$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa File: b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa (raw, json) Hash identifier: DzHB+qmE20VolcYbh+bQsS27OdszOalTlNq4lOYhlaw= Subject key identifier: 0F:59:32:43:94:89:A9:59:1C:8B:0A:9B:1C:19:B4:A2:AE:94:07:C3 Certificate issuer: /CN=88ab69cc-0db2-48cd-a72a-666df1ecb5bd Certificate serial: 010D0C9F4328584D3F64D07918A915042F6E2100 Authority key identifier: 88:8E:C2:2A:F9:E2:07:E5:94:15:DF:32:D9:D2:20:22:1D:7C:6E:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 14430 IP address blocks: 2605:2f40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d0:79:18:a9:15:04:2f:6e:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ab69cc-0db2-48cd-a72a-666df1ecb5bd Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=4559369c-4341-4230-bd20-9512c11a5672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:05:7c:c1:99:ec:93:cb:0e:3a:8e:9f:0d: aa:4c:17:e5:6b:72:f4:66:da:2a:84:fc:d7:cd:dc: d8:e5:2d:d3:61:b8:1c:44:f2:d6:d5:4b:17:21:04: 90:d4:36:02:62:de:e6:f6:d3:97:b3:6c:9a:42:b7: 4a:c4:3c:25:31:7f:f4:ef:09:8b:3f:82:84:65:3f: 42:0c:c6:c9:be:99:ec:c9:fc:d6:ac:cd:4e:da:d1: 5d:aa:e6:36:5b:a7:99:28:56:bd:f5:44:9d:d5:0c: 50:db:10:e4:52:b3:94:05:45:10:22:76:71:cf:92: 14:ec:d2:cc:96:4f:d3:7b:72:46:c9:53:44:bb:09: 47:58:aa:8a:3b:2b:73:a7:39:1f:76:7f:5e:c1:fb: 1d:24:7d:ff:ff:e7:6e:45:c7:40:6d:7c:45:e3:eb: bd:b3:1d:ac:f8:7a:a4:db:4b:7c:23:a4:8c:71:41: 39:c1:76:36:4f:95:e1:a5:b1:dc:07:92:fd:39:3b: 71:df:35:98:10:6f:85:a5:86:dc:55:ed:09:54:7a: c7:88:39:71:a4:63:03:5b:e8:1c:04:e9:20:d0:55: f4:5d:8f:16:9d:f1:bc:80:73:63:4c:0d:d3:fe:30: d3:c5:d0:b3:78:fe:cb:43:79:63:dc:43:fe:a9:87: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:59:32:43:94:89:A9:59:1C:8B:0A:9B:1C:19:B4:A2:AE:94:07:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/b20f8338-0b52-35e1-b07e-fe3ff6b5649d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.crl X509v3 Authority Key Identifier: keyid:88:8E:C2:2A:F9:E2:07:E5:94:15:DF:32:D9:D2:20:22:1D:7C:6E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88ab69cc-0db2-48cd-a72a-666df1ecb5bd.cer sbgp-ipAddrBlock: critical IPv6: 2605:2f40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:82:86:6b:ac:49:b1:77:49:92:18:80:76:6b:9f:ee:87:1e: 0d:06:61:69:08:60:cc:32:73:85:13:20:26:e9:2c:39:7e:f8: f3:b7:b6:8d:a8:c3:a9:6e:5b:b7:84:70:48:86:5a:9d:1f:df: e0:df:af:ca:6a:e9:7e:9f:c6:f6:57:36:05:38:41:e9:02:2f: 16:39:83:35:bb:14:2a:11:4f:fd:1d:15:8b:fa:d7:50:21:9b: 4f:06:2b:88:bc:87:f7:86:f0:e1:3b:2e:06:9d:42:8b:91:ce: 65:ef:fa:29:b0:2a:69:7a:73:2d:8a:9e:6d:42:4d:3f:5c:16: 3d:d3:b6:9f:0c:ae:2d:b7:c9:30:fc:8f:42:22:e5:38:cd:20: 0e:32:bd:2b:58:cb:fd:a4:c4:95:61:0e:43:c3:d5:d9:1c:ac: a6:2e:69:b4:94:2f:eb:d0:35:05:32:33:6f:3c:3c:30:59:77: c4:bb:72:2c:2b:44:a1:53:42:c1:7c:21:e0:8a:bd:1e:08:28: c5:db:cc:b6:51:af:1a:15:cc:09:2e:25:24:c2:e8:d5:39:44: fc:61:61:33:bd:56:2c:6d:91:e8:12:dd:37:89:15:35:56:4e: ad:34:a7:19:0b:bf:75:68:29:a1:e9:c3:32:f8:d5:2b:ec:99: eb:d7:ec:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZNB5GKkVBC9uIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhhYjY5Y2MtMGRiMi00OGNkLWE3MmEtNjY2ZGYxZWNi NWJkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NDU1OTM2OWMtNDM0MS00MjMwLWJkMjAtOTUxMmMxMWE1NjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY0FfMGZ7JPLDjqOnw2qTBfla3L0ZtoqhPzX zdzY5S3TYbgcRPLW1UsXIQSQ1DYCYt7m9tOXs2yaQrdKxDwlMX/07wmLP4KEZT9C DMbJvpnsyfzWrM1O2tFdquY2W6eZKFa99USd1QxQ2xDkUrOUBUUQInZxz5IU7NLM lk/Te3JGyVNEuwlHWKqKOytzpzkfdn9ewfsdJH3//+duRcdAbXxF4+u9sx2s+Hqk 20t8I6SMcUE5wXY2T5XhpbHcB5L9OTtx3zWYEG+FpYbcVe0JVHrHiDlxpGMDW+gc BOkg0FX0XY8WnfG8gHNjTA3T/jDTxdCzeP7LQ3lj3EP+qYdg9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA9ZMkOUialZHIsKmxwZtKKulAfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84OGFi NjljYy0wZGIyLTQ4Y2QtYTcyYS02NjZkZjFlY2I1YmQvYjIwZjgzMzgtMGI1Mi0z NWUxLWIwN2UtZmUzZmY2YjU2NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODhhYjY5Y2MtMGRiMi00OGNkLWE3 MmEtNjY2ZGYxZWNiNWJkLzg4YWI2OWNjLTBkYjItNDhjZC1hNzJhLTY2NmRmMWVj YjViZC5jcmwwHwYDVR0jBBgwFoAUiI7CKvniB+WUFd8y2dIgIh18boswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84OGFiNjljYy0wZGIyLTQ4Y2QtYTcyYS02NjZk ZjFlY2I1YmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUvQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfgoZrrEmxd0mSGIB2a5/uhx4NBmFpCGDMMnOFEyAm6Sw5fvjzt7aN qMOpblu3hHBIhlqdH9/g36/Kaul+n8b2VzYFOEHpAi8WOYM1uxQqEU/9HRWL+tdQ IZtPBiuIvIf3hvDhOy4GnUKLkc5l7/opsCppenMtip5tQk0/XBY907afDK4tt8kw /I9CIuU4zSAOMr0rWMv9pMSVYQ5Dw9XZHKymLmm0lC/r0DUFMjNvPDwwWXfEu3Is K0ShU0LBfCHgir0eCCjF28y2Ua8aFcwJLiUkwujVOUT8YWEzvVYsbZHoEt03iRU1 Vk6tNKcZC791aCmh6cMy+NUr7Jnr1+y9 -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:11 2026 by rpki-client