$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/fb7a533d-96f1-39b6-8797-f429cf2ad721.roa File: fb7a533d-96f1-39b6-8797-f429cf2ad721.roa (raw, json) Hash identifier: 8/7k4Rf9lD+iOr2lMX0np8lWZ0s3OQE2mk9uJ+fyhAU= Subject key identifier: 23:9F:8E:EA:73:65:DF:37:00:33:B1:79:76:7E:6F:B3:53:03:63:4D Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584D146D7F5D826F2DF814B71BB5 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/fb7a533d-96f1-39b6-8797-f429cf2ad721.roa Signing time: Fri 06 Mar 2026 15:38:22 +0000 ROA not before: Fri 06 Mar 2026 15:38:22 +0000 ROA not after: Thu 04 Jun 2026 14:38:22 +0000 asID: 13371 IP address blocks: 2600:2704:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:7f:5d:82:6f:2d:f8:14:b7:1b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Mar 6 15:38:22 2026 GMT Not After : Jun 4 14:38:22 2026 GMT Subject: CN=9b38b6b5-b107-4cf3-b546-9e0eba84bd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:50:6d:f3:a1:1c:c1:e7:09:37:18:0e:6d: b4:21:d1:03:38:27:b5:87:04:50:cf:00:67:ed:8e: 22:3f:b2:51:6a:2c:68:a1:9c:c8:f4:d5:4e:25:bf: a3:e0:da:28:c2:3d:6c:fc:af:62:47:ec:d6:ab:ef: 1d:00:e7:a8:40:f6:5f:57:70:9a:b3:55:be:8f:09: 5d:4c:25:a8:ca:8a:54:29:10:11:e0:01:56:3d:de: 25:c9:f3:1a:e9:bb:51:bf:51:21:dd:e7:00:1f:7a: d0:3e:4f:02:8d:b2:31:cb:01:98:63:87:06:1f:9a: 56:a5:40:19:77:3e:86:88:4d:cd:ab:6b:ed:3d:6b: 63:c1:f9:30:6a:00:53:3b:a4:62:6a:5a:7f:3e:33: 07:fb:a3:54:6d:40:15:d5:70:83:e7:e2:e6:b4:83: 45:08:de:66:e6:0a:83:e4:7d:b2:09:78:16:71:b3: 74:f9:2b:2f:38:e2:73:d3:e8:38:59:80:1e:41:34: 74:44:e2:41:bc:80:ed:38:b7:c4:a3:f0:c9:06:7f: ac:85:42:fc:85:46:28:59:42:b9:36:a0:6b:25:c6: 5f:f2:15:3a:9f:13:0b:f2:55:37:31:27:f5:fc:ae: e7:49:c9:57:22:1b:97:e3:c5:fc:cd:ce:5e:4d:41: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9F:8E:EA:73:65:DF:37:00:33:B1:79:76:7E:6F:B3:53:03:63:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/fb7a533d-96f1-39b6-8797-f429cf2ad721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2704:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:87:f0:b3:72:87:ae:13:1b:5f:c1:58:f0:59:00:1c:17:28: 31:5e:1a:94:79:e5:7d:ca:e9:e8:99:16:29:7d:46:f1:9e:fa: 1b:d8:ba:90:00:c3:0b:ce:76:09:db:79:fc:96:86:7a:f7:df: 38:d5:e2:ed:b7:b1:6e:33:a3:d7:f4:c2:31:22:fd:76:22:ac: cb:46:a5:11:3b:ab:96:83:ae:02:ad:5d:8c:92:a9:19:4e:84: eb:46:22:5a:dd:17:d9:6f:f7:a9:8f:ac:61:d6:01:cc:7b:48: e4:46:64:5b:36:73:61:e9:a5:3d:c4:30:44:c0:dd:1d:a1:60: a0:db:4b:0a:fc:4d:bf:10:71:99:6a:be:74:07:c4:a1:bb:99: 76:01:0a:78:56:ef:5b:80:fe:a9:73:ef:da:11:f1:e5:55:d3: 60:f2:c7:b1:01:ad:ed:a8:89:30:66:ca:6e:5a:18:4c:62:2e: d0:e3:6d:ae:fa:3c:03:92:55:1a:ee:6f:09:93:4d:f2:7e:de: e7:a5:3f:1e:8a:39:74:d9:de:9e:2e:2a:4a:43:7b:64:fc:33: ef:d4:4a:1a:3a:04:86:91:77:c8:7c:03:f6:80:34:1c:4e:a2: 59:b7:6c:9b:56:83:ac:88:63:dc:6a:e4:41:99:33:d6:53:c3: 1e:bc:c2:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UbX9dgm8t+BS3G7UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI2MDMwNjE1MzgyMloXDTI2MDYwNDE0MzgyMlowLzEtMCsGA1UEAxMk OWIzOGI2YjUtYjEwNy00Y2YzLWI1NDYtOWUwZWJhODRiZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYhQbfOhHMHnCTcYDm20IdEDOCe1hwRQzwBn 7Y4iP7JRaixooZzI9NVOJb+j4Noowj1s/K9iR+zWq+8dAOeoQPZfV3Cas1W+jwld TCWoyopUKRAR4AFWPd4lyfMa6btRv1Eh3ecAH3rQPk8CjbIxywGYY4cGH5pWpUAZ dz6GiE3Nq2vtPWtjwfkwagBTO6Rialp/PjMH+6NUbUAV1XCD5+LmtINFCN5m5gqD 5H2yCXgWcbN0+SsvOOJz0+g4WYAeQTR0ROJBvIDtOLfEo/DJBn+shUL8hUYoWUK5 NqBrJcZf8hU6nxML8lU3MSf1/K7nSclXIhuX48X8zc5eTUFu0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCOfjupzZd83ADOxeXZ+b7NTA2NNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvZmI3YTUzM2QtOTZmMS0z OWI2LTg3OTctZjQyOWNmMmFkNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAnBAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCH8LNyh64TG1/BWPBZABwXKDFeGpR55X3K6eiZFil9RvGe+hvY upAAwwvOdgnbefyWhnr33zjV4u23sW4zo9f0wjEi/XYirMtGpRE7q5aDrgKtXYyS qRlOhOtGIlrdF9lv96mPrGHWAcx7SORGZFs2c2HppT3EMETA3R2hYKDbSwr8Tb8Q cZlqvnQHxKG7mXYBCnhW71uA/qlz79oR8eVV02Dyx7EBre2oiTBmym5aGExiLtDj ba76PAOSVRrubwmTTfJ+3uelPx6KOXTZ3p4uKkpDe2T8M+/USho6BIaRd8h8A/aA NBxOolm3bJtWg6yIY9xq5EGZM9ZTwx68wsQ= -----END CERTIFICATE-----Generated at Thu Mar 26 22:05:04 2026 by rpki-client