$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa File: 5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa (raw, json) Hash identifier: 7iD62flnT8lNXWwTeThA12UHsAOD32+kDCEsIuX4RV0= Subject key identifier: 31:97:00:76:90:8F:4C:81:A8:53:42:98:BF:FD:CD:58:C1:69:6C:73 Certificate issuer: /CN=d826c88d-e62d-45fe-a08c-0b0a021a5314 Certificate serial: 010D0C9F4328584D359FD9A1F0AC9BF62248E640 Authority key identifier: A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 393875 IP address blocks: 2620:7:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d9:a1:f0:ac:9b:f6:22:48:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=29ca2b60-d86b-4166-a203-dff02d6f3f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:47:81:13:ef:d8:2f:ef:c7:6b:62:e5:da: a8:5d:43:17:1c:24:d8:be:ae:dc:7f:68:15:81:5b: 6f:31:84:ed:46:ba:00:a7:f1:86:27:dd:a2:aa:f0: 51:29:43:79:49:28:a5:aa:02:da:92:99:b5:c0:30: e2:70:8d:96:62:54:2d:0b:e8:7e:03:fc:9c:19:40: f0:9e:4c:de:81:48:5e:6f:b4:ae:1c:76:3d:a1:18: 58:02:b1:3c:b0:f2:08:0e:6a:4e:b4:f2:f3:1f:21: d7:99:7d:02:c0:15:b0:70:0d:76:20:5b:8d:53:35: 9c:09:cc:9b:5e:8b:fb:1f:03:67:c9:60:a4:1d:bf: 49:bb:c6:c2:ea:ca:e8:ab:9d:32:01:9f:f4:9f:df: de:5c:76:9d:e5:26:20:d7:54:80:34:56:bb:e4:bd: 52:d8:96:94:2e:46:8c:03:02:db:a9:e4:a3:4d:5b: 7c:9f:c3:8f:75:f7:1a:fe:01:6d:9d:bf:f3:74:f7: 48:6f:5b:85:c7:7c:3e:42:d0:74:2e:b3:ac:1a:41: 4d:1b:b7:cc:07:a4:e0:6e:1b:fe:a7:c2:0b:86:22: 55:5d:ed:55:2c:0d:04:0b:02:93:c5:4c:7d:1b:da: 9c:40:bd:47:d1:e5:08:5c:95:89:bf:4d:d8:7c:71: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:97:00:76:90:8F:4C:81:A8:53:42:98:BF:FD:CD:58:C1:69:6C:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/5b7271bb-0e9b-3d8d-a2b3-4176fb557047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.crl X509v3 Authority Key Identifier: keyid:A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer sbgp-ipAddrBlock: critical IPv6: 2620:7:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e8:d1:be:bb:72:43:dc:c5:03:9b:73:65:52:52:78:3a:7a: bf:93:f5:8c:8f:c7:e9:61:e5:5e:77:c6:22:b7:f7:74:dd:7e: 1c:cb:b2:29:38:8c:70:d4:7a:21:53:75:af:15:fc:d6:54:15: 7d:d1:8e:85:25:c7:f0:8e:5e:5a:45:0b:e7:0c:57:3c:18:87: 81:56:4e:ac:72:6f:d8:20:09:db:6c:52:17:a9:b1:de:4f:00: 80:c2:98:15:54:59:e6:92:b3:10:dd:40:c0:8c:04:76:a4:86: bc:82:98:1b:ab:70:cc:29:a2:72:7a:e2:90:55:70:2c:19:f4: b1:0d:1b:af:65:ce:d8:a2:a1:49:fa:34:9e:d3:f2:ba:af:c4: 1f:45:ee:50:00:d6:b1:63:15:55:67:a7:aa:29:58:69:61:51: ae:e5:51:e7:46:20:fd:c8:40:04:77:64:c0:bb:9a:be:0d:51: 46:04:65:7f:3f:0c:e0:fa:97:b8:02:0c:e3:2d:4e:b0:a2:2b: 91:19:93:41:68:1f:33:51:e7:02:ca:df:48:53:11:7b:df:bd: 43:31:8a:6e:ef:46:e4:bb:6b:cf:13:90:0a:7c:6f:cf:d5:ea: 36:11:eb:ad:20:42:85:24:31:35:0e:7a:4e:79:3d:f2:7a:43: ab:cc:c4:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n9mh8Kyb9iJI5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgyNmM4OGQtZTYyZC00NWZlLWEwOGMtMGIwYTAyMWE1 MzE0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MjljYTJiNjAtZDg2Yi00MTY2LWEyMDMtZGZmMDJkNmYzZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl51HgRPv2C/vx2ti5dqoXUMXHCTYvq7cf2gV gVtvMYTtRroAp/GGJ92iqvBRKUN5SSilqgLakpm1wDDicI2WYlQtC+h+A/ycGUDw nkzegUheb7SuHHY9oRhYArE8sPIIDmpOtPLzHyHXmX0CwBWwcA12IFuNUzWcCcyb Xov7HwNnyWCkHb9Ju8bC6sroq50yAZ/0n9/eXHad5SYg11SANFa75L1S2JaULkaM AwLbqeSjTVt8n8OPdfca/gFtnb/zdPdIb1uFx3w+QtB0LrOsGkFNG7fMB6Tgbhv+ p8ILhiJVXe1VLA0ECwKTxUx9G9qcQL1H0eUIXJWJv03YfHHuSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGXAHaQj0yBqFNCmL/9zVjBaWxzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2 Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBhMDIxYTUzMTQvNWI3MjcxYmItMGU5Yi0z ZDhkLWEyYjMtNDE3NmZiNTU3MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDgyNmM4OGQtZTYyZC00NWZlLWEw OGMtMGIwYTAyMWE1MzE0L2Q4MjZjODhkLWU2MmQtNDVmZS1hMDhjLTBiMGEwMjFh NTMxNC5jcmwwHwYDVR0jBBgwFoAUoc+i8N7KpEuZE/Pqkvx2np/ugGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODI2Yzg4ZC1lNjJkLTQ1ZmUtYTA4Yy0wYjBh MDIxYTUzMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAByAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHo0b67ckPcxQObc2VSUng6er+T9YyPx+lh5V53xiK393TdfhzL sik4jHDUeiFTda8V/NZUFX3RjoUlx/COXlpFC+cMVzwYh4FWTqxyb9ggCdtsUhep sd5PAIDCmBVUWeaSsxDdQMCMBHakhryCmBurcMwponJ64pBVcCwZ9LENG69lztii oUn6NJ7T8rqvxB9F7lAA1rFjFVVnp6opWGlhUa7lUedGIP3IQAR3ZMC7mr4NUUYE ZX8/DOD6l7gCDOMtTrCiK5EZk0FoHzNR5wLK30hTEXvfvUMxim7vRuS7a88TkAp8 b8/V6jYR660gQoUkMTUOek55PfJ6Q6vMxGo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:41 2026 by rpki-client