$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa File: 2953b610-a434-3572-bb79-1dcab516be48.roa (raw, json) Hash identifier: 4FWieEcy//7CiQFPJ5e1nVJ3miY/67zvxm6mr4NxAX0= Subject key identifier: 02:5A:4B:0B:27:5F:D3:EF:82:20:8E:FD:88:8B:CD:03:3D:8C:DF:89 Certificate issuer: /CN=c939804d-392f-4714-a1f1-89eb4660daf7 Certificate serial: 010D0C9F4328584D3F64D4D0EFB614837DECB580 Authority key identifier: C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 11990 IP address blocks: 2605:fa80::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d4:d0:ef:b6:14:83:7d:ec:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c939804d-392f-4714-a1f1-89eb4660daf7 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=ecb4145a-fae9-41f6-842f-d8d779f741fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:c5:13:e8:0f:51:7e:17:f5:07:b6:2a:6e: 8c:24:8e:83:df:69:f5:95:44:bd:1c:80:ce:6c:01: 3d:e1:ba:ea:8f:ab:76:43:a1:67:a3:a3:b0:0f:67: b4:bf:73:34:db:93:75:ea:d2:1b:9d:da:00:a9:7c: 43:ce:b8:80:d9:4b:89:86:53:25:25:ca:75:03:90: 0c:94:25:3d:42:dd:8a:d0:bb:6e:71:fd:b0:f7:d7: df:3c:cd:c0:fe:c6:b6:44:88:ec:85:e4:90:0e:22: 6f:01:15:a2:4d:9a:4c:92:db:03:37:38:cd:bb:ff: 5c:3f:6b:2e:83:51:36:53:aa:2c:8c:65:6c:d5:75: 00:a6:fd:ba:03:82:82:0d:47:ff:4e:59:78:9a:62: 1a:d1:9f:a0:36:93:51:f7:34:8d:72:d1:09:d4:f1: 27:b0:ca:55:7d:67:b1:41:95:95:e5:6b:e7:17:5e: 75:53:42:a1:f7:bd:3d:f2:6e:e6:9d:bf:e7:11:27: 1d:45:b9:54:81:4f:b4:2c:9b:30:e0:ee:da:cc:50: c6:09:4d:5d:df:9c:0f:da:48:b3:ad:5a:ce:1d:6c: c1:12:d0:d9:b6:ac:ac:91:f1:45:6a:63:25:94:79: 4c:60:08:91:1f:4a:cc:fa:4d:ff:94:fd:18:5b:6f: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5A:4B:0B:27:5F:D3:EF:82:20:8E:FD:88:8B:CD:03:3D:8C:DF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl X509v3 Authority Key Identifier: keyid:C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer sbgp-ipAddrBlock: critical IPv6: 2605:fa80::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c0:d5:fc:bf:b1:e8:e0:55:e9:c5:e0:d8:5f:f9:63:f5:0c: 70:02:80:6a:3d:8e:7f:cd:e8:43:49:c0:71:88:6c:2d:e5:0c: 90:20:e5:bb:ba:d7:7a:37:33:22:63:7f:84:25:ea:0f:5f:55: 99:a2:5a:90:e0:77:78:ee:14:2f:7c:2c:a8:52:59:e7:80:de: 8f:6e:cb:03:d4:a8:69:3b:f6:c6:8e:fb:83:ad:71:7f:db:ef: d6:82:7f:eb:9a:6e:cc:fd:fe:9f:cd:4d:06:d4:ba:fb:50:b4: 6f:eb:36:82:40:47:ef:e5:57:fb:96:51:99:16:2e:82:71:c9: a2:89:7b:34:ff:03:38:c9:e8:89:12:77:4d:9a:d5:18:3b:0b: 3b:b6:e9:1f:ed:ad:cd:a2:48:f7:59:a1:b9:36:44:e7:b2:32: f1:ff:cc:b2:4d:af:b7:03:df:fe:13:1e:e6:3f:44:66:61:f3: 9f:5b:72:25:03:d4:cd:e9:df:a1:4d:47:3f:22:13:a7:4e:4b: 7f:a0:9f:7e:69:ed:65:24:74:b7:76:2e:c7:e2:d7:49:d2:8c: 45:fe:e3:31:0f:3d:c2:4a:4f:aa:86:38:02:3c:02:df:05:50: 48:21:83:bc:76:a7:7b:be:0d:99:37:16:f7:0b:f3:83:fa:38: d8:26:b2:9a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0/ZNTQ77YUg33stYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkzOTgwNGQtMzkyZi00NzE0LWExZjEtODllYjQ2NjBk YWY3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWNiNDE0NWEtZmFlOS00MWY2LTg0MmYtZDhkNzc5Zjc0MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN/FE+gPUX4X9Qe2Km6MJI6D32n1lUS9HIDO bAE94brqj6t2Q6Fno6OwD2e0v3M025N16tIbndoAqXxDzriA2UuJhlMlJcp1A5AM lCU9Qt2K0Ltucf2w99ffPM3A/sa2RIjsheSQDiJvARWiTZpMktsDNzjNu/9cP2su g1E2U6osjGVs1XUApv26A4KCDUf/Tll4mmIa0Z+gNpNR9zSNctEJ1PEnsMpVfWex QZWV5WvnF151U0Kh97098m7mnb/nEScdRblUgU+0LJsw4O7azFDGCU1d35wP2kiz rVrOHWzBEtDZtqyskfFFamMllHlMYAiRH0rM+k3/lP0YW28F2wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAJaSwsnX9PvgiCO/YiLzQM9jN+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jOTM5 ODA0ZC0zOTJmLTQ3MTQtYTFmMS04OWViNDY2MGRhZjcvMjk1M2I2MTAtYTQzNC0z NTcyLWJiNzktMWRjYWI1MTZiZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzkzOTgwNGQtMzkyZi00NzE0LWEx ZjEtODllYjQ2NjBkYWY3L2M5Mzk4MDRkLTM5MmYtNDcxNC1hMWYxLTg5ZWI0NjYw ZGFmNy5jcmwwHwYDVR0jBBgwFoAUxvzRCRv6XQ+mZQwcFMpms7mZpIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jOTM5ODA0ZC0zOTJmLTQ3MTQtYTFmMS04OWVi NDY2MGRhZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgX6gAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAb8DV/L+x6OBV6cXg2F/5Y/UMcAKAaj2Of83oQ0nAcYhsLeUMkCDl u7rXejczImN/hCXqD19VmaJakOB3eO4UL3wsqFJZ54Dej27LA9SoaTv2xo77g61x f9vv1oJ/65puzP3+n81NBtS6+1C0b+s2gkBH7+VX+5ZRmRYugnHJool7NP8DOMno iRJ3TZrVGDsLO7bpH+2tzaJI91mhuTZE57Iy8f/Msk2vtwPf/hMe5j9EZmHzn1ty JQPUzenfoU1HPyITp05Lf6CffmntZSR0t3Yux+LXSdKMRf7jMQ89wkpPqoY4AjwC 3wVQSCGDvHane74NmTcW9wvzg/o42Caymg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:07 2026 by rpki-client