$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa File: c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa (raw, json) Hash identifier: NZhE6b6VDw9r+s9W5jAe7I0stig3pf1Mairv9dWCgDU= Subject key identifier: B0:BA:6F:DF:ED:19:CA:B3:C7:46:74:57:0D:F3:4D:31:73:2B:63:59 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584D26449E8962F127F62CF40F80 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 2604:29a0:f000::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:9e:89:62:f1:27:f6:2c:f4:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=7972417a-b2a9-4dbe-9c96-7d651a29320f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:88:b9:82:30:6a:c3:b1:21:92:6e:05:64:0b: c5:df:3a:48:e0:66:7e:d2:66:92:e8:25:df:91:09: b5:fd:49:2d:e2:75:ec:e4:b3:bf:c3:d9:12:02:96: 11:e2:67:17:e0:ba:9c:46:58:6b:0c:b1:d6:6a:42: 9f:89:e1:7b:05:57:33:b5:fc:e7:cd:97:f7:0d:39: e1:35:e9:e6:20:69:a6:09:95:6d:1f:38:9f:77:ec: 30:eb:c5:8c:53:c1:63:d4:1e:30:0f:ee:88:34:d3: 8a:e2:6f:52:75:15:b5:b9:14:88:0d:09:52:22:fd: e6:23:3e:a8:db:b5:e8:6d:68:96:ea:4d:17:11:52: a1:e7:e4:85:d4:a2:04:fc:11:2a:d9:59:f9:8b:fa: 77:05:18:6f:20:85:f1:98:f7:1f:d7:dc:3f:d7:36: df:c7:67:4e:87:3e:4f:42:0c:17:be:bd:30:7f:c3: 70:f6:bb:11:52:1c:f3:3e:20:7c:ee:bb:28:f8:73: 3f:75:fd:9a:6d:48:76:47:14:e9:6c:be:e4:f9:77: 28:56:1b:5f:ad:81:ab:3b:84:c3:51:53:68:8a:2b: c6:2f:9d:ab:8a:56:4d:10:e1:da:8e:41:b1:ef:2c: 9f:82:0c:7d:d0:ef:b5:ed:c7:c4:29:50:63:ba:ee: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:6F:DF:ED:19:CA:B3:C7:46:74:57:0D:F3:4D:31:73:2B:63:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/c5133694-38bd-3e00-8c1c-f4b3c93bc8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv6: 2604:29a0:f000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:db:84:e6:8e:da:36:82:91:5f:cc:0c:83:a2:66:72:d7:bd: b6:f9:20:bf:fe:ed:cb:25:94:70:b1:67:86:df:38:83:5f:13: 36:1f:ad:56:fd:c9:68:e8:36:9b:bf:57:71:38:d6:0f:28:88: b0:b3:61:31:ad:2d:d6:2a:8c:c3:4f:6c:4f:1e:18:f2:37:74: 2b:a5:a5:88:79:a5:d3:1f:7e:58:42:f0:46:e0:7f:dd:4f:d8: 7b:89:9d:84:7f:61:aa:30:16:39:b4:a7:11:67:9a:fe:a5:a3: 83:d3:41:2c:68:2d:57:40:70:4e:ce:77:fe:fc:43:85:1d:38: 0f:90:7a:c3:b4:28:21:82:28:5a:c9:62:c5:2d:2f:44:a6:31: ac:63:ea:dc:ff:87:5f:88:e9:e4:5b:08:04:c3:c3:e5:87:8f: 97:e1:aa:63:7c:8c:08:55:2d:4a:68:0f:52:0f:4f:0c:53:82: 9e:d8:66:c3:57:89:3f:25:5d:32:8c:bb:be:db:91:08:d7:44: 6a:4e:03:47:b7:9a:8b:fd:24:d2:8c:4c:9e:f0:d9:3b:30:69: 49:87:fb:62:b8:91:cf:8d:c4:49:85:79:5b:0e:1b:5c:f5:41: e5:bd:70:14:34:82:1d:b0:e6:a2:da:6b:30:2c:33:8f:9a:12: f3:f3:6f:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRJ6JYvEn9iz0D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk Nzk3MjQxN2EtYjJhOS00ZGJlLTljOTYtN2Q2NTFhMjkzMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIi5gjBqw7Ehkm4FZAvF3zpI4GZ+0maS6CXf kQm1/Ukt4nXs5LO/w9kSApYR4mcX4LqcRlhrDLHWakKfieF7BVcztfznzZf3DTnh NenmIGmmCZVtHzifd+ww68WMU8Fj1B4wD+6INNOK4m9SdRW1uRSIDQlSIv3mIz6o 27XobWiW6k0XEVKh5+SF1KIE/BEq2Vn5i/p3BRhvIIXxmPcf19w/1zbfx2dOhz5P QgwXvr0wf8Nw9rsRUhzzPiB87rso+HM/df2abUh2RxTpbL7k+XcoVhtfrYGrO4TD UVNoiivGL52rilZNEOHajkGx7yyfggx90O+17cfEKVBjuu57RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLC6b9/tGcqzx0Z0Vw3zTTFzK2NZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvYzUxMzM2OTQtMzhiZC0z ZTAwLThjMWMtZjRiM2M5M2JjOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgQpoPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHbhOaO2jaCkV/MDIOiZnLXvbb5IL/+7csllHCxZ4bfOINfEzYf rVb9yWjoNpu/V3E41g8oiLCzYTGtLdYqjMNPbE8eGPI3dCulpYh5pdMfflhC8Ebg f91P2HuJnYR/YaowFjm0pxFnmv6lo4PTQSxoLVdAcE7Od/78Q4UdOA+QesO0KCGC KFrJYsUtL0SmMaxj6tz/h1+I6eRbCATDw+WHj5fhqmN8jAhVLUpoD1IPTwxTgp7Y ZsNXiT8lXTKMu77bkQjXRGpOA0e3mov9JNKMTJ7w2TswaUmH+2K4kc+NxEmFeVsO G1z1QeW9cBQ0gh2w5qLaazAsM4+aEvPzb9g= -----END CERTIFICATE-----Generated at Thu Mar 19 15:35:42 2026 by rpki-client