$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa File: 5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa (raw, json) Hash identifier: 266qbxtjhN0jmweB9xiXXz+Rp83Xi4wdLTWr0gSttl8= Subject key identifier: 63:13:D7:7A:C0:5D:74:CF:D3:19:F3:A8:12:1A:CA:0B:52:FD:1F:61 Certificate issuer: /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Certificate serial: 010D0C9F4328584D44FA37DC482D9BEA2E9C4A80 Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397457 IP address blocks: 2620:128:2010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:37:dc:48:2d:9b:ea:2e:9c:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=db86d8df-1aca-4b01-9233-5603dc30aa83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:18:e0:ff:57:c5:bb:a6:b1:eb:9a:81:6a: f5:3b:80:c7:ad:0c:fe:8e:89:97:94:6b:b1:28:f6: bd:7d:32:21:be:a0:cd:49:e6:da:16:ef:ed:6f:a0: 6b:2b:b1:43:f0:f2:68:ef:ef:2e:01:de:25:d0:f5: 92:d6:37:52:56:a0:dc:02:b6:5f:ea:be:6a:26:19: 48:9f:42:af:11:6a:e1:e9:65:84:51:d6:44:30:da: 80:50:d0:5e:94:4c:34:2b:7f:5b:9b:a0:34:d8:3d: e3:da:28:ec:5f:2f:70:47:b1:24:4d:84:18:73:4a: f6:8c:23:00:00:cb:8a:85:e2:5f:7b:07:16:69:d3: d0:ca:ac:2a:df:51:cf:8b:e1:97:66:44:d5:03:27: 60:a2:23:d5:cc:9e:02:88:3b:44:be:0a:e9:b5:90: 49:f8:73:01:ab:c6:1f:ca:b8:50:4b:3f:62:d1:0e: 02:11:28:b6:34:9a:ec:f4:e0:e2:6a:bb:af:1b:c0: ca:cd:7e:13:de:cc:aa:41:b6:9e:78:0c:aa:53:eb: aa:de:32:1d:2a:4f:5d:cc:14:8d:45:38:ba:8c:a7: c1:1f:e8:69:43:6b:27:71:8b:03:de:48:64:67:18: dd:ea:6d:49:30:57:4d:6c:04:ee:b3:c3:ed:33:50: 53:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:D7:7A:C0:5D:74:CF:D3:19:F3:A8:12:1A:CA:0B:52:FD:1F:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl X509v3 Authority Key Identifier: keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer sbgp-ipAddrBlock: critical IPv6: 2620:128:2010::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:10:88:db:90:3b:77:38:2d:c4:58:91:b8:31:6a:0f:7c:de: 16:07:0c:05:cf:fc:d4:5e:72:a9:12:b6:04:0b:85:d0:84:83: 6e:3d:4e:2b:29:cd:88:11:f2:67:79:2c:b8:43:72:f2:27:6f: 98:9d:72:63:e5:44:d9:e1:49:27:1e:ae:b4:11:a9:4d:da:7e: f8:69:06:7f:81:b8:5f:81:ea:bd:b7:6e:94:94:da:80:1c:93: ff:56:9a:80:4f:04:0e:83:a1:e2:8f:b4:db:9a:11:40:fa:9f: 3a:09:10:88:04:fe:76:1d:e2:0b:1f:32:64:8f:59:9d:ed:a8: 97:50:67:ee:f6:28:e5:c5:39:1a:8e:ec:c6:c4:80:12:dd:ac: 90:54:ca:f4:d2:81:5c:df:09:7e:53:63:40:91:cf:5e:cb:68: 84:39:3d:f4:93:2d:20:1a:ff:7c:89:7f:42:02:67:ca:a6:19: cc:2d:4f:b5:74:ad:93:74:77:db:79:8b:82:f5:5b:38:06:e1: d4:57:76:3d:35:87:c2:04:75:0b:ae:4b:10:ca:68:ed:7d:c9: 6e:50:ec:7e:db:a0:83:45:3d:39:cf:a9:1f:22:01:26:e6:74: 85:ee:67:83:1b:e4:cf:2b:2f:f8:2f:67:bd:7e:78:58:1f:4c: 92:68:1b:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+jfcSC2b6i6cSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzZGExY2EtYTMwMi00MzZhLWJkNWYtMGE1Yjc1YmFl YWRkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZGI4NmQ4ZGYtMWFjYS00YjAxLTkyMzMtNTYwM2RjMzBhYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYoY4P9XxbumseuagWr1O4DHrQz+jomXlGux KPa9fTIhvqDNSebaFu/tb6BrK7FD8PJo7+8uAd4l0PWS1jdSVqDcArZf6r5qJhlI n0KvEWrh6WWEUdZEMNqAUNBelEw0K39bm6A02D3j2ijsXy9wR7EkTYQYc0r2jCMA AMuKheJfewcWadPQyqwq31HPi+GXZkTVAydgoiPVzJ4CiDtEvgrptZBJ+HMBq8Yf yrhQSz9i0Q4CESi2NJrs9ODiaruvG8DKzX4T3syqQbaeeAyqU+uq3jIdKk9dzBSN RTi6jKfBH+hpQ2sncYsD3khkZxjd6m1JMFdNbATus8PtM1BTowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGMT13rAXXTP0xnzqBIaygtS/R9hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNk YTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTViNzViYWVhZGQvNWVjOTFmN2QtNTYyYi0z ODVmLWJlYjctZDg4MTljOWEyMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWIzZGExY2EtYTMwMi00MzZhLWJk NWYtMGE1Yjc1YmFlYWRkL2FiM2RhMWNhLWEzMDItNDM2YS1iZDVmLTBhNWI3NWJh ZWFkZC5jcmwwHwYDVR0jBBgwFoAUMV8Eih+UqKCCJUdeQgChhx+oiTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNkYTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTVi NzViYWVhZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKCAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8QiNuQO3c4LcRYkbgxag983hYHDAXP/NRecqkStgQLhdCEg249 TispzYgR8md5LLhDcvInb5idcmPlRNnhSScerrQRqU3afvhpBn+BuF+B6r23bpSU 2oAck/9WmoBPBA6DoeKPtNuaEUD6nzoJEIgE/nYd4gsfMmSPWZ3tqJdQZ+72KOXF ORqO7MbEgBLdrJBUyvTSgVzfCX5TY0CRz17LaIQ5PfSTLSAa/3yJf0ICZ8qmGcwt T7V0rZN0d9t5i4L1WzgG4dRXdj01h8IEdQuuSxDKaO19yW5Q7H7boINFPTnPqR8i ASbmdIXuZ4Mb5M8rL/gvZ71+eFgfTJJoG1I= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:37 2026 by rpki-client