$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa File: fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa (raw, json) Hash identifier: nsp4HKH6zcrJI0ZL75jtm03JZMsm8JxJ7Q2ILZ3TtwQ= Subject key identifier: 7F:14:5B:E6:A1:04:44:F5:AC:B1:77:9C:58:8E:02:4A:F2:65:CC:D5 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584D143D7E71B04BAE44EF081740 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 4213 IP address blocks: 2605:bb00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7e:71:b0:4b:ae:44:ef:08:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=fb8aeb07-597e-4615-925e-b7c45b9f4cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:9e:97:ec:bc:5d:9d:c3:dc:dc:fb:5f:2a: e6:0d:9b:ee:6e:3f:09:d7:d3:e5:c4:d5:3a:8d:d1: 84:f8:63:39:05:fd:8d:a1:57:74:93:7c:9c:e1:14: 09:9c:2f:3d:68:ca:02:57:9d:61:9e:eb:38:b4:f8: 4b:cb:88:91:ed:1d:01:5d:70:bf:e9:16:a6:25:e5: 2a:ad:ed:9d:a0:05:7d:85:92:42:d3:74:82:6c:3e: 72:4c:e7:80:3e:e6:88:6b:0a:db:ec:1b:46:bd:e2: 0a:40:63:61:d4:ac:97:29:e3:7f:90:b0:35:25:fc: 17:64:e1:43:be:bf:7a:c8:5a:eb:72:65:2e:a8:e3: 6d:c6:9d:8e:d4:7e:06:da:fe:8e:09:53:47:24:4a: 62:a4:83:02:bd:2c:08:47:5f:95:81:a1:5f:fe:ad: 5d:98:63:cf:d5:4c:2a:56:5f:f6:33:f3:8d:67:62: 33:fd:b9:88:7c:4e:5a:29:8e:4a:39:81:54:df:f0: a0:bd:b4:44:99:22:b6:50:23:14:9f:63:91:d5:88: ae:a1:88:65:e5:5a:28:a8:f8:9e:24:e6:fd:94:e3: a1:34:d8:1c:09:5c:2d:67:a4:25:b1:21:cf:95:6e: 82:eb:f4:fd:40:76:d9:79:27:a4:be:c3:bd:94:c1: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:14:5B:E6:A1:04:44:F5:AC:B1:77:9C:58:8E:02:4A:F2:65:CC:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fd108f4e-54b5-3439-b50b-7a0c0f8a0460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2605:bb00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:08:cb:f0:d4:c0:43:7f:62:7d:3d:c2:89:bc:3f:fc:b9:8c: 36:37:09:4b:0e:97:13:54:5f:12:3c:cf:15:e2:61:1d:bf:dc: 23:b7:88:12:31:c2:cc:36:9b:22:e0:de:36:ea:a6:85:0a:11: a0:f3:78:39:2a:ef:ff:5b:89:77:fd:03:39:78:83:6d:f6:9b: 4b:17:e6:b3:f9:43:37:47:d8:60:8c:28:bd:92:47:3d:f0:6f: 35:b5:b8:40:dd:a0:e9:be:2d:72:77:e2:0e:5d:60:f5:b2:90: 5e:5b:c8:ff:e2:86:83:84:5c:2c:2c:33:c3:df:7f:68:21:2c: 39:77:c8:b4:bb:41:33:28:c1:5a:d8:d8:ce:51:24:96:97:58: f7:50:77:b4:bc:be:fa:e1:59:fa:a0:c6:78:b2:f7:7e:a1:08: 11:e4:76:fa:71:09:68:1b:3d:91:3c:69:33:a7:c1:b6:f0:80: 77:3a:9e:10:60:76:cf:86:69:82:5c:c5:29:e3:b5:af:47:82: 7d:53:32:b5:63:1f:82:97:5a:29:ff:a6:f2:fc:ba:4c:70:8c: b1:c1:0e:5a:28:36:1c:6c:f5:f0:4c:c5:99:37:ca:d0:b9:84: 86:98:d0:f5:b1:4a:33:3a:3e:92:fd:05:a1:cb:2d:91:23:0b: fb:6f:34:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPX5xsEuuRO8IF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmI4YWViMDctNTk3ZS00NjE1LTkyNWUtYjdjNDViOWY0Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipael+y8XZ3D3Nz7XyrmDZvubj8J19PlxNU6 jdGE+GM5Bf2NoVd0k3yc4RQJnC89aMoCV51hnus4tPhLy4iR7R0BXXC/6RamJeUq re2doAV9hZJC03SCbD5yTOeAPuaIawrb7BtGveIKQGNh1KyXKeN/kLA1JfwXZOFD vr96yFrrcmUuqONtxp2O1H4G2v6OCVNHJEpipIMCvSwIR1+VgaFf/q1dmGPP1Uwq Vl/2M/ONZ2Iz/bmIfE5aKY5KOYFU3/CgvbREmSK2UCMUn2OR1YiuoYhl5VooqPie JOb9lOOhNNgcCVwtZ6QlsSHPlW6C6/T9QHbZeSekvsO9lMEzZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH8UW+ahBET1rLF3nFiOAkryZczVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZmQxMDhmNGUtNTRiNS0z NDM5LWI1MGItN2EwYzBmOGEwNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgW7ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFCMvw1MBDf2J9PcKJvD/8uYw2NwlLDpcTVF8SPM8V4mEdv9wjt4gS McLMNpsi4N426qaFChGg83g5Ku//W4l3/QM5eINt9ptLF+az+UM3R9hgjCi9kkc9 8G81tbhA3aDpvi1yd+IOXWD1spBeW8j/4oaDhFwsLDPD339oISw5d8i0u0EzKMFa 2NjOUSSWl1j3UHe0vL764Vn6oMZ4svd+oQgR5Hb6cQloGz2RPGkzp8G28IB3Op4Q YHbPhmmCXMUp47WvR4J9UzK1Yx+Cl1op/6by/LpMcIyxwQ5aKDYcbPXwTMWZN8rQ uYSGmND1sUozOj6S/QWhyy2RIwv7bzTK -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:11 2026 by rpki-client