$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa File: 1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa (raw, json) Hash identifier: 05qWGjpkQefPve5Wb0pi1JTRd6iJGFoXj4bxp4Oa/PY= Subject key identifier: E3:76:5E:CE:48:70:70:C2:BD:4E:DB:59:7A:58:04:9F:2B:71:35:83 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584D1172693FD3F014E1232715B8 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 32771 IP address blocks: 2620:111:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:69:3f:d3:f0:14:e1:23:27:15:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=453108e6-01bb-4269-afae-cc6a9fb001ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c6:87:09:6c:c7:bd:52:7b:05:f9:1d:db:85: 9a:fb:51:d8:33:99:8a:de:0a:e3:0a:2c:2e:ff:b2: 32:a5:06:a3:7c:b4:36:68:86:c5:82:a1:7b:e6:14: 1b:1a:79:ab:ac:9d:33:ed:09:b2:b1:20:e1:aa:98: 6b:43:87:2b:c1:a4:e2:0b:48:20:29:71:f7:c1:6d: b6:32:72:9f:27:bc:2e:75:25:13:6f:1a:a4:cc:14: 2a:8b:c2:b6:a8:dc:00:e8:bb:a2:60:d6:1b:4d:80: 9f:87:e1:c9:8f:6a:37:eb:11:df:fe:b7:88:1c:7a: 0c:72:6e:69:ab:46:a8:8d:0d:c2:f0:da:7e:44:8f: 05:49:38:b9:1f:0e:e5:eb:76:d2:db:d7:cd:41:1e: d8:2b:bd:5b:cc:d8:ec:fd:d3:66:b8:3b:36:ad:a9: d6:21:3f:bd:aa:11:73:02:ea:62:1b:bf:f1:66:3e: e5:31:f0:dc:6e:83:31:48:ef:5f:fc:eb:f3:93:17: b7:22:4d:09:8d:34:84:ca:59:46:64:2f:65:f1:d5: d5:56:61:ff:80:c1:43:db:7c:29:c1:da:a7:69:64: a9:c2:0a:dd:f3:92:99:04:ea:78:77:1f:92:f7:9b: c1:cb:8a:65:a1:34:77:4e:fc:9f:d1:0e:10:4a:28: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:76:5E:CE:48:70:70:C2:BD:4E:DB:59:7A:58:04:9F:2B:71:35:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:8001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fa:b9:7b:c8:98:a1:18:67:d2:f8:1e:75:2c:33:19:12:bd: 6f:87:78:af:82:3e:52:f7:69:42:e6:7a:d9:26:cf:bb:c3:18: 3d:7a:2f:d1:f9:36:1f:17:37:89:17:b4:33:30:c7:29:b9:78: d4:e1:87:fc:34:88:fe:3d:50:94:98:74:45:4c:2f:87:a9:b8: b7:94:91:c9:b6:5d:48:61:e9:64:56:3e:16:e3:2d:dc:06:c4: aa:f5:2b:a9:59:6d:4e:d0:29:90:18:ad:c1:ac:d3:c1:ac:a4: 24:44:d9:bd:e9:40:86:39:21:7e:bd:b1:09:3a:ac:06:be:da: 25:89:af:e3:91:61:74:21:51:a5:92:22:f1:e4:a5:e2:b6:2d: 9c:78:66:41:44:ff:45:86:0e:22:5f:7b:ff:61:4b:71:94:5c: 2a:ba:22:c2:f0:4f:55:e5:e1:85:1f:fa:02:66:fa:9b:b1:bc: 20:77:0c:98:63:36:d3:64:c1:ed:f2:4e:2b:92:7e:aa:75:c8: 14:1d:97:1d:96:36:ed:14:09:37:35:94:f8:b4:f8:57:65:78: b5:f7:35:87:22:35:49:b7:bc:76:5a:9e:47:87:7b:31:1a:d8: 63:68:31:15:b3:9c:8e:c5:c0:57:27:08:06:d2:d3:93:b8:c8: 44:85:fc:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Rcmk/0/AU4SMnFbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NDUzMTA4ZTYtMDFiYi00MjY5LWFmYWUtY2M2YTlmYjAwMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8aHCWzHvVJ7Bfkd24Wa+1HYM5mK3grjCiwu /7IypQajfLQ2aIbFgqF75hQbGnmrrJ0z7QmysSDhqphrQ4crwaTiC0ggKXH3wW22 MnKfJ7wudSUTbxqkzBQqi8K2qNwA6LuiYNYbTYCfh+HJj2o36xHf/reIHHoMcm5p q0aojQ3C8Np+RI8FSTi5Hw7l63bS29fNQR7YK71bzNjs/dNmuDs2ranWIT+9qhFz AupiG7/xZj7lMfDcboMxSO9f/Ovzkxe3Ik0JjTSEyllGZC9l8dXVVmH/gMFD23wp wdqnaWSpwgrd85KZBOp4dx+S95vBy4ploTR3Tvyf0Q4QSigLAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFON2Xs5IcHDCvU7bWXpYBJ8rcTWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMWI0ZTg2NTItNzc4MC0z YzZiLTgyZjEtYjYyMTNhN2M2OWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFr6uXvImKEYZ9L4HnUsMxkSvW+HeK+CPlL3aULmetkmz7vDGD16 L9H5Nh8XN4kXtDMwxym5eNThh/w0iP49UJSYdEVML4epuLeUkcm2XUhh6WRWPhbj LdwGxKr1K6lZbU7QKZAYrcGs08GspCRE2b3pQIY5IX69sQk6rAa+2iWJr+ORYXQh UaWSIvHkpeK2LZx4ZkFE/0WGDiJfe/9hS3GUXCq6IsLwT1Xl4YUf+gJm+puxvCB3 DJhjNtNkwe3yTiuSfqp1yBQdlx2WNu0UCTc1lPi0+FdleLX3NYciNUm3vHZankeH ezEa2GNoMRWznI7FwFcnCAbS05O4yESF/OQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:56 2026 by rpki-client