$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0/c4e828bf-f839-3285-8561-61c05d169d38.roa File: c4e828bf-f839-3285-8561-61c05d169d38.roa (raw, json) Hash identifier: Bqkw1JS1StyQx31EFqnwBZVnXEyQJIwhBAnx7DcUPgg= Subject key identifier: C9:DD:5F:2F:94:3F:05:88:C5:F4:E4:48:A0:FB:E9:51:86:37:81:61 Certificate issuer: /CN=a69e2a6f-3efa-4595-b04f-166b0fe799b0 Certificate serial: 010D0C9F4328584D386A4AEE3BDE0F5C51F17500 Authority key identifier: 8A:56:E0:F8:65:53:6B:60:C0:5D:56:E6:D7:8B:92:C6:4E:08:A2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0/c4e828bf-f839-3285-8561-61c05d169d38.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 398704 IP address blocks: 2606:1540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0/a69e2a6f-3efa-4595-b04f-166b0fe799b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0/a69e2a6f-3efa-4595-b04f-166b0fe799b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4a:ee:3b:de:0f:5c:51:f1:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a69e2a6f-3efa-4595-b04f-166b0fe799b0 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=af3b8dd7-34c8-4aa4-81dc-83677bfa4f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:6c:93:3b:8f:81:f7:38:8e:90:cc:57:74: c8:f4:7d:ea:46:5b:d0:aa:36:33:c0:76:4a:0a:a7: 4a:29:13:ff:9f:86:e9:7e:69:f0:2d:87:ad:a0:99: b5:19:f2:11:17:d0:d7:8c:b8:b0:4e:bd:6d:04:b3: 1c:0c:ad:a6:7f:05:80:39:c7:77:5c:d5:ed:1c:c9: 42:36:94:e9:31:0f:61:b2:88:8a:e1:79:2f:9a:33: b7:20:fe:41:56:76:32:e9:6b:23:81:a6:75:2d:1e: d0:fb:e3:d7:3a:cb:24:f3:97:4a:98:38:82:e7:91: 39:fb:93:88:32:72:17:c2:40:de:39:66:5f:e3:96: 37:e7:6b:74:ad:36:17:74:09:a0:64:d7:ed:f8:b4: 23:40:1f:65:41:c8:fa:18:d2:aa:cd:d9:4a:46:cd: 94:32:2b:6a:74:7b:17:fa:e9:33:73:af:db:dc:7a: aa:ce:11:a7:7e:24:92:9d:0e:4e:9c:cc:10:7e:86: 24:7a:86:8c:ec:0a:97:ce:fa:31:96:f5:7f:7f:70: a5:2c:1e:6e:89:6e:10:48:b5:8d:44:b4:03:6d:2a: 45:0c:97:2a:b9:fb:ef:eb:63:72:80:6c:7e:84:73: 1b:0e:0f:21:1f:50:16:72:a7:e1:78:da:dd:6c:b4: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DD:5F:2F:94:3F:05:88:C5:F4:E4:48:A0:FB:E9:51:86:37:81:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0/c4e828bf-f839-3285-8561-61c05d169d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0/a69e2a6f-3efa-4595-b04f-166b0fe799b0.crl X509v3 Authority Key Identifier: keyid:8A:56:E0:F8:65:53:6B:60:C0:5D:56:E6:D7:8B:92:C6:4E:08:A2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a69e2a6f-3efa-4595-b04f-166b0fe799b0.cer sbgp-ipAddrBlock: critical IPv6: 