$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa File: 169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa (raw, json) Hash identifier: kmgJsifEhZZ2YwTrWgFHRMeOYCvXlBxlSoy/o1q3kO0= Subject key identifier: 2C:97:07:2B:83:20:48:3A:82:25:2A:19:99:A2:31:C9:1F:5D:3E:17 Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F4328584D0D4250F444F288430FAAC280 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 7057 IP address blocks: 2600:dc00::/28 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:50:f4:44:f2:88:43:0f:aa:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=2d587ec2-81a0-4290-b638-f44c81cfb581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d3:33:97:cb:e3:2a:33:c6:46:3f:67:c9:49: fa:53:3c:59:86:e6:f4:2c:0d:ea:4e:ef:a5:65:6f: ec:af:39:77:47:1c:40:93:cd:b8:f9:31:4f:9e:6e: c1:5d:68:a1:be:28:d6:14:8f:71:97:c5:5a:1f:11: 04:eb:2d:a8:a6:fe:d9:79:5b:28:cf:1f:8c:c1:74: 45:03:b2:13:6f:2b:48:73:b5:8d:85:29:af:38:ff: bd:61:0d:f0:c1:8e:5f:25:a1:25:26:6a:bb:f0:63: cb:6a:a4:71:9a:38:b2:4a:1d:64:57:2a:f5:b0:2c: 77:72:ae:74:94:0a:cd:dd:4c:e9:d7:4d:1d:c3:d4: cc:d5:29:f6:19:26:08:e2:5c:16:df:2b:ec:8b:13: ac:42:4c:f7:7e:41:04:ed:3e:f4:4c:5d:9c:4a:df: 44:fe:94:88:50:a4:e1:2c:e7:dc:d3:0c:ee:1a:03: c6:09:11:62:fc:06:5d:b4:a4:6f:9f:3a:4b:7e:d4: 5d:ab:b0:ae:66:c5:56:f4:c6:c3:55:8e:40:81:be: e3:b7:97:a2:94:80:1c:10:63:81:c8:f2:fa:3d:2e: 54:57:82:70:6e:96:f6:06:64:fc:5f:d1:35:2a:af: 87:9f:0b:f3:38:78:e6:ca:04:fb:5d:54:0d:65:ce: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:97:07:2B:83:20:48:3A:82:25:2A:19:99:A2:31:C9:1F:5D:3E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv6: 2600:dc00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9f:ab:a2:64:a5:e7:90:ab:dd:fa:41:e3:db:ed:f7:b4:f0: 6b:97:4c:4c:22:6a:6a:af:6d:91:e0:1b:41:4d:cc:89:1a:63: fe:8c:c1:d5:21:5b:42:24:b9:ab:5a:a0:1d:cd:37:75:ab:e2: b9:ab:3e:f4:45:b0:e2:18:5c:2b:d6:8b:51:cf:19:50:0f:fa: f6:12:1e:2f:fa:43:01:d5:e5:07:c0:39:bf:d7:60:da:92:77: 54:1e:85:e8:9c:5e:f9:07:42:2c:a5:d5:41:1c:b2:c3:60:28: 82:57:7a:a0:b6:01:8c:d1:ae:db:71:35:e4:42:6f:98:d2:4e: 3b:88:19:45:ea:96:7f:10:c4:89:7d:8a:54:f0:54:af:17:40: f0:18:d3:70:ea:0a:b8:f0:bc:35:71:cf:d8:cf:0d:ad:2f:d6: 0b:21:3b:35:61:5a:77:de:d5:ca:6e:9b:8c:31:2a:07:e1:03: 1c:8c:d6:26:3e:00:fa:ce:49:8f:a8:0a:6a:05:26:3e:cd:2f: 89:79:dd:c7:52:5b:1e:0e:1d:40:30:c4:8f:51:24:3e:7d:e7: a5:2c:55:c7:e9:02:9d:da:8c:c8:d9:0d:3e:b5:c0:e2:ae:8e: 05:16:f4:db:66:10:94:21:e7:c0:8e:70:bd:cd:b4:2f:e6:49: 1b:df:9f:e8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0NQlD0RPKIQw+qwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MmQ1ODdlYzItODFhMC00MjkwLWI2MzgtZjQ0YzgxY2ZiNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNMzl8vjKjPGRj9nyUn6UzxZhub0LA3qTu+l ZW/srzl3RxxAk824+TFPnm7BXWihvijWFI9xl8VaHxEE6y2opv7ZeVsozx+MwXRF A7ITbytIc7WNhSmvOP+9YQ3wwY5fJaElJmq78GPLaqRxmjiySh1kVyr1sCx3cq50 lArN3Uzp100dw9TM1Sn2GSYI4lwW3yvsixOsQkz3fkEE7T70TF2cSt9E/pSIUKTh LOfc0wzuGgPGCRFi/AZdtKRvnzpLftRdq7CuZsVW9MbDVY5Agb7jt5eilIAcEGOB yPL6PS5UV4Jwbpb2BmT8X9E1Kq+HnwvzOHjmygT7XVQNZc6f+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCyXByuDIEg6giUqGZmiMckfXT4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvMTY5YmQ2MWMtZDc3YS0z YTVkLWFlYTEtZWI4MDM0ZmM3ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDcADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjn6uiZKXnkKvd+kHj2+33tPBrl0xMImpqr22R4BtBTcyJGmP+jMHV IVtCJLmrWqAdzTd1q+K5qz70RbDiGFwr1otRzxlQD/r2Eh4v+kMB1eUHwDm/12Da kndUHoXonF75B0IspdVBHLLDYCiCV3qgtgGM0a7bcTXkQm+Y0k47iBlF6pZ/EMSJ fYpU8FSvF0DwGNNw6gq48Lw1cc/Yzw2tL9YLITs1YVp33tXKbpuMMSoH4QMcjNYm PgD6zkmPqApqBSY+zS+Jed3HUlseDh1AMMSPUSQ+feelLFXH6QKd2ozI2Q0+tcDi ro4FFvTbZhCUIefAjnC9zbQv5kkb35/o -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:07 2026 by rpki-client