$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa File: 3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa (raw, json) Hash identifier: b2LwZ3Mu8YHnmlYUKbaXWvbd+bEIbAKmQYs59c8GAEs= Subject key identifier: A5:08:AD:A6:22:42:B1:AD:01:63:38:B9:70:19:0D:06:F7:3B:FC:27 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D091261025CF3FF8A21621560 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397182 IP address blocks: 2606:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:61:02:5c:f3:ff:8a:21:62:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=e2158bc0-42bb-4d75-9486-0261daad93b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:c4:6f:66:87:b7:ba:51:83:09:6b:23:2e: a4:c4:54:8c:81:95:42:c1:4d:58:13:ff:ce:a8:06: 25:1c:e2:d9:53:fa:94:30:b2:74:36:1f:b2:1b:7e: 22:a3:99:f8:04:5c:c7:1e:2c:11:15:d5:2b:9f:fa: 04:6d:94:42:e1:2c:38:1e:a4:c6:88:37:d6:01:3f: 64:0a:d7:60:93:4a:03:54:e2:61:6c:44:3a:52:84: 1e:84:ce:21:58:37:a5:50:70:78:b5:9f:38:ff:51: 32:93:6c:7b:ba:2d:c2:01:6d:cd:38:85:43:60:74: 8d:f1:cb:d1:ba:6d:87:d6:d4:01:45:71:81:b2:46: 93:f1:a8:a8:6b:18:a6:60:c9:0c:ff:a0:1f:b5:f8: bf:e5:1f:43:fd:07:b0:43:90:96:bf:0e:ac:62:33: 29:30:f3:6c:a0:54:06:5c:0a:d1:04:ba:df:65:39: 3c:fc:2a:fc:e6:46:0d:71:d7:42:30:ca:21:46:cb: f9:85:f9:35:9b:ea:2e:45:bf:d9:d4:73:48:41:91: 2c:e5:59:04:ba:cf:2a:ce:95:d9:9d:88:ef:6a:92: 33:57:60:1f:b6:7d:af:ff:60:85:f4:5b:00:83:d3: b9:c9:aa:d2:c9:1a:e2:2b:21:55:82:13:e4:e0:60: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:08:AD:A6:22:42:B1:AD:01:63:38:B9:70:19:0D:06:F7:3B:FC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:18:57:ad:94:32:de:3a:cc:16:3c:75:b7:68:5e:bd:b9:68: cf:79:22:bd:b8:65:7f:2b:93:76:7e:c7:c1:55:2c:ca:b3:fa: 33:13:ce:76:9e:6e:35:de:e1:41:0c:64:cb:9a:9b:71:0f:05: c4:9a:ec:95:92:ff:10:13:c8:70:65:f6:21:1a:96:7a:d8:42: 75:66:82:66:7e:63:d3:f8:f3:17:22:f9:c4:50:eb:f0:4f:28: d1:91:42:56:ef:44:cf:da:0f:b6:96:62:31:d5:32:01:00:1e: be:f3:8d:73:a4:b5:8e:60:3c:07:3b:5b:5e:ce:60:e4:0d:ef: df:74:43:5a:4f:7d:7e:69:66:b9:6b:07:cc:bf:dc:df:00:87: 0f:69:7c:06:0b:84:d8:27:1a:4e:f4:b9:0d:0f:09:cb:64:c0: 6e:b6:14:c2:42:57:12:49:2a:ec:51:57:36:dd:8d:a7:cb:1a: 8d:0f:53:b7:92:a5:c0:9d:55:26:d5:fc:f6:27:3a:ca:83:ef: 3c:d8:aa:6a:77:54:08:94:05:00:62:37:cc:04:f9:aa:cd:5d: 4c:e8:f8:f6:51:ba:8a:1c:65:b4:6b:f7:6a:c9:bd:09:5a:3b: e8:cd:98:4c:18:25:c4:04:ac:81:66:7b:31:78:7d:02:bc:b3: c6:4f:19:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0JEmECXPP/iiFiFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZTIxNThiYzAtNDJiYi00ZDc1LTk0ODYtMDI2MWRhYWQ5M2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUTEb2aHt7pRgwlrIy6kxFSMgZVCwU1YE//O qAYlHOLZU/qUMLJ0Nh+yG34io5n4BFzHHiwRFdUrn/oEbZRC4Sw4HqTGiDfWAT9k Ctdgk0oDVOJhbEQ6UoQehM4hWDelUHB4tZ84/1Eyk2x7ui3CAW3NOIVDYHSN8cvR um2H1tQBRXGBskaT8aioaximYMkM/6Aftfi/5R9D/QewQ5CWvw6sYjMpMPNsoFQG XArRBLrfZTk8/Cr85kYNcddCMMohRsv5hfk1m+ouRb/Z1HNIQZEs5VkEus8qzpXZ nYjvapIzV2Aftn2v/2CF9FsAg9O5yarSyRriKyFVghPk4GDFBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKUIraYiQrGtAWM4uXAZDQb3O/wnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2IwZDRkNTAtMWNiNy0z YzczLWIwNTgtNjQxODU3MTdmOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrGFetlDLeOswWPHW3aF69uWjPeSK9uGV/K5N2fsfBVSzKs/ozE852 nm413uFBDGTLmptxDwXEmuyVkv8QE8hwZfYhGpZ62EJ1ZoJmfmPT+PMXIvnEUOvw TyjRkUJW70TP2g+2lmIx1TIBAB6+841zpLWOYDwHO1tezmDkDe/fdENaT31+aWa5 awfMv9zfAIcPaXwGC4TYJxpO9LkNDwnLZMButhTCQlcSSSrsUVc23Y2nyxqND1O3 kqXAnVUm1fz2JzrKg+882Kpqd1QIlAUAYjfMBPmqzV1M6Pj2UbqKHGW0a/dqyb0J WjvozZhMGCXEBKyBZnsxeH0CvLPGTxnC -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:38 2026 by rpki-client