$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa File: 87861e8e-e119-338a-9c76-9baa9ffaaa02.roa (raw, json) Hash identifier: AG8hecy2hVnIrPSsH4Xxdilxk0wqjLXGUc2SK+MkWXY= Subject key identifier: B1:F5:01:04:2B:D0:B1:91:16:31:AE:FE:C8:E8:52:5A:BF:BB:00:A1 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584D186CFDD65CB51EC8B1795E80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa Signing time: Sun 08 Mar 2026 02:00:31 +0000 ROA not before: Sun 08 Mar 2026 02:00:31 +0000 ROA not after: Sat 06 Jun 2026 01:00:31 +0000 asID: 41095 IP address blocks: 2601:2060::/29 maxlen: 32 2601:2080::/29 maxlen: 32 2601:20e0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:6c:fd:d6:5c:b5:1e:c8:b1:79:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Mar 8 02:00:31 2026 GMT Not After : Jun 6 01:00:31 2026 GMT Subject: CN=1502787d-587b-4fcf-80cd-82c7b76ce4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:89:f9:63:f8:03:ab:8c:8d:63:7d:37:88: 9a:1f:b7:ee:1a:34:e9:2c:ac:56:c0:d2:46:d4:05: c4:af:3a:10:8e:c9:36:1d:a6:2a:04:16:99:7d:9d: ab:35:1a:55:35:6d:f9:44:46:bb:58:03:9f:c5:08: 11:18:4c:5f:f3:f2:22:1b:ad:cd:0f:d7:b4:87:72: 1c:c4:8f:7c:14:68:5c:10:87:4b:04:32:2b:5a:c2: 21:51:b7:df:f9:83:e9:32:37:a4:76:9c:31:02:e3: 61:51:22:12:26:4d:ab:d8:84:dc:0c:83:d6:31:af: 74:8b:09:54:6a:06:f6:c5:ba:a7:96:2e:25:6a:ff: 4b:23:79:ac:de:ba:cc:bb:40:02:49:10:9d:0f:be: d1:73:ff:d7:9f:4d:32:36:8e:e4:4e:e4:fa:9d:43: ac:6a:5f:1a:c6:5c:aa:5b:40:7e:92:87:96:dd:2c: f5:c9:a4:4f:55:f4:67:a0:74:42:46:5a:aa:06:7c: 7a:a5:df:3c:ec:5c:a3:fc:53:ca:f1:9b:fd:79:b3: 0f:52:0e:03:81:92:7b:08:05:cc:10:91:19:58:5f: 52:1c:38:a8:0d:94:be:96:86:ab:42:82:3d:63:b7: 08:13:9f:c8:fc:75:b5:4d:e2:ad:2d:6f:e3:4d:dc: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F5:01:04:2B:D0:B1:91:16:31:AE:FE:C8:E8:52:5A:BF:BB:00:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:2060::/29 2601:2080::/29 2601:20e0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5e:ec:0e:3a:e4:52:01:f1:47:9a:2c:16:1d:fa:29:93:d5: 02:f5:a3:7d:14:1f:5b:a1:90:56:c5:96:25:b1:c0:21:08:be: d4:7f:66:b2:9c:73:fc:85:34:cf:c6:29:a8:1d:cc:9b:b1:9c: 43:c3:18:d5:3e:81:4e:76:81:50:10:be:ac:43:7e:46:b7:fd: 11:a2:29:bb:2b:82:36:9a:b4:0d:ae:56:76:62:ef:34:c7:24: e7:4f:c3:4e:b0:b1:4e:68:f0:0a:b7:e3:28:b0:62:93:d6:59: de:48:a4:76:f1:bb:25:65:63:a4:10:22:0f:c0:2b:96:fd:1a: 70:8d:21:21:65:12:e7:23:ea:8b:08:3a:da:8d:9b:46:2d:ed: a1:93:ea:22:93:bd:68:1d:bb:91:62:1d:b5:2d:1f:48:0a:d8: e7:96:a2:a7:16:31:37:00:a9:7d:03:2a:06:68:e4:dc:2b:9e: 1f:8d:2f:34:3f:d7:f5:dd:0a:59:28:2a:b8:c2:77:87:14:9a: 75:06:72:4d:d7:1a:84:23:89:61:12:e1:1e:48:b1:4e:04:8e: 5e:9b:d0:60:63:7f:07:50:17:5f:15:9f:02:7d:85:ce:d6:1d: 3f:b1:8d:99:cf:72:9c:6a:78:b0:42:0a:cb:d2:94:a8:c9:f1: fd:f0:78:9b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0YbP3WXLUeyLF5XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk MTUwMjc4N2QtNTg3Yi00ZmNmLTgwY2QtODJjN2I3NmNlNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhWJ+WP4A6uMjWN9N4iaH7fuGjTpLKxWwNJG 1AXErzoQjsk2HaYqBBaZfZ2rNRpVNW35REa7WAOfxQgRGExf8/IiG63ND9e0h3Ic xI98FGhcEIdLBDIrWsIhUbff+YPpMjekdpwxAuNhUSISJk2r2ITcDIPWMa90iwlU agb2xbqnli4lav9LI3ms3rrMu0ACSRCdD77Rc//Xn00yNo7kTuT6nUOsal8axlyq W0B+koeW3Sz1yaRPVfRnoHRCRlqqBnx6pd887Fyj/FPK8Zv9ebMPUg4DgZJ7CAXM EJEZWF9SHDioDZS+loarQoI9Y7cIE5/I/HW1TeKtLW/jTdykVQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFLH1AQQr0LGRFjGu/sjoUlq/uwChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODc4NjFlOGUtZTExOS0z MzhhLTljNzYtOWJhYTlmZmFhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDJgEgYAMF AyYBIIADBQMmASDgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACde7A465FIB8UeaLBYd+imT1QL1o30UH1uh kFbFliWxwCEIvtR/ZrKcc/yFNM/GKagdzJuxnEPDGNU+gU52gVAQvqxDfka3/RGi KbsrgjaatA2uVnZi7zTHJOdPw06wsU5o8Aq34yiwYpPWWd5IpHbxuyVlY6QQIg/A K5b9GnCNISFlEucj6osIOtqNm0Yt7aGT6iKTvWgdu5FiHbUtH0gK2OeWoqcWMTcA qX0DKgZo5Nwrnh+NLzQ/1/XdClkoKrjCd4cUmnUGck3XGoQjiWES4R5IsU4Ejl6b 0GBjfwdQF18VnwJ9hc7WHT+xjZnPcpxqeLBCCsvSlKjJ8f3weJs= -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:05 2026 by rpki-client