$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa File: 67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa (raw, json) Hash identifier: pLaf4i2VGti4z8svcSsSgA9G+e+UF9gEYSFQiskKCbM= Subject key identifier: 5B:99:43:A0:A8:0F:26:E0:F4:A0:23:ED:5E:A4:55:A1:11:B5:E6:F1 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584D3DFF99EA4465A40E1D85D880 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 32058 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:99:ea:44:65:a4:0e:1d:85:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=de813f54-bbc5-416a-8e47-6d4c9b071b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:28:d2:89:72:9a:6d:d0:6e:f3:c3:f5:d2: b2:6f:57:31:b0:71:94:43:a7:98:a2:7c:48:0d:fa: 64:cc:4e:44:11:c5:2f:e7:1f:49:b2:e2:7a:cd:ba: 5e:18:b2:53:a3:5c:69:13:72:5f:29:c4:8d:0f:4a: 8b:64:af:b6:5b:e4:07:ef:e3:40:4d:1a:de:40:d3: 3b:18:d0:e1:a0:af:91:18:92:73:94:ef:f5:9c:5c: c0:df:92:0f:75:14:f2:e6:6e:ab:9a:2f:35:7d:2c: a7:f5:68:c5:67:fb:7a:7a:de:1c:48:1e:ed:ca:ef: 6b:75:2e:a1:15:0b:47:8d:be:15:ff:81:d2:61:03: 1e:3b:af:2b:e4:f7:95:ef:79:2e:a6:4f:93:a1:b7: b9:28:a2:96:fd:2f:bd:3b:e0:60:ac:fe:67:59:45: e3:71:81:38:ba:b4:1f:35:f3:f6:d7:1f:4d:4f:96: 0b:ab:2a:f8:3b:ed:99:7b:06:92:f6:00:3e:0a:2d: 08:c9:af:de:64:cb:53:28:6b:2e:71:b4:28:89:b5: 4d:17:1d:3f:7b:64:08:e2:57:b7:81:7b:50:2a:7b: de:f7:1b:4c:b7:49:b5:48:3d:90:e6:ef:82:38:f6: 67:c7:ee:d9:bd:96:22:e5:80:e3:71:f7:4a:d9:57: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:99:43:A0:A8:0F:26:E0:F4:A0:23:ED:5E:A4:55:A1:11:B5:E6:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5f:32:2d:fa:71:50:c0:ba:e3:ff:49:35:d9:87:c7:b9:4b: b4:cb:99:d7:d1:72:19:2c:6f:06:72:6d:08:20:b9:1d:f2:eb: a5:6d:23:58:a6:0e:ae:a9:76:fe:02:b3:5a:c3:03:df:6b:b6: 14:80:f6:e1:d1:41:97:17:d0:9f:6a:b4:30:a4:2c:b3:c3:62: f5:67:15:79:04:c5:f8:e1:1f:ff:e9:0e:7b:7a:fc:d9:08:95: 68:5b:1e:7d:e5:30:b9:57:2e:23:7c:71:31:ae:4b:7d:a9:d9: f0:69:62:65:d9:5c:67:60:af:65:10:80:62:14:fe:c3:4c:9a: 7a:2a:ef:f1:09:fc:f0:6d:11:8b:d5:73:88:20:a8:cf:2f:e4: 6b:2a:4c:2b:a3:ad:51:a5:3e:2d:17:a0:de:7a:61:f9:4b:54: ac:40:c0:c5:eb:58:ff:65:c8:6f:f9:8b:f5:43:c7:18:08:44: 7c:80:d0:4a:20:1b:db:74:ba:6c:7f:76:bb:26:85:17:a6:03: c6:fa:e7:dd:29:71:ca:ca:d0:a7:e5:57:68:6e:51:65:9f:aa: db:92:57:31:b1:d4:1d:29:42:43:ca:ba:aa:57:6c:f8:3b:a3: 61:e9:96:a6:c9:54:7e:af:05:4d:f4:a6:96:8e:26:e5:54:22: 42:89:42:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/5nqRGWkDh2F2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGU4MTNmNTQtYmJjNS00MTZhLThlNDctNmQ0YzliMDcxYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK0o0olymm3QbvPD9dKyb1cxsHGUQ6eYonxI DfpkzE5EEcUv5x9JsuJ6zbpeGLJTo1xpE3JfKcSND0qLZK+2W+QH7+NATRreQNM7 GNDhoK+RGJJzlO/1nFzA35IPdRTy5m6rmi81fSyn9WjFZ/t6et4cSB7tyu9rdS6h FQtHjb4V/4HSYQMeO68r5PeV73kupk+Tobe5KKKW/S+9O+BgrP5nWUXjcYE4urQf NfP21x9NT5YLqyr4O+2ZewaS9gA+Ci0Iya/eZMtTKGsucbQoibVNFx0/e2QI4le3 gXtQKnve9xtMt0m1SD2Q5u+COPZnx+7ZvZYi5YDjcfdK2VeHJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFuZQ6CoDybg9KAj7V6kVaERtebxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvNjdiYmEzZDQtYTUxZi0z YWFkLWEwZDgtOTY4YjE5MzllMmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7XzIt+nFQwLrj/0k12YfHuUu0y5nX0XIZLG8Gcm0IILkd8uulbSNY pg6uqXb+ArNawwPfa7YUgPbh0UGXF9CfarQwpCyzw2L1ZxV5BMX44R//6Q57evzZ CJVoWx595TC5Vy4jfHExrkt9qdnwaWJl2VxnYK9lEIBiFP7DTJp6Ku/xCfzwbRGL 1XOIIKjPL+RrKkwro61RpT4tF6DeemH5S1SsQMDF61j/Zchv+Yv1Q8cYCER8gNBK IBvbdLpsf3a7JoUXpgPG+ufdKXHKytCn5VdoblFln6rbklcxsdQdKUJDyrqqV2z4 O6Nh6ZamyVR+rwVN9KaWjiblVCJCiUI9 -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:32 2026 by rpki-client