$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa File: c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa (raw, json) Hash identifier: gT//Ut9XCv0KS4WunWlieBqd5B0vDvXVeEdaV28+q/4= Subject key identifier: 24:6E:15:73:1C:4E:CA:88:38:90:CD:69:56:75:A7:6F:83:FA:03:F4 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584D100CFE39EA13EC89A6DFB770 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 174 IP address blocks: 2601:2008::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:fe:39:ea:13:ec:89:a6:df:b7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=bc3d7740-74a5-4bb3-ad5c-594765ae2768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:44:e7:19:5b:10:69:58:05:bd:c9:4b:7d: 78:e4:18:e7:f2:4d:de:fb:2b:87:cd:63:2c:71:0f: 0c:8e:9f:a7:f5:36:21:20:4c:96:2d:56:7c:dd:b8: 99:b9:54:2f:5f:20:e7:0b:2d:11:ae:4a:b7:33:8a: 1f:a0:25:88:b9:19:b2:ec:2b:d9:7d:1c:d7:76:b7: 00:3b:1a:a3:76:e0:ed:46:e0:d1:50:7e:ec:b8:7f: be:81:75:fb:80:7e:02:08:d4:16:cd:e4:4c:34:aa: 2a:69:a4:35:24:db:48:46:6e:36:f5:f8:f4:4b:50: eb:f8:54:52:0d:14:1e:ed:99:97:1e:ff:39:d7:55: 8f:b0:e1:cd:ea:31:24:05:af:67:42:2f:00:61:05: 8b:1e:81:66:6e:b9:c9:ce:61:bb:f1:f1:29:44:e2: 50:76:24:6c:1f:6a:29:53:e7:61:43:6a:27:8e:00: 2e:50:5a:1c:bf:ba:81:41:80:3f:f4:28:ec:6d:7f: fe:fa:2c:a9:70:d4:e8:16:b9:78:10:95:79:1c:22: 34:51:ba:af:b4:b7:7b:c9:80:52:11:2d:43:49:86: d9:aa:da:e8:5f:70:ec:0e:fe:e3:f7:72:4a:05:51: a5:95:af:45:e0:de:08:f0:a0:ab:88:65:d4:fb:d6: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6E:15:73:1C:4E:CA:88:38:90:CD:69:56:75:A7:6F:83:FA:03:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:2008::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:eb:cf:62:f7:59:8f:38:7a:16:37:0b:25:07:9b:bb:40:ab: 4c:d5:7e:1c:99:6e:5a:ce:d3:cd:00:fa:d3:65:7e:fb:f9:e3: 15:6f:39:d8:88:15:66:76:aa:09:ce:35:69:7d:c3:b0:51:63: 17:ac:9e:ff:c8:de:f3:12:8b:c5:08:79:58:78:fb:b6:4e:25: 15:06:2e:3e:27:34:c5:c2:7b:5e:57:e6:1a:4e:44:f9:46:b8: 21:58:63:2a:dd:65:06:b7:32:0f:c5:73:19:52:f1:fd:94:92: 8f:41:42:90:2d:9e:c5:59:ca:cb:8b:22:24:d7:72:03:87:4f: 13:44:95:7c:b2:ab:53:ed:85:7e:51:f2:d1:57:93:26:40:1c: 87:cc:36:f0:f6:5b:5e:ce:fc:59:d5:5b:c6:cc:13:51:8e:38: fb:7d:1a:74:d9:dd:2b:18:92:ed:c6:43:f7:66:43:6e:d6:06: 14:ee:27:96:74:b6:01:02:6c:ea:a0:e6:b6:a8:43:c7:0b:e3: ce:03:7d:cd:8c:e0:4d:29:92:66:85:38:8a:45:f0:ec:33:4c: 9d:08:c4:67:02:a2:f2:cf:46:79:47:c4:66:f0:ca:b2:a3:48: 59:fa:ed:8e:b6:72:43:a6:c8:35:e0:f3:be:5b:7e:fd:a9:97: 08:68:be:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0QDP456hPsiabft3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk YmMzZDc3NDAtNzRhNS00YmIzLWFkNWMtNTk0NzY1YWUyNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl9E5xlbEGlYBb3JS3145Bjn8k3e+yuHzWMs cQ8Mjp+n9TYhIEyWLVZ83biZuVQvXyDnCy0Rrkq3M4ofoCWIuRmy7CvZfRzXdrcA OxqjduDtRuDRUH7suH++gXX7gH4CCNQWzeRMNKoqaaQ1JNtIRm429fj0S1Dr+FRS DRQe7ZmXHv8511WPsOHN6jEkBa9nQi8AYQWLHoFmbrnJzmG78fEpROJQdiRsH2op U+dhQ2onjgAuUFocv7qBQYA/9CjsbX/++iypcNToFrl4EJV5HCI0UbqvtLd7yYBS ES1DSYbZqtroX3DsDv7j93JKBVGlla9F4N4I8KCriGXU+9Z7TQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCRuFXMcTsqIOJDNaVZ1p2+D+gP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzMyZTFiMmMtOWI5OC0z ODBlLWJkMDgtYWQ2ZjllMjRjY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEgCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCg689i91mPOHoWNwslB5u7QKtM1X4cmW5aztPNAPrTZX77+eMVbznY iBVmdqoJzjVpfcOwUWMXrJ7/yN7zEovFCHlYePu2TiUVBi4+JzTFwnteV+YaTkT5 RrghWGMq3WUGtzIPxXMZUvH9lJKPQUKQLZ7FWcrLiyIk13IDh08TRJV8sqtT7YV+ UfLRV5MmQByHzDbw9ltezvxZ1VvGzBNRjjj7fRp02d0rGJLtxkP3ZkNu1gYU7ieW dLYBAmzqoOa2qEPHC+POA33NjOBNKZJmhTiKRfDsM0ydCMRnAqLyz0Z5R8Rm8Mqy o0hZ+u2OtnJDpsg14PO+W379qZcIaL59 -----END CERTIFICATE-----Generated at Wed Mar 25 21:29:22 2026 by rpki-client