$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa File: 8dde01f3-144b-3f64-9c50-533507cff3ae.roa (raw, json) Hash identifier: TntcDfVgwnSKQ32LER3VyM+gcVrd4sl4oOdS3bBri7o= Subject key identifier: 5D:54:AA:21:31:53:57:0F:B8:90:99:8D:F9:8F:EE:8B:23:B3:B0:92 Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584D3F64E01D1165701963538A80 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 3677 IP address blocks: 2620:0:e58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e0:1d:11:65:70:19:63:53:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=5d27999f-70a4-48ef-8252-cc6d577c58e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:86:4c:c0:4e:26:19:45:e3:20:e1:75:55: 18:3b:7a:e0:6b:6b:e5:1b:14:57:15:68:91:31:f6: 83:80:fb:b8:f6:f2:fe:ef:cf:74:97:5a:0b:2f:03: 7a:b6:4a:ae:b6:d9:4b:0b:74:b5:66:c0:fd:f3:7e: 21:45:4d:d1:49:ab:ec:86:9c:b4:c6:5c:c1:81:ad: 06:0a:03:d0:80:6d:32:27:ce:e5:26:ff:d1:55:7e: fc:82:3b:da:4c:5f:bf:80:7b:32:0e:72:13:9a:c1: ea:55:f0:11:cd:99:8f:5e:e3:9e:34:48:fc:c4:f0: 8f:26:9a:75:0f:8e:db:f9:7e:7e:25:af:bf:ae:20: dd:34:f4:68:92:a5:ab:fb:4e:79:87:b0:4d:9f:7b: f7:77:55:62:c4:a7:dc:f1:3f:5f:b9:c1:57:4a:55: 09:15:04:ce:3c:59:63:cc:cf:98:fb:22:cf:2e:45: 42:9c:31:aa:f1:0d:12:67:83:d0:55:46:e3:c1:96: b1:d9:28:86:b4:10:6a:97:85:70:51:11:12:e2:17: df:93:4b:41:8e:0c:81:e3:48:7a:03:3b:83:d0:c6: 6b:31:98:c1:1a:24:99:f0:af:61:08:eb:53:f2:69: 9a:8e:9a:17:58:89:fb:aa:06:8c:16:6b:62:d7:99: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:54:AA:21:31:53:57:0F:B8:90:99:8D:F9:8F:EE:8B:23:B3:B0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:e58::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8a:ea:c6:34:3d:05:b8:0d:a1:7f:f3:9b:92:6d:0e:25:20: 6c:dc:62:bb:7b:74:bf:82:93:2f:45:1c:de:82:f3:bd:69:26: 81:4c:95:11:21:5f:ce:24:02:54:9f:8f:ab:84:10:59:a9:0e: 5f:07:18:54:e6:1a:e8:f5:1d:42:7b:7b:e6:eb:e0:1d:f3:fe: 66:7e:05:e1:b6:e5:57:77:28:c5:8a:87:0f:3f:aa:3a:b8:a6: df:6c:de:73:09:30:62:39:bf:60:c2:cc:90:db:68:a6:93:31: 10:2b:4b:e5:3f:dd:1e:1e:44:84:2b:bb:84:ed:f3:37:09:8d: bb:79:a1:0a:c1:af:2c:d1:90:96:89:ad:f4:7f:da:06:f2:de: 69:5d:fd:8c:34:7e:65:68:c7:8a:bb:85:8e:4d:7d:03:5d:33: 23:80:d3:4c:43:fb:de:c7:0f:4d:05:66:78:57:95:03:f3:11: 10:30:2b:17:c3:34:fc:ce:27:03:cf:d8:45:39:91:39:a3:46: 3f:f1:63:87:6f:66:45:93:a7:65:d0:bd:cc:ff:c1:d8:4f:5a: 38:2c:42:b9:f8:08:bd:1e:69:b4:00:1b:18:7d:7f:89:6e:b0: 7d:4d:c6:17:30:bd:da:55:37:dd:86:65:3b:b8:c3:c6:71:34: 9c:20:f8:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZOAdEWVwGWNTioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NWQyNzk5OWYtNzBhNC00OGVmLTgyNTItY2M2ZDU3N2M1OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtmGTMBOJhlF4yDhdVUYO3rga2vlGxRXFWiR MfaDgPu49vL+7890l1oLLwN6tkquttlLC3S1ZsD9834hRU3RSavshpy0xlzBga0G CgPQgG0yJ87lJv/RVX78gjvaTF+/gHsyDnITmsHqVfARzZmPXuOeNEj8xPCPJpp1 D47b+X5+Ja+/riDdNPRokqWr+055h7BNn3v3d1VixKfc8T9fucFXSlUJFQTOPFlj zM+Y+yLPLkVCnDGq8Q0SZ4PQVUbjwZax2SiGtBBql4VwURES4hffk0tBjgyB40h6 AzuD0MZrMZjBGiSZ8K9hCOtT8mmajpoXWIn7qgaMFmti15kaRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF1UqiExU1cPuJCZjfmP7osjs7CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvOGRkZTAxZjMtMTQ0Yi0z ZjY0LTljNTAtNTMzNTA3Y2ZmM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA5Y MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESK6sY0PQW4DaF/85uSbQ4lIGzcYrt7dL+Cky9FHN6C871pJoFM lREhX84kAlSfj6uEEFmpDl8HGFTmGuj1HUJ7e+br4B3z/mZ+BeG25Vd3KMWKhw8/ qjq4pt9s3nMJMGI5v2DCzJDbaKaTMRArS+U/3R4eRIQru4Tt8zcJjbt5oQrBryzR kJaJrfR/2gby3mld/Yw0fmVox4q7hY5NfQNdMyOA00xD+97HD00FZnhXlQPzERAw KxfDNPzOJwPP2EU5kTmjRj/xY4dvZkWTp2XQvcz/wdhPWjgsQrn4CL0eabQAGxh9 f4lusH1NxhcwvdpVN92GZTu4w8ZxNJwg+GI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:44 2026 by rpki-client