$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa File: 7fada44e-ab60-3ed5-b0e0-767e589309f8.roa (raw, json) Hash identifier: pd9lFUlHdfCiWtsg+7KXKB6sQRdgsUHZZc9b0kqQ49I= Subject key identifier: 89:21:50:D1:65:93:E4:A2:43:A6:DB:00:C7:7A:EF:71:8E:69:51:99 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584D359FD73B348A220AE90BFCC0 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 32771 IP address blocks: 2620:111:800e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d7:3b:34:8a:22:0a:e9:0b:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=3e352120-022d-4836-a7a1-ae5c89624e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:e1:ea:14:50:ac:18:e9:c6:c1:93:48:e1: eb:ad:16:3f:35:dd:d7:f3:66:52:84:f7:1a:ed:ea: 77:4b:28:ae:03:cb:70:66:f2:5a:4d:2f:bd:d7:4e: 97:cf:c1:b4:5a:15:d1:bb:b3:aa:02:b5:39:88:86: 0d:72:21:d6:47:23:4a:d4:ef:4c:84:1c:01:95:33: 12:f6:b3:49:81:cf:2d:66:50:54:d8:25:7f:1e:59: 97:bf:37:e8:2c:52:9a:ad:97:d7:00:bb:b6:62:f6: fa:18:e3:e2:5b:61:6f:37:54:a0:a5:b6:8b:e5:a0: 8e:8c:90:2a:ad:1a:94:6c:5f:fe:9d:1c:b9:a2:8c: 21:08:38:66:06:0a:9e:a4:e2:93:15:8e:49:43:ae: 05:1d:34:ad:f2:20:15:a2:e5:f5:af:d5:ac:33:78: f7:08:5e:b2:b4:0d:75:d8:95:e4:68:71:ad:15:ce: c8:0b:32:99:59:17:4f:8b:82:b6:55:44:dc:9d:4c: cf:1d:ae:13:1e:47:8f:3b:9d:fb:82:d3:f2:d2:28: 74:65:61:b9:3e:94:e9:62:29:94:e5:6e:27:b7:8f: 17:77:50:88:cc:f2:26:26:b3:34:d0:a4:37:3f:e6: 3c:b4:fb:f6:36:33:0b:2b:af:d5:32:8b:4f:ad:db: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:21:50:D1:65:93:E4:A2:43:A6:DB:00:C7:7A:EF:71:8E:69:51:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7fada44e-ab60-3ed5-b0e0-767e589309f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:34:ec:3a:ea:13:65:7d:45:b1:e7:ee:25:90:29:41:60:f3: d5:cd:e9:0c:bf:e4:76:37:70:7e:37:c3:da:59:05:e8:37:5f: 3c:35:4d:72:db:f4:26:c4:46:02:97:e9:cc:d3:fc:a9:76:bd: 52:08:00:49:91:38:dd:cc:ca:d5:97:0f:09:03:2c:c9:0a:bd: 9a:d8:8a:6e:97:bc:20:b5:29:82:01:55:2e:c2:f5:f6:f6:1e: 09:a1:da:a8:f9:64:a8:5c:c2:08:6c:c7:24:3f:70:bf:0a:f0: d7:b4:a9:ac:0b:0a:53:54:ea:1c:8c:71:c2:04:96:45:f4:1d: 35:92:f4:c1:71:d7:69:37:3b:82:9c:4d:36:1b:e1:b8:94:a5: 87:c9:94:e5:f2:b5:de:bc:33:67:c9:21:e1:a4:56:bb:33:f6: f2:05:87:ef:3b:5b:36:e8:a8:b4:92:eb:b4:f6:31:72:03:92: 05:3e:3b:8c:66:4d:e1:0f:42:f1:92:c0:6b:8f:11:27:39:51: 54:0d:35:52:d2:7c:44:ff:74:f9:ee:3b:81:da:82:fd:52:e0: 53:5c:01:45:36:72:29:cb:9d:7c:76:f8:c3:07:5d:f3:7b:f5: 8a:fe:8b:5d:85:c5:3e:db:a3:24:a5:b9:3b:be:44:75:2c:12: e1:f4:94:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n9c7NIoiCukL/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk M2UzNTIxMjAtMDIyZC00ODM2LWE3YTEtYWU1Yzg5NjI0ZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvofh6hRQrBjpxsGTSOHrrRY/Nd3X82ZShPca 7ep3SyiuA8twZvJaTS+9106Xz8G0WhXRu7OqArU5iIYNciHWRyNK1O9MhBwBlTMS 9rNJgc8tZlBU2CV/HlmXvzfoLFKarZfXALu2Yvb6GOPiW2FvN1SgpbaL5aCOjJAq rRqUbF/+nRy5oowhCDhmBgqepOKTFY5JQ64FHTSt8iAVouX1r9WsM3j3CF6ytA11 2JXkaHGtFc7ICzKZWRdPi4K2VUTcnUzPHa4THkePO537gtPy0ih0ZWG5PpTpYimU 5W4nt48Xd1CIzPImJrM00KQ3P+Y8tPv2NjMLK6/VMotPrdskowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIkhUNFlk+SiQ6bbAMd673GOaVGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvN2ZhZGE0NGUtYWI2MC0z ZWQ1LWIwZTAtNzY3ZTU4OTMwOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAw07DrqE2V9RbHn7iWQKUFg89XN6Qy/5HY3cH43w9pZBeg3Xzw1 TXLb9CbERgKX6czT/Kl2vVIIAEmRON3MytWXDwkDLMkKvZrYim6XvCC1KYIBVS7C 9fb2Hgmh2qj5ZKhcwghsxyQ/cL8K8Ne0qawLClNU6hyMccIElkX0HTWS9MFx12k3 O4KcTTYb4biUpYfJlOXytd68M2fJIeGkVrsz9vIFh+87WzboqLSS67T2MXIDkgU+ O4xmTeEPQvGSwGuPESc5UVQNNVLSfET/dPnuO4Hagv1S4FNcAUU2cinLnXx2+MMH XfN79Yr+i12FxT7boySluTu+RHUsEuH0lPg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:59 2026 by rpki-client