$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa File: ef63e560-1036-3fd3-af61-21d022a1a803.roa (raw, json) Hash identifier: LE8ypv3Nbn1azz4Pt3RvOC8145oBJCa74YGqm1ZKRI0= Subject key identifier: DB:5E:7E:79:FA:74:A0:5D:4A:45:79:3D:A8:8E:FC:09:D9:5A:89:EE Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584D316F6D4D965A17F5AA2EC1A0 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 36007 IP address blocks: 2604:bc0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6d:4d:96:5a:17:f5:aa:2e:c1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=1a0d614a-2285-4906-845f-3ca0a5543061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:20:75:3a:ea:23:8f:4f:f7:d6:02:01:9b: b1:08:e1:fc:3d:e8:e0:fa:d0:82:c7:54:c5:50:94: bf:1a:9f:b1:ad:de:e3:17:c4:04:1e:87:9f:69:80: 12:56:6a:96:e0:09:f3:9d:3a:1c:14:4f:52:d4:ac: 30:c2:fe:7e:2c:73:c4:61:1d:e1:a0:2b:67:73:36: 2f:fe:34:69:f7:d5:e5:88:ef:a9:21:c3:ce:26:5a: 7a:0c:a8:6c:ee:74:52:b9:ac:3b:20:b8:fb:08:f9: 73:c2:49:a7:11:e1:5f:0e:7a:51:6f:aa:e3:32:7f: 28:e5:1c:ca:42:0a:bb:70:94:e7:66:6e:ce:14:df: de:3b:b0:3b:6b:99:be:cc:95:c5:f8:47:63:b8:e3: df:6c:cb:84:02:bb:ef:e8:5d:a3:e4:84:bf:9e:48: a5:bb:32:62:ef:a3:10:3b:35:92:ee:aa:c2:65:78: 44:73:86:d3:2f:ef:6f:0e:5a:e4:03:37:68:29:a6: df:8c:13:79:c3:3c:6c:c9:f5:d1:ab:9b:a0:68:4f: 97:77:38:a5:f9:2f:a4:21:cc:34:8f:3a:48:65:67: b8:cf:31:93:ce:df:e5:46:6b:0c:79:69:22:aa:ad: ab:e4:08:e2:8c:13:58:42:f3:aa:7e:66:c7:5c:25: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5E:7E:79:FA:74:A0:5D:4A:45:79:3D:A8:8E:FC:09:D9:5A:89:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv6: 2604:bc0:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d0:5b:5e:22:c2:29:11:20:61:67:5a:9d:ee:0e:df:06:aa: c0:55:3d:7a:97:cf:96:d2:ad:6f:6a:3e:47:3b:e1:e7:a6:cb: f4:c1:fb:3d:07:a1:4a:7c:1f:cb:1c:af:0b:5f:4b:0f:cf:7c: 8f:b7:ef:54:84:d0:4d:02:23:aa:0d:7b:32:b7:14:2f:9a:87: 79:da:ff:24:6f:49:e9:b8:5c:76:64:9f:d4:88:ad:63:b5:f2: 0a:96:9a:79:12:8b:c9:84:0f:ed:5c:39:e4:c9:0d:09:c7:36: d0:69:99:26:57:6e:64:21:ec:13:81:96:87:6a:13:20:07:f1: 0d:2c:28:01:c6:06:79:e7:6f:d1:ca:6f:19:b0:a0:59:e1:72: 35:79:55:de:0d:9d:32:93:91:8a:33:63:07:61:84:7f:42:7d: ed:86:e3:2e:20:21:9c:2c:52:61:34:e9:82:f9:84:84:2f:82: f9:ff:19:2f:c7:8f:79:fe:c2:0b:e8:27:4b:64:d1:08:77:5c: a3:10:36:96:ee:f2:24:82:dc:2f:47:5c:53:fa:e6:19:4c:48: d7:ad:1d:ff:66:3c:99:2d:53:72:b1:a6:d3:17:e9:09:9e:55: e5:04:fd:9a:91:89:97:92:9f:47:ad:2b:ff:2f:58:66:1a:96: bf:ec:e0:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0xb21NlloX9aouwaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MWEwZDYxNGEtMjI4NS00OTA2LTg0NWYtM2NhMGE1NTQzMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ggdTrqI49P99YCAZuxCOH8Pejg+tCCx1TF UJS/Gp+xrd7jF8QEHoefaYASVmqW4AnznTocFE9S1Kwwwv5+LHPEYR3hoCtnczYv /jRp99XliO+pIcPOJlp6DKhs7nRSuaw7ILj7CPlzwkmnEeFfDnpRb6rjMn8o5RzK Qgq7cJTnZm7OFN/eO7A7a5m+zJXF+EdjuOPfbMuEArvv6F2j5IS/nkiluzJi76MQ OzWS7qrCZXhEc4bTL+9vDlrkAzdoKabfjBN5wzxsyfXRq5ugaE+Xdzil+S+kIcw0 jzpIZWe4zzGTzt/lRmsMeWkiqq2r5AjijBNYQvOqfmbHXCWGpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNtefnn6dKBdSkV5PaiO/AnZWonuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvZWY2M2U1NjAtMTAzNi0z ZmQzLWFmNjEtMjFkMDIyYTFhODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQLwAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnQW14iwikRIGFnWp3uDt8GqsBVPXqXz5bSrW9qPkc74eemy/TB +z0HoUp8H8scrwtfSw/PfI+371SE0E0CI6oNezK3FC+ah3na/yRvSem4XHZkn9SI rWO18gqWmnkSi8mED+1cOeTJDQnHNtBpmSZXbmQh7BOBlodqEyAH8Q0sKAHGBnnn b9HKbxmwoFnhcjV5Vd4NnTKTkYozYwdhhH9Cfe2G4y4gIZwsUmE06YL5hIQvgvn/ GS/Hj3n+wgvoJ0tk0Qh3XKMQNpbu8iSC3C9HXFP65hlMSNetHf9mPJktU3KxptMX 6QmeVeUE/ZqRiZeSn0etK/8vWGYalr/s4FY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:12 2026 by rpki-client