$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa File: cd63a45e-2751-3074-836a-cb6f05c00e47.roa (raw, json) Hash identifier: 9q03DeaRTe6bzDVpyEkO6S8TMmZW32ip1WItcxe4vHY= Subject key identifier: FC:66:0E:EC:B3:CB:86:1B:34:47:7A:CE:84:52:F9:F3:ED:B8:B7:A4 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F4328584D0EA7BD5634686B508F99AE00 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 30144 IP address blocks: 2604:9b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:bd:56:34:68:6b:50:8f:99:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=6ee03cbe-8774-43e0-960c-b792355255a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:80:b3:d8:4b:1b:74:8c:41:bd:81:25:7b: de:bf:36:1f:7e:e2:1b:d6:63:a0:cc:7a:92:ef:04: 35:0a:1d:a8:0a:fa:e9:11:a4:03:10:bd:9b:51:d1: e1:13:8b:75:f0:b7:fd:ef:2f:79:bb:63:61:f8:4e: 0b:58:72:d7:c8:96:47:f2:4b:ff:33:57:6f:7c:6d: 42:c7:e6:b4:17:34:77:51:d6:73:11:24:6c:ce:90: 63:f9:c3:b2:a4:03:ff:78:4a:3e:43:82:b1:94:d6: 35:27:2d:9b:79:d2:8b:b6:df:0a:20:a7:8c:36:33: 94:1b:9b:9f:be:80:5b:02:26:07:94:87:c5:60:89: a4:55:09:ad:94:90:ef:20:be:93:20:1d:b7:37:c4: 5f:9c:c1:7b:d2:db:02:5c:5e:7f:32:e1:72:7f:7a: f9:84:9f:4b:1a:07:49:f0:0b:1f:5e:18:9a:70:e4: db:0a:ef:50:37:8a:8a:c1:da:8f:71:0e:94:7d:1a: 64:3d:ca:3c:ff:38:8f:44:54:2f:99:1e:48:8f:b2: 0f:65:16:9d:07:b7:28:02:09:50:a9:3f:a9:1d:8d: 43:a2:92:6c:b1:8a:49:ce:02:a0:b0:1d:71:bf:39: ae:d0:bf:d8:3d:1a:44:05:99:04:31:31:00:0b:33: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:66:0E:EC:B3:CB:86:1B:34:47:7A:CE:84:52:F9:F3:ED:B8:B7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv6: 2604:9b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f0:6d:cb:dc:97:1c:28:2f:40:0e:f5:cc:f7:3b:54:45:55: 57:c4:e4:25:f5:7c:f7:d4:3d:ce:fc:1d:bc:37:2b:d9:2b:a0: df:65:b1:76:b1:50:be:27:8c:59:6d:67:61:3f:95:f3:4c:78: 94:b6:1c:c3:7c:48:98:fd:03:df:4a:24:fa:c1:e1:b4:f6:f7: 67:b4:8b:bc:63:7c:21:f9:14:e5:1e:c5:1f:2a:a1:ff:92:8e: 52:88:53:05:8c:f8:32:51:d5:10:80:86:ae:a4:92:01:c4:fb: 85:8f:61:46:94:12:84:62:1b:06:a3:41:cd:ea:72:0d:33:30: 2a:7f:60:45:02:e7:ac:61:7d:1b:63:df:91:bd:0a:31:04:42: 5d:5b:6d:4d:87:38:f5:19:cb:0a:b0:22:e6:b1:c3:f7:fa:52: 77:2b:64:f4:a1:19:44:e6:01:b7:9b:0e:66:fc:4f:aa:73:f1: 9f:41:92:d1:8c:ae:9a:18:ff:b1:e3:21:20:3d:98:31:29:1a: a8:4d:55:50:12:82:ec:01:db:8a:e4:9c:42:90:52:9f:83:a1: 3b:8d:d6:09:bc:31:9f:d3:0c:4a:da:2d:4a:66:02:59:0e:97: 92:f0:b8:19:d9:cc:22:6b:e0:c2:45:09:a2:a2:46:47:e8:76: 7f:53:1c:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0Op71WNGhrUI+ZrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NmVlMDNjYmUtODc3NC00M2UwLTk2MGMtYjc5MjM1NTI1NWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx46As9hLG3SMQb2BJXvevzYffuIb1mOgzHqS 7wQ1Ch2oCvrpEaQDEL2bUdHhE4t18Lf97y95u2Nh+E4LWHLXyJZH8kv/M1dvfG1C x+a0FzR3UdZzESRszpBj+cOypAP/eEo+Q4KxlNY1Jy2bedKLtt8KIKeMNjOUG5uf voBbAiYHlIfFYImkVQmtlJDvIL6TIB23N8RfnMF70tsCXF5/MuFyf3r5hJ9LGgdJ 8AsfXhiacOTbCu9QN4qKwdqPcQ6UfRpkPco8/ziPRFQvmR5Ij7IPZRadB7coAglQ qT+pHY1DopJssYpJzgKgsB1xvzmu0L/YPRpEBZkEMTEACzMf8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPxmDuyzy4YbNEd6zoRS+fPtuLekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvY2Q2M2E0NWUtMjc1MS0z MDc0LTgzNmEtY2I2ZjA1YzAwZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSbgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAN8G3L3JccKC9ADvXM9ztURVVXxOQl9Xz31D3O/B28NyvZK6DfZbF2 sVC+J4xZbWdhP5XzTHiUthzDfEiY/QPfSiT6weG09vdntIu8Y3wh+RTlHsUfKqH/ ko5SiFMFjPgyUdUQgIaupJIBxPuFj2FGlBKEYhsGo0HN6nINMzAqf2BFAuesYX0b Y9+RvQoxBEJdW21Nhzj1GcsKsCLmscP3+lJ3K2T0oRlE5gG3mw5m/E+qc/GfQZLR jK6aGP+x4yEgPZgxKRqoTVVQEoLsAduK5JxCkFKfg6E7jdYJvDGf0wxK2i1KZgJZ DpeS8LgZ2cwia+DCRQmiokZH6HZ/Uxxp -----END CERTIFICATE-----Generated at Sat Mar 28 14:58:11 2026 by rpki-client