$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/a70708bb-9107-3142-a761-273eda33709b.roa File: a70708bb-9107-3142-a761-273eda33709b.roa (raw, json) Hash identifier: hJa7qVX0Ikgx3mUUycG+PsmmNVdQd8j7SNy0RVSH12c= Subject key identifier: DC:91:23:45:78:4F:A0:87:1D:35:8B:3E:6C:89:33:B9:70:F6:73:2C Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Certificate serial: 010D0C9F4328584D39CF7CB5839DFABD14047B0E Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/a70708bb-9107-3142-a761-273eda33709b.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 10996 IP address blocks: 2607:f530::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7c:b5:83:9d:fa:bd:14:04:7b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=d4e3041c-cffd-4f25-b2cf-8cba860beaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:c3:e9:db:2c:54:6a:31:22:cf:3f:da:4f: 82:5f:b1:e5:a4:da:36:1a:e3:9f:79:88:42:09:db: c7:4c:fb:5c:da:a5:44:b1:06:3b:c9:91:9d:50:cb: 21:8e:63:f0:68:95:90:78:5b:fe:f7:b1:83:a2:5d: c8:72:a4:cb:01:16:49:a7:d5:e5:79:18:fc:b4:51: dd:d2:51:ee:98:0d:bf:e8:cc:95:f2:d9:51:e1:88: f2:d5:e6:ae:1d:de:9e:ad:03:f5:0e:38:ac:37:fb: 7a:60:41:33:68:a4:99:76:4e:1b:d4:56:ad:11:10: 52:48:b9:bd:8f:25:81:4d:06:c7:f3:31:52:46:45: ec:f6:af:b9:05:15:7f:bb:76:38:60:72:ef:5b:88: c0:9e:59:7a:47:dd:15:a9:45:21:d4:80:03:69:4c: 2b:73:6d:46:35:50:83:95:f9:fc:ea:6e:e5:d6:28: b5:12:86:40:06:c3:59:97:fd:73:20:1e:4b:94:d4: 2c:fa:69:0c:99:11:c7:3e:2e:69:e8:3a:17:93:6d: 05:90:a6:53:77:98:62:b5:47:f7:fb:cb:82:ec:8e: 3d:04:3d:71:38:65:41:9b:8d:4c:a6:b2:37:32:a2: 56:3b:b6:62:e8:77:13:d5:04:78:aa:f6:40:52:82: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:91:23:45:78:4F:A0:87:1D:35:8B:3E:6C:89:33:B9:70:F6:73:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/a70708bb-9107-3142-a761-273eda33709b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl X509v3 Authority Key Identifier: keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer sbgp-ipAddrBlock: critical IPv6: 2607:f530::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:33:43:65:47:93:c0:33:b5:2c:7a:f5:46:3a:03:61:8c:d4: 0c:ed:37:8e:65:52:77:09:33:93:4e:6c:d7:80:2f:bc:94:af: e6:30:5b:2b:84:a6:96:a4:73:8e:32:3b:03:98:a8:b6:4e:8c: c2:40:2c:d0:04:4e:7b:de:86:fc:ea:97:9d:ea:dd:5f:0c:50: 9e:e6:37:79:a7:4c:ef:7c:8a:df:55:cc:88:47:4f:b8:fe:d2: b8:b7:62:52:da:3e:da:6d:66:11:70:e4:97:c9:d7:b2:fe:6d: f0:ce:14:ce:ee:fe:4b:03:bd:5c:bc:fd:d0:a4:2e:d0:64:31: 59:3c:85:32:d5:d3:03:0f:81:9f:a0:34:c6:fe:bd:fc:93:28: 37:a4:6f:a7:8f:c0:33:39:67:98:d2:8b:5a:da:6a:40:1e:0a: 61:c4:fb:90:18:23:7b:6c:9c:a6:7b:75:09:78:0e:59:06:96: 78:71:6c:54:df:e3:a9:66:b2:8c:d7:e8:c5:ed:97:05:34:df: 4c:65:8b:b1:4b:a4:02:11:c1:07:ab:fe:0f:78:1e:9d:f8:9e: 12:0b:8e:ca:ba:fe:70:62:66:2b:c6:6f:0e:ce:51:d8:c5:a6: 81:0c:fb:44:f4:a9:bf:4f:05:40:c2:5f:e3:f3:18:6f:6e:83: 73:56:ee:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE05z3y1g536vRQEew4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy YWQwMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZDRlMzA0MWMtY2ZmZC00ZjI1LWIyY2YtOGNiYTg2MGJlYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvafD6dssVGoxIs8/2k+CX7HlpNo2GuOfeYhC CdvHTPtc2qVEsQY7yZGdUMshjmPwaJWQeFv+97GDol3IcqTLARZJp9XleRj8tFHd 0lHumA2/6MyV8tlR4Yjy1eauHd6erQP1DjisN/t6YEEzaKSZdk4b1FatERBSSLm9 jyWBTQbH8zFSRkXs9q+5BRV/u3Y4YHLvW4jAnll6R90VqUUh1IADaUwrc21GNVCD lfn86m7l1ii1EoZABsNZl/1zIB5LlNQs+mkMmRHHPi5p6DoXk20FkKZTd5hitUf3 +8uC7I49BD1xOGVBm41MprI3MqJWO7Zi6HcT1QR4qvZAUoK1hQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNyRI0V4T6CHHTWLPmyJM7lw9nMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvYTcwNzA4YmItOTEwNy0z MTQyLWE3NjEtMjczZWRhMzM3MDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0 MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3 ZjAyNDJhZDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1MDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoM0NlR5PAM7UsevVGOgNhjNQM7TeOZVJ3CTOTTmzXgC+8lK/mMFsr hKaWpHOOMjsDmKi2TozCQCzQBE573ob86ped6t1fDFCe5jd5p0zvfIrfVcyIR0+4 /tK4t2JS2j7abWYRcOSXydey/m3wzhTO7v5LA71cvP3QpC7QZDFZPIUy1dMDD4Gf oDTG/r38kyg3pG+nj8AzOWeY0ota2mpAHgphxPuQGCN7bJyme3UJeA5ZBpZ4cWxU 3+OpZrKM1+jF7ZcFNN9MZYuxS6QCEcEHq/4PeB6d+J4SC47Kuv5wYmYrxm8OzlHY xaaBDPtE9Km/TwVAwl/j8xhvboNzVu4m -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:12 2026 by rpki-client