjAxG0MV1rpfbRjtVBARK1MGBrmcSBl11Ub2 idm48sT0YVKC4WM5Tb0DvjgQSVUy8WH8be5NzorZIeviodl65r9PdUIcJupVyihW burOWjP5AhtY8Mhy1MiNcBoy6D1yHrXFHtJcBZOw6C7znobkuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHsoEAg5cb8v0lLI1splA/mkBob+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDVjOTQ4NjAtMzcyMS0z OWE5LWI5NzAtMGQ4ZGI4ZjVmNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgMQY3ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAONJ5PUzawTSeonUvZ3XOD3ZOs+G0SbQsoFLXzlYcpaoEVkD3DMc6 htI95wXBWHNwVwaDkWpacynmGRYwxNGKCd9JswJouC0nbZ/tK6WmcpWfWoGFLwwM nkWTbacOBfiFj8ZTM82QNU7LEmEcH3d7wB4Nv3sG/jdUvXroyFYU0+uknSCcW8D2 mbyFdytHNxPqcnH/NnYrvS5wUpiO+e/wiRNYId7YeEGoK1/y38twd/HlYTTNBCEb G82Q4h4wtJabRRcUby5CiHHACH6xXxaBvlAUUU5nEREbwb5MSWptCZfBpImO2Jtq 2p7sdOoH5juKbeh3g2ACezBmIltRTWyM8Q== -----END CERTIFICATE-----Generated at Fri Mar 13 13:52:58 2026 by rpki-client