$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/deaf37bb-4661-37e0-a226-5e0de645fe9c.roa File: deaf37bb-4661-37e0-a226-5e0de645fe9c.roa (raw, json) Hash identifier: Csyx4GtgYWdwn/U71ZoTzCnlV0uDtOu4Rw+5WDJwazM= Subject key identifier: E5:1C:0D:E4:32:75:CC:A6:08:3E:67:64:2B:E1:38:EC:B3:07:3F:49 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584D146D7F38A7196D4B3A8C1D20 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/deaf37bb-4661-37e0-a226-5e0de645fe9c.roa Signing time: Fri 06 Mar 2026 15:38:22 +0000 ROA not before: Fri 06 Mar 2026 15:38:22 +0000 ROA not after: Thu 04 Jun 2026 14:38:22 +0000 asID: 81 IP address blocks: 2600:2700::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:7f:38:a7:19:6d:4b:3a:8c:1d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Mar 6 15:38:22 2026 GMT Not After : Jun 4 14:38:22 2026 GMT Subject: CN=d62699a9-bb89-45b1-9d8e-2888e1c16f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:c9:bc:6c:22:85:23:70:ef:bb:b9:b6:06: 1b:73:fd:ee:82:cf:25:45:0b:13:89:27:b5:05:b6: 1c:6b:0f:14:90:c5:9f:2b:c2:4e:cd:f3:e4:5c:73: 9a:44:7e:63:4a:6b:2a:7d:d0:2d:d8:b0:cf:7e:08: 4d:b7:02:aa:f0:9a:26:ec:c5:af:b4:58:de:d2:cb: b5:8d:49:c9:78:4e:c0:c2:38:7a:32:5d:d7:25:2e: 3b:8a:76:f2:6f:cd:7e:ab:7c:a3:81:fb:1e:c6:a4: 3c:81:69:d8:63:70:14:6a:36:f4:1d:15:ae:34:29: 2a:cc:13:f8:11:df:fa:d8:e6:fa:07:f5:5b:7e:04: a6:09:a0:18:80:27:46:99:df:f0:a7:cd:ce:f8:da: c7:c2:65:b4:79:fe:d1:e8:13:4b:d5:2d:c8:52:37: 3b:8c:a6:34:67:14:ba:71:d7:8d:64:bc:3d:38:43: d3:fb:b0:0c:17:5e:e3:e1:c8:3c:ac:47:48:87:e0: 5e:e8:02:53:57:a2:3c:54:38:2e:32:0b:09:62:65: fc:d6:5e:1e:1c:5e:0d:a5:75:45:8e:4c:51:75:1a: 37:c6:43:35:93:84:4a:e0:83:d9:8f:94:a1:3a:1c: 92:37:cb:c1:31:8d:61:37:83:70:6a:16:a9:82:37: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1C:0D:E4:32:75:CC:A6:08:3E:67:64:2B:E1:38:EC:B3:07:3F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/deaf37bb-4661-37e0-a226-5e0de645fe9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2700::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:49:b5:5f:4e:48:85:cb:f4:9e:7e:4c:e8:a1:6a:8e:c4:d5: 27:59:5d:56:a3:37:7b:f6:7e:37:d7:2c:90:8a:2d:96:3c:c8: 36:9e:8e:3e:8f:ba:2d:30:69:59:1b:ff:35:f6:11:28:47:f7: 66:8c:c6:48:3c:f7:de:6e:21:54:03:f7:94:f4:aa:60:84:c6: 74:a2:0a:62:b1:aa:61:c3:14:eb:e0:80:7c:ff:6b:a7:1d:3a: 51:28:f6:48:61:7f:aa:a0:62:56:58:8d:9a:4b:d2:87:e1:01: 78:73:e9:06:f6:b7:75:b3:df:fd:6f:f9:6b:cf:a1:0f:ef:db: c0:b3:d5:06:1b:f0:45:39:9f:d5:37:d4:89:fa:24:53:c3:2a: 6d:fd:d3:d5:1e:90:10:f7:5d:9d:f4:38:47:be:84:2f:75:30: e6:c0:57:c2:48:80:4b:74:16:22:bf:d4:a8:15:6d:3e:ad:ed: e9:8d:50:ad:ce:ac:0d:fd:0f:25:81:43:76:de:1c:dd:1a:92: 4c:7d:54:ab:50:6d:92:31:e1:0e:9c:c8:0f:08:57:b1:76:84: 9b:e1:4f:6c:83:22:91:95:48:87:8f:ac:cb:2e:9e:66:5d:85: 8f:dc:29:a1:dc:a7:d0:3e:2a:1e:a5:43:00:f4:f6:53:33:22: c6:1c:4c:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UbX84pxltSzqMHSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI2MDMwNjE1MzgyMloXDTI2MDYwNDE0MzgyMlowLzEtMCsGA1UEAxMk ZDYyNjk5YTktYmI4OS00NWIxLTlkOGUtMjg4OGUxYzE2Zjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApofJvGwihSNw77u5tgYbc/3ugs8lRQsTiSe1 BbYcaw8UkMWfK8JOzfPkXHOaRH5jSmsqfdAt2LDPfghNtwKq8Jom7MWvtFje0su1 jUnJeE7Awjh6Ml3XJS47inbyb81+q3yjgfsexqQ8gWnYY3AUajb0HRWuNCkqzBP4 Ed/62Ob6B/VbfgSmCaAYgCdGmd/wp83O+NrHwmW0ef7R6BNL1S3IUjc7jKY0ZxS6 cdeNZLw9OEPT+7AMF17j4cg8rEdIh+Be6AJTV6I8VDguMgsJYmX81l4eHF4NpXVF jkxRdRo3xkM1k4RK4IPZj5ShOhySN8vBMY1hN4NwahapgjcORQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOUcDeQydcymCD5nZCvhOOyzBz9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvZGVhZjM3YmItNDY2MS0z N2UwLWEyMjYtNWUwZGU2NDVmZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8SbVfTkiFy/SefkzooWqOxNUnWV1Wozd79n431yyQii2WPMg2no4+ j7otMGlZG/819hEoR/dmjMZIPPfebiFUA/eU9KpghMZ0ogpisaphwxTr4IB8/2un HTpRKPZIYX+qoGJWWI2aS9KH4QF4c+kG9rd1s9/9b/lrz6EP79vAs9UGG/BFOZ/V N9SJ+iRTwypt/dPVHpAQ912d9DhHvoQvdTDmwFfCSIBLdBYiv9SoFW0+re3pjVCt zqwN/Q8lgUN23hzdGpJMfVSrUG2SMeEOnMgPCFexdoSb4U9sgyKRlUiHj6zLLp5m XYWP3Cmh3KfQPioepUMA9PZTMyLGHEyk -----END CERTIFICATE-----Generated at Thu Mar 26 06:01:28 2026 by rpki-client