$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa File: ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa (raw, json) Hash identifier: 1SruZJWvTqYwRWTeU4EdYTKoYJGJNraR3a5At5urCbY= Subject key identifier: 90:70:7B:2A:2F:28:77:71:E5:D7:8A:53:04:3A:44:58:D3:F7:19:9D Certificate issuer: /CN=00c081d9-ab0e-4270-b0f1-227e8a595105 Certificate serial: 010D0C9F4328584D492A762EEFEF59D1DBC27A80 Authority key identifier: EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 401315 IP address blocks: 2620:cd:6000::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:76:2e:ef:ef:59:d1:db:c2:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00c081d9-ab0e-4270-b0f1-227e8a595105 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=67f0a9ea-c2ea-498e-9807-67317f5483b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1d:8c:b2:f0:60:2f:48:d9:a9:ab:b4:e6:71: 3b:58:1e:ab:49:2e:2f:09:6a:c3:25:23:63:b9:e0: 26:fc:be:fa:91:42:01:ec:c4:73:0d:00:f3:91:ae: 7e:92:b4:0b:4d:e8:45:18:80:45:99:c2:1a:f7:7f: 66:38:3c:04:e7:13:4c:3d:67:21:18:ee:b5:12:a5: 4f:e6:74:f6:77:17:10:7d:ce:69:95:85:97:bc:60: ed:40:52:e8:ae:10:b7:57:7b:e0:76:53:89:36:50: f2:1b:6d:38:4d:00:d9:5a:74:d7:5c:d5:16:7e:e0: 09:7d:c1:69:5e:44:71:1c:9b:9a:bb:d4:dc:2f:81: a0:28:b9:f5:29:15:14:b1:81:fd:15:b8:a1:71:f1: 34:58:5c:ed:9d:13:ee:36:a8:da:74:4c:b0:63:66: ac:ed:dc:1a:9c:18:e9:41:b4:49:c5:49:3a:7e:d3: 94:d3:19:81:30:7c:22:7d:b0:c6:e8:53:3e:25:75: 73:81:4c:8c:eb:fb:28:9e:f8:9d:8f:3b:e7:f3:3f: 8d:56:16:e8:af:58:4e:be:65:cb:ca:30:41:56:cb: 57:90:20:6d:a7:6d:7f:13:e3:6e:ad:38:ed:0c:4c: 30:cd:69:0a:03:bc:a0:d0:82:41:f6:95:a0:1d:83: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:70:7B:2A:2F:28:77:71:E5:D7:8A:53:04:3A:44:58:D3:F7:19:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl X509v3 Authority Key Identifier: keyid:EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer sbgp-ipAddrBlock: critical IPv6: 2620:cd:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:76:ff:fd:01:8d:53:2c:63:1e:3f:1c:57:6b:d9:06:01:b1: 40:21:2c:bc:70:6b:5c:99:c8:9a:42:15:aa:6d:6b:08:58:b0: 79:9e:12:d3:6b:8a:e6:aa:08:24:ae:c8:e3:ed:0d:d2:48:4f: fa:2a:6d:31:49:b4:95:bf:b7:4e:63:e0:68:36:dd:68:29:32: b2:63:56:cf:45:08:a5:4a:e7:e0:20:56:27:3a:50:18:cb:03: 39:87:f2:02:7e:15:94:01:29:78:0a:47:8c:45:57:0c:97:42: 04:b9:44:10:e6:bc:8f:13:cc:68:a3:41:d0:d7:8a:3f:b8:4f: 91:5f:ec:78:95:03:9c:aa:51:f5:7c:28:bb:d9:f5:35:85:34: d0:b0:33:44:39:47:dc:ae:57:7b:81:46:f2:dc:0f:09:41:90: 22:7f:42:39:3f:e0:b4:db:40:ec:44:9e:8d:e6:79:7a:12:da: 6a:1f:f9:76:6e:ca:a5:c0:db:c6:60:81:97:37:06:9a:db:81: a3:bd:b4:b1:15:b3:e6:51:c1:6d:2f:f9:ea:43:69:72:b3:99: 85:aa:f3:19:4c:87:a8:b2:ae:c8:d3:cd:80:52:e4:89:3e:0f: 5b:57:80:8d:1b:86:55:68:2f:7e:b2:3f:d0:16:38:e8:eb:0a: 9c:24:fe:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1JKnYu7+9Z0dvCeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBjMDgxZDktYWIwZS00MjcwLWIwZjEtMjI3ZThhNTk1 MTA1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NjdmMGE5ZWEtYzJlYS00OThlLTk4MDctNjczMTdmNTQ4M2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B2MsvBgL0jZqau05nE7WB6rSS4vCWrDJSNj ueAm/L76kUIB7MRzDQDzka5+krQLTehFGIBFmcIa939mODwE5xNMPWchGO61EqVP 5nT2dxcQfc5plYWXvGDtQFLorhC3V3vgdlOJNlDyG204TQDZWnTXXNUWfuAJfcFp XkRxHJuau9TcL4GgKLn1KRUUsYH9FbihcfE0WFztnRPuNqjadEywY2as7dwanBjp QbRJxUk6ftOU0xmBMHwifbDG6FM+JXVzgUyM6/sonvidjzvn8z+NVhbor1hOvmXL yjBBVstXkCBtp21/E+NurTjtDEwwzWkKA7yg0IJB9pWgHYM5tQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJBweyovKHdx5deKUwQ6RFjT9xmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMGMw ODFkOS1hYjBlLTQyNzAtYjBmMS0yMjdlOGE1OTUxMDUvZGRiN2E3YWQtMDljZS0z MTNhLWJlMGItN2UxNTQ1OTg4MmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDBjMDgxZDktYWIwZS00MjcwLWIw ZjEtMjI3ZThhNTk1MTA1LzAwYzA4MWQ5LWFiMGUtNDI3MC1iMGYxLTIyN2U4YTU5 NTEwNS5jcmwwHwYDVR0jBBgwFoAU60jst+uTYGdIj0SDtV3OMVykfKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMGMwODFkOS1hYjBlLTQyNzAtYjBmMS0yMjdl OGE1OTUxMDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAzWAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB92//0BjVMsYx4/HFdr2QYBsUAhLLxwa1yZyJpCFaptawhYsHme EtNriuaqCCSuyOPtDdJIT/oqbTFJtJW/t05j4Gg23WgpMrJjVs9FCKVK5+AgVic6 UBjLAzmH8gJ+FZQBKXgKR4xFVwyXQgS5RBDmvI8TzGijQdDXij+4T5Ff7HiVA5yq UfV8KLvZ9TWFNNCwM0Q5R9yuV3uBRvLcDwlBkCJ/Qjk/4LTbQOxEno3meXoS2mof +XZuyqXA28ZggZc3BprbgaO9tLEVs+ZRwW0v+epDaXKzmYWq8xlMh6iyrsjTzYBS 5Ik+D1tXgI0bhlVoL36yP9AWOOjrCpwk/ug= -----END CERTIFICATE-----Generated at Thu Mar 26 22:08:15 2026 by rpki-client