$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5d77cdd-f1dd-3d6f-8f29-dfcb1d1c0a34.roa File: f5d77cdd-f1dd-3d6f-8f29-dfcb1d1c0a34.roa (raw, json) Hash identifier: WA9QNPWxTONS5IlIui/SnbSK8tTHZXoLV7XOupmA0Xk= Subject key identifier: 48:33:D9:F0:AC:F7:EA:2E:64:11:3B:83:C4:37:67:1A:79:F4:04:75 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0EA7CCB5DAF6988458A63DC0 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5d77cdd-f1dd-3d6f-8f29-dfcb1d1c0a34.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 396185 IP address blocks: 2606:a00:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cc:b5:da:f6:98:84:58:a6:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=0b8db7de-34ab-41cb-8a7c-772234645cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:e5:d1:84:f4:a4:7a:8c:01:86:2d:3c:ba: 4f:48:86:64:2f:cc:f2:e6:3b:ef:d2:02:a1:c5:65: 3e:ad:6c:ce:68:07:29:e3:9d:08:22:93:b9:e8:4e: 11:10:70:b6:ef:02:08:c6:ff:4b:7d:49:16:22:e4: b0:31:45:7e:1c:08:39:69:f2:e5:67:51:b0:20:61: 42:cc:1c:8a:ae:2f:66:9b:a1:30:df:4e:77:c3:96: 8e:ea:c6:d3:7c:c9:33:e1:9b:97:67:20:c1:7a:e1: 81:d7:0e:5f:41:7c:9f:13:65:f6:cd:11:20:3c:dd: a5:81:4d:65:62:d8:11:1c:2a:f0:bb:a5:fd:2b:48: 99:d4:e3:8d:7d:cb:21:13:0c:02:77:27:cf:84:8c: 77:2f:67:a0:04:e3:f7:a3:38:3d:e5:2a:df:51:c9: 2c:16:ae:eb:38:21:45:1a:25:6e:3f:85:2a:f6:1b: 1e:b8:30:07:c1:8d:be:05:b1:6a:99:ab:2f:97:87: bb:e9:aa:fa:2a:1e:f3:97:97:c1:30:86:24:7f:82: 9f:cc:12:54:50:58:1e:1a:83:81:f5:59:7f:0b:7b: 76:dd:7a:db:14:04:ed:91:68:ae:a6:4d:98:e0:cb: 34:03:bd:76:67:9e:71:e1:0f:d7:e2:09:58:13:81: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:33:D9:F0:AC:F7:EA:2E:64:11:3B:83:C4:37:67:1A:79:F4:04:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5d77cdd-f1dd-3d6f-8f29-dfcb1d1c0a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv6: 2606:a00:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e1:8f:f4:6b:37:e8:66:9e:57:e6:40:9c:8c:60:92:34:5e: 42:79:13:b2:2d:3b:c2:11:d2:4e:93:da:ff:c9:9e:db:9f:aa: 8c:c0:03:f9:a6:07:59:de:a8:a9:8e:c9:8c:7c:7b:33:e7:1e: f7:a6:83:db:70:92:10:2e:a7:00:38:6b:97:8d:96:88:b0:e5: 97:71:b6:d7:69:42:c2:c6:45:18:f1:44:c2:88:c0:93:a1:0c: 44:d9:1c:c2:40:4e:c5:62:7f:6a:9b:62:ad:9c:21:68:c5:1a: a7:19:95:5b:cf:c5:38:5f:91:06:a2:63:4b:e8:4f:f2:87:f6: 23:a6:9f:73:b0:7f:8a:93:ca:37:09:d8:c6:34:ee:fc:84:00: 62:e5:11:a8:4d:f3:fc:92:c6:b6:8c:ba:f9:9d:23:9e:0b:2f: af:78:ee:a1:20:e7:e1:22:92:ae:0e:b0:53:b6:ff:51:e6:7e: 68:7d:fe:7c:51:a1:85:f5:47:9a:34:f3:2b:c2:b7:52:bb:1f: 0e:2b:de:06:ee:69:73:f5:35:07:0f:76:ba:a0:68:96:3d:b0: f3:39:48:ea:11:31:52:14:bd:93:0b:93:59:a0:87:50:5f:07: bf:43:42:2d:1d:34:d5:1c:03:b0:d7:ba:4a:ee:a0:e4:6f:b9: 10:e3:99:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Op8y12vaYhFimPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MGI4ZGI3ZGUtMzRhYi00MWNiLThhN2MtNzcyMjM0NjQ1Y2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusjl0YT0pHqMAYYtPLpPSIZkL8zy5jvv0gKh xWU+rWzOaAcp450IIpO56E4REHC27wIIxv9LfUkWIuSwMUV+HAg5afLlZ1GwIGFC zByKri9mm6Ew3053w5aO6sbTfMkz4ZuXZyDBeuGB1w5fQXyfE2X2zREgPN2lgU1l YtgRHCrwu6X9K0iZ1OONfcshEwwCdyfPhIx3L2egBOP3ozg95SrfUcksFq7rOCFF GiVuP4Uq9hseuDAHwY2+BbFqmasvl4e76ar6Kh7zl5fBMIYkf4KfzBJUUFgeGoOB 9Vl/C3t23XrbFATtkWiupk2Y4Ms0A712Z55x4Q/X4glYE4EGOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgz2fCs9+ouZBE7g8Q3Zxp59AR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZjVkNzdjZGQtZjFkZC0z ZDZmLThmMjktZGZjYjFkMWMwYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYKAAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKfhj/RrN+hmnlfmQJyMYJI0XkJ5E7ItO8IR0k6T2v/JntufqozA A/mmB1neqKmOyYx8ezPnHvemg9twkhAupwA4a5eNloiw5ZdxttdpQsLGRRjxRMKI wJOhDETZHMJATsVif2qbYq2cIWjFGqcZlVvPxThfkQaiY0voT/KH9iOmn3Owf4qT yjcJ2MY07vyEAGLlEahN8/ySxraMuvmdI54LL6947qEg5+Eikq4OsFO2/1Hmfmh9 /nxRoYX1R5o08yvCt1K7Hw4r3gbuaXP1NQcPdrqgaJY9sPM5SOoRMVIUvZMLk1mg h1BfB79DQi0dNNUcA7DXukruoORvuRDjmXo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:58 2026 by rpki-client