$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa File: 85899aac-123c-38d4-9753-27300cdd4d92.roa (raw, json) Hash identifier: ifZK+hHZ3bc5cuQJERdNuUAs+1VBvSWTC3l16NSSwfw= Subject key identifier: 7D:66:1C:9F:A6:3C:84:2D:20:1A:18:86:B7:B4:BE:BB:7C:18:15:C4 Certificate issuer: /CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28 Certificate serial: 010D0C9F4328584D492A758BC8CAA26B22F59A40 Authority key identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 34 IP address blocks: 2604:580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:75:8b:c8:ca:a2:6b:22:f5:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=78211140-3d89-425c-932f-349b1a085e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a5:88:a8:2b:e9:c7:27:c3:91:ff:74:31:7e: a1:b9:bb:e3:4d:5e:10:2a:c4:f4:a3:49:5e:db:35: f9:37:3e:de:60:f0:b7:f4:29:0f:f5:dd:fe:b5:33: fb:2a:8f:a2:72:50:0d:0b:7b:c8:09:0e:43:d8:e1: 77:72:aa:12:20:d4:ae:6e:62:dd:12:c4:72:f9:da: 6c:92:cb:c1:37:41:c8:e2:a4:fc:4b:c2:b3:7d:12: 5b:78:0c:74:be:68:d5:bb:f5:49:f1:90:5c:6f:71: 5a:7f:3d:0d:fd:cc:f1:cc:72:c2:72:1f:05:39:bc: 9f:5f:ef:cb:8d:0e:cc:81:24:49:77:f5:cf:f6:1e: 88:4c:db:40:6b:fa:90:c5:9f:8d:2f:a9:5b:3c:49: e2:f8:7a:f5:39:b6:90:62:3c:8a:dd:4e:c6:4d:dc: 1c:8d:56:52:c5:be:d6:47:9a:b5:d6:2b:39:36:5e: 86:1d:d7:c0:21:7e:49:65:b9:56:86:a8:c4:f2:de: ab:74:58:97:80:dd:15:bf:3c:82:83:d5:37:ee:cd: 39:fe:9a:89:1f:e5:f6:7c:b2:13:e6:2b:50:2d:a1: 42:31:04:9d:86:13:84:f1:ae:b6:8c:69:be:47:cb: 86:93:cd:aa:c7:49:64:42:51:24:36:63:14:36:67: 30:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:66:1C:9F:A6:3C:84:2D:20:1A:18:86:B7:B4:BE:BB:7C:18:15:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl X509v3 Authority Key Identifier: keyid:FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer sbgp-ipAddrBlock: critical IPv6: 2604:580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8e:90:a3:33:48:48:e7:c1:1f:1b:43:f5:fb:4f:d1:a4:f8: 12:00:c0:19:4a:aa:92:ac:a2:b5:90:9d:e3:8b:76:0c:7f:54: 01:81:18:a2:ea:d1:fc:4f:e2:1d:9d:37:de:42:79:3c:bb:a9: 26:eb:d6:fb:d0:07:44:05:c9:d5:ef:82:8f:a7:e4:07:55:b9: a8:23:e6:de:22:db:05:6b:a1:fb:8b:6c:5f:c8:33:10:80:a8: c5:b5:ee:7b:e2:55:7c:ae:f2:3c:d8:61:3a:52:ad:86:74:0f: 1c:99:cc:2b:bd:c5:3c:e4:ff:06:98:30:52:c2:06:8a:cb:aa: bb:8b:4d:86:f1:d6:85:32:3b:45:1e:1f:11:e2:f2:12:c5:98: 45:51:78:79:97:03:68:fc:26:4b:f4:47:0a:b5:c5:78:58:c4: 2b:ac:2a:92:9c:c7:23:9d:91:e2:5c:43:18:e2:9d:de:0b:f0: 39:0d:cc:e3:e9:33:38:d0:95:29:57:c3:cf:8d:f9:9b:3e:f8: 01:0f:95:72:24:37:7b:1f:f4:72:90:bc:1b:d5:b3:26:e2:a7: 86:3d:f7:f1:4c:60:fe:98:cf:b4:07:85:07:da:66:be:b4:1c: 52:7b:f6:cf:b9:6e:d0:f8:41:16:83:fc:53:58:f3:e2:36:63: 02:45:c1:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1JKnWLyMqiayL1mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4MWZhNWYtM2Y2ZC00N2RiLWE1MDQtYWNlYjU0Zjkz YzI4MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NzgyMTExNDAtM2Q4OS00MjVjLTkzMmYtMzQ5YjFhMDg1ZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqWIqCvpxyfDkf90MX6hubvjTV4QKsT0o0le 2zX5Nz7eYPC39CkP9d3+tTP7Ko+iclANC3vICQ5D2OF3cqoSINSubmLdEsRy+dps ksvBN0HI4qT8S8KzfRJbeAx0vmjVu/VJ8ZBcb3Fafz0N/czxzHLCch8FObyfX+/L jQ7MgSRJd/XP9h6ITNtAa/qQxZ+NL6lbPEni+Hr1ObaQYjyK3U7GTdwcjVZSxb7W R5q11is5Nl6GHdfAIX5JZblWhqjE8t6rdFiXgN0VvzyCg9U37s05/pqJH+X2fLIT 5itQLaFCMQSdhhOE8a62jGm+R8uGk82qx0lkQlEkNmMUNmcwUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH1mHJ+mPIQtIBoYhre0vrt8GBXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80Yzgx ZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2ViNTRmOTNjMjgvODU4OTlhYWMtMTIzYy0z OGQ0LTk3NTMtMjczMDBjZGQ0ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGM4MWZhNWYtM2Y2ZC00N2RiLWE1 MDQtYWNlYjU0ZjkzYzI4LzRjODFmYTVmLTNmNmQtNDdkYi1hNTA0LWFjZWI1NGY5 M2MyOC5jcmwwHwYDVR0jBBgwFoAU/1LVSdJXV4EJSRX8DxjPYefX6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzgxZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2Vi NTRmOTNjMjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBjpCjM0hI58EfG0P1+0/RpPgSAMAZSqqSrKK1kJ3ji3YMf1QBgRii 6tH8T+IdnTfeQnk8u6km69b70AdEBcnV74KPp+QHVbmoI+beItsFa6H7i2xfyDMQ gKjFte574lV8rvI82GE6Uq2GdA8cmcwrvcU85P8GmDBSwgaKy6q7i02G8daFMjtF Hh8R4vISxZhFUXh5lwNo/CZL9EcKtcV4WMQrrCqSnMcjnZHiXEMY4p3eC/A5Dczj 6TM40JUpV8PPjfmbPvgBD5VyJDd7H/RykLwb1bMm4qeGPffxTGD+mM+0B4UH2ma+ tBxSe/bPuW7Q+EEWg/xTWPPiNmMCRcGw -----END CERTIFICATE-----Generated at Thu Mar 26 05:20:12 2026 by rpki-client