$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa File: 5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa (raw, json) Hash identifier: mnQuc37iHvKdtW0yoTz9CyhtIIpPjbz4H4hyvd461Y0= Subject key identifier: 30:60:07:4A:81:95:B9:40:21:83:29:2F:8F:EB:30:90:4D:53:BB:78 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F4328584D40CA4FF6F19FDAA395266C40 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 14525 IP address blocks: 2604:c0c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4f:f6:f1:9f:da:a3:95:26:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=e08f10b7-9cff-4335-9608-b7523e5e4118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:c8:b6:09:18:2a:95:70:19:2a:a5:b6:d9: f5:c9:f4:5f:d2:38:97:3a:f0:b2:fa:c6:e4:8b:34: 5b:c7:72:74:09:db:97:d8:c8:02:93:c1:4d:c5:99: b4:b9:59:bb:1e:4f:4b:1c:eb:64:ab:46:0e:f4:05: 41:38:6d:bc:b5:82:a8:5a:e4:a9:e3:ca:54:c0:af: ac:e7:ba:a4:e9:b1:1c:bd:c6:1e:6a:df:d7:ee:af: 7e:32:c8:d6:42:76:09:b9:f4:fa:6b:3c:73:6b:23: ed:70:22:00:31:fb:a7:98:2c:ec:27:e3:6b:4f:b4: 3d:aa:56:71:68:8f:bc:63:92:b0:9f:34:10:12:ae: a1:3a:af:15:5d:b5:72:42:a1:01:32:d9:b5:2f:c1: 41:19:26:76:38:af:1a:9c:b1:f6:4c:b1:5c:9c:c2: 81:05:8e:f0:a4:63:10:ba:a8:f8:dc:2c:29:2b:24: ae:56:08:92:77:00:4c:0a:83:b5:07:63:f2:a2:1d: 55:c8:5e:49:90:b0:a9:a3:f3:c8:66:9e:36:88:17: 90:41:b4:ce:99:5f:9c:29:6f:60:7f:73:33:4e:2e: 3e:4a:1c:83:81:f1:3b:af:92:b2:ff:9e:27:7b:38: df:35:ba:f3:86:98:d7:08:92:37:37:66:2f:09:06: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:60:07:4A:81:95:B9:40:21:83:29:2F:8F:EB:30:90:4D:53:BB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv6: 2604:c0c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9e:55:16:50:43:74:af:3c:97:d8:e1:c7:78:58:3f:51:41: 47:46:4a:e1:d4:9c:57:3f:6a:f0:74:22:f7:a0:85:74:b0:ad: 47:2e:13:0b:a1:b4:ad:e4:b8:f3:b2:d2:c3:53:39:a7:3f:79: ca:0a:af:52:3c:b9:e2:50:3d:57:d2:55:e6:b9:16:40:5b:b3: 35:7a:dd:93:24:44:40:f6:ee:84:59:a1:0c:06:ac:e3:ca:d8: e1:28:cb:5d:a6:54:7c:92:9e:38:9c:c9:a9:d2:57:75:50:04: c3:9c:6d:ee:d7:80:ce:dd:74:06:90:ac:b8:27:3d:af:b2:17: 3a:41:d8:b3:d1:b9:19:9e:6e:21:92:c9:56:2f:cb:35:45:3f: 19:c2:2c:f1:46:58:01:81:62:1b:db:46:f2:3f:9c:27:bf:83: be:9f:a7:f0:1b:c2:a9:f1:c8:4c:3d:3a:c3:cf:43:66:86:5f: 07:97:b5:8a:3f:bb:91:e7:8b:2b:d3:75:e0:8f:37:cd:37:43: f2:9a:4e:57:93:15:ac:e2:1c:f6:97:24:a2:71:1f:c1:e9:1c: 4f:47:c9:12:bb:3b:ef:5f:14:a6:73:a9:ff:2e:2e:c4:65:2f: b5:4d:5c:c1:0b:d0:da:5f:49:de:97:89:8c:ca:6a:ee:59:5a: fe:cf:66:bb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Ayk/28Z/ao5UmbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTA4ZjEwYjctOWNmZi00MzM1LTk2MDgtYjc1MjNlNWU0MTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXHItgkYKpVwGSqlttn1yfRf0jiXOvCy+sbk izRbx3J0CduX2MgCk8FNxZm0uVm7Hk9LHOtkq0YO9AVBOG28tYKoWuSp48pUwK+s 57qk6bEcvcYeat/X7q9+MsjWQnYJufT6azxzayPtcCIAMfunmCzsJ+NrT7Q9qlZx aI+8Y5KwnzQQEq6hOq8VXbVyQqEBMtm1L8FBGSZ2OK8anLH2TLFcnMKBBY7wpGMQ uqj43CwpKySuVgiSdwBMCoO1B2Pyoh1VyF5JkLCpo/PIZp42iBeQQbTOmV+cKW9g f3MzTi4+ShyDgfE7r5Ky/54nezjfNbrzhpjXCJI3N2YvCQbQuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDBgB0qBlblAIYMpL4/rMJBNU7t4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvNWFkOWI5M2YtYmYxNS0z ZjFkLTlkOGQtZTA0N2M4MmJhZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTAwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCnlUWUEN0rzyX2OHHeFg/UUFHRkrh1JxXP2rwdCL3oIV0sK1HLhML obSt5LjzstLDUzmnP3nKCq9SPLniUD1X0lXmuRZAW7M1et2TJERA9u6EWaEMBqzj ytjhKMtdplR8kp44nMmp0ld1UATDnG3u14DO3XQGkKy4Jz2vshc6Qdiz0bkZnm4h kslWL8s1RT8ZwizxRlgBgWIb20byP5wnv4O+n6fwG8Kp8chMPTrDz0Nmhl8Hl7WK P7uR54sr03XgjzfNN0Pymk5XkxWs4hz2lySicR/B6RxPR8kSuzvvXxSmc6n/Li7E ZS+1TVzBC9DaX0nel4mMymruWVr+z2a7 -----END CERTIFICATE-----Generated at Thu Mar 26 18:27:51 2026 by rpki-client