2606:1540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:12:96:b8:d7:d2:b5:e0:9d:2f:ec:71:8f:0a:98:d8:14:64: e9:79:c0:75:87:f9:ce:b0:be:cd:3b:c9:1b:fa:09:13:a2:83: db:84:c2:bf:54:db:ed:d1:c2:91:43:e5:ce:90:48:e2:c4:ff: 84:a3:0d:66:d2:67:09:38:10:6f:d2:1b:db:d6:37:59:1a:c8: 44:ce:19:13:8e:9b:a9:b0:c0:34:d1:d2:48:04:64:0f:f4:7d: 1c:f9:f6:56:9f:36:b4:fc:6a:2f:e3:29:8c:0b:ff:e9:79:90: cc:d0:a8:04:6a:b1:3e:77:06:23:97:44:c8:ca:f6:00:e2:dc: 69:10:3a:ff:c0:c2:f8:51:f0:c3:77:5e:00:9f:0d:af:d6:19: d1:ef:83:01:7b:4e:c9:7a:20:f3:e2:4b:00:3c:90:26:97:25: ac:06:fe:b0:46:24:e4:9b:2c:17:62:87:e3:d1:34:fa:9a:17: ea:5c:de:5c:a5:9b:75:3c:da:f2:32:e4:7f:6d:a3:e9:49:e2: ab:0e:08:06:22:51:e4:1d:e6:33:7c:91:6a:87:fb:36:4c:67: 9d:40:0c:0c:86:32:64:41:9d:af:9c:de:bc:7d:4d:00:12:6e: 4a:4d:d6:81:d8:16:4d:21:5d:ee:7a:9d:5e:99:32:63:82:67: ab:59:2c:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE04akruO94PXFHxdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY5ZTJhNmYtM2VmYS00NTk1LWIwNGYtMTY2YjBmZTc5 OWIwMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YWYzYjhkZDctMzRjOC00YWE0LTgxZGMtODM2NzdiZmE0ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve1skzuPgfc4jpDMV3TI9H3qRlvQqjYzwHZK CqdKKRP/n4bpfmnwLYetoJm1GfIRF9DXjLiwTr1tBLMcDK2mfwWAOcd3XNXtHMlC NpTpMQ9hsoiK4XkvmjO3IP5BVnYy6WsjgaZ1LR7Q++PXOssk85dKmDiC55E5+5OI MnIXwkDeOWZf45Y352t0rTYXdAmgZNft+LQjQB9lQcj6GNKqzdlKRs2UMitqdHsX +ukzc6/b3HqqzhGnfiSSnQ5OnMwQfoYkeoaM7AqXzvoxlvV/f3ClLB5uiW4QSLWN RLQDbSpFDJcqufvv62NygGx+hHMbDg8hH1AWcqfheNrdbLQHjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMndXy+UPwWIxfTkSKD76VGGN4FhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNjll MmE2Zi0zZWZhLTQ1OTUtYjA0Zi0xNjZiMGZlNzk5YjAvYzRlODI4YmYtZjgzOS0z Mjg1LTg1NjEtNjFjMDVkMTY5ZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTY5ZTJhNmYtM2VmYS00NTk1LWIw NGYtMTY2YjBmZTc5OWIwL2E2OWUyYTZmLTNlZmEtNDU5NS1iMDRmLTE2NmIwZmU3 OTliMC5jcmwwHwYDVR0jBBgwFoAUilbg+GVTa2DAXVbm14uSxk4IogEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNjllMmE2Zi0zZWZhLTQ1OTUtYjA0Zi0xNjZi MGZlNzk5YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYVQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZEpa419K14J0v7HGPCpjYFGTpecB1h/nOsL7NO8kb+gkTooPbhMK/ VNvt0cKRQ+XOkEjixP+Eow1m0mcJOBBv0hvb1jdZGshEzhkTjpupsMA00dJIBGQP 9H0c+fZWnza0/Gov4ymMC//peZDM0KgEarE+dwYjl0TIyvYA4txpEDr/wML4UfDD d14Anw2v1hnR74MBe07JeiDz4ksAPJAmlyWsBv6wRiTkmywXYofj0TT6mhfqXN5c pZt1PNryMuR/baPpSeKrDggGIlHkHeYzfJFqh/s2TGedQAwMhjJkQZ2vnN68fU0A Em5KTdaB2BZNIV3uep1emTJjgmerWSw0 -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:53 2026 by rpki-client