$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa File: 17688313-b672-388e-bef1-cd24e224ed7e.roa (raw, json) Hash identifier: WyV0VpMRWeliQfr3/qAfCN9+sKIjE+So2V5In4R1rbs= Subject key identifier: DC:92:CE:7D:F1:B3:61:EA:0B:77:F9:DF:EC:97:0A:D0:EE:84:B8:AA Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584D3DFF99C5FA5AD5F663F48B80 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 21519 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:99:c5:fa:5a:d5:f6:63:f4:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=fc3a4428-453c-4419-9d78-4fc58cb1fda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:e1:7f:54:e7:61:2b:36:ac:88:6c:8d:cf: be:45:da:02:55:c3:2e:3f:b1:b2:ff:ca:fb:1a:e1: ac:2b:ca:e5:b0:d5:ee:9e:cd:e4:fc:fc:65:be:7a: 90:83:29:87:f9:3b:f2:64:0d:b8:81:20:d7:70:52: ce:1c:6b:09:81:5e:45:59:07:48:88:9c:97:c9:ba: 36:cb:d9:d9:7c:75:c5:bb:d7:8d:5a:af:06:74:09: 46:0f:8a:94:3c:31:e2:c7:da:8f:32:83:04:96:45: 80:be:33:a0:20:a3:86:fc:ac:25:a2:a9:45:ea:a9: 49:b5:21:fc:05:52:3d:17:1a:91:ee:8d:da:be:99: 27:36:e1:24:8c:28:eb:dd:20:ea:1b:86:72:ae:2f: d2:d8:66:5b:16:4a:89:eb:91:77:26:d6:5e:cf:00: b1:3f:a0:52:8d:62:ad:ba:40:1f:55:05:f2:1a:cf: 18:c8:8e:b3:a6:a4:45:d2:54:34:ac:78:ba:f2:e8: b3:c0:8b:ce:00:fc:df:73:d9:5c:84:69:c1:96:e7: 03:57:e4:07:83:2e:b6:cb:5f:dd:4f:a5:e9:b2:f1: f0:15:b2:d3:fd:8b:e4:06:1f:ed:a2:bf:70:6c:7a: de:33:eb:c0:4c:08:8f:a7:3f:84:7f:4f:83:03:c9: 61:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:92:CE:7D:F1:B3:61:EA:0B:77:F9:DF:EC:97:0A:D0:EE:84:B8:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:36:80:5c:40:fd:27:03:c5:a3:ea:4c:d8:38:4c:d6:e3:f9: 26:b4:be:7e:17:43:88:92:8c:b3:cd:58:0f:bb:fa:c3:ad:44: f8:fd:a0:4b:f4:47:e3:c0:61:a2:c2:94:62:ea:2e:f8:10:cd: 6e:3a:b9:23:c4:8b:0e:19:70:33:82:0c:0d:93:e4:18:e5:ff: cd:20:99:c9:74:87:23:3d:26:c6:6c:e2:63:8e:21:e3:4d:fc: d7:55:54:80:bb:62:ac:c9:eb:2b:5f:b8:a5:a7:8c:4b:07:08: 00:d2:a4:63:84:09:71:66:0e:46:50:42:7f:b2:16:4e:a9:3d: fd:72:5e:e4:30:91:41:bc:9b:a3:74:b6:d4:60:97:93:35:3a: 89:b3:5d:6f:1f:cd:4d:ac:d3:1d:63:fc:14:c3:c2:a7:5a:c1: 6a:3d:31:3a:cb:1f:85:5a:c7:38:a0:e4:e4:84:ff:77:c5:ad: 1d:c6:cf:ea:d6:c5:59:2a:51:f8:04:c7:9d:f3:2a:a9:d9:85: cd:4b:6c:4b:9c:a7:db:eb:0a:39:1f:1e:f9:07:f3:9b:6e:e6: f1:5f:2b:1a:ee:cc:d7:f8:c9:05:8c:65:a8:dc:83:99:32:18: f2:95:e4:14:83:2a:ee:2a:23:a5:60:81:7e:c2:a7:30:e4:0b: 9e:fd:21:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/5nF+lrV9mP0i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZmMzYTQ0MjgtNDUzYy00NDE5LTlkNzgtNGZjNThjYjFmZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbLhf1TnYSs2rIhsjc++RdoCVcMuP7Gy/8r7 GuGsK8rlsNXuns3k/PxlvnqQgymH+TvyZA24gSDXcFLOHGsJgV5FWQdIiJyXybo2 y9nZfHXFu9eNWq8GdAlGD4qUPDHix9qPMoMElkWAvjOgIKOG/KwloqlF6qlJtSH8 BVI9FxqR7o3avpknNuEkjCjr3SDqG4Zyri/S2GZbFkqJ65F3JtZezwCxP6BSjWKt ukAfVQXyGs8YyI6zpqRF0lQ0rHi68uizwIvOAPzfc9lchGnBlucDV+QHgy62y1/d T6XpsvHwFbLT/YvkBh/tor9wbHreM+vATAiPpz+Ef0+DA8lhuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNySzn3xs2HqC3f53+yXCtDuhLiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvMTc2ODgzMTMtYjY3Mi0z ODhlLWJlZjEtY2QyNGUyMjRlZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHNoBcQP0nA8Wj6kzYOEzW4/kmtL5+F0OIkoyzzVgPu/rDrUT4/aBL 9EfjwGGiwpRi6i74EM1uOrkjxIsOGXAzggwNk+QY5f/NIJnJdIcjPSbGbOJjjiHj TfzXVVSAu2KsyesrX7ilp4xLBwgA0qRjhAlxZg5GUEJ/shZOqT39cl7kMJFBvJuj dLbUYJeTNTqJs11vH81NrNMdY/wUw8KnWsFqPTE6yx+FWsc4oOTkhP93xa0dxs/q 1sVZKlH4BMed8yqp2YXNS2xLnKfb6wo5Hx75B/ObbubxXysa7szX+MkFjGWo3IOZ MhjyleQUgyruKiOlYIF+wqcw5Aue/SFf -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:29 2026 by rpki-client