$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/68b75e77-2026-3748-8a3f-58aba2474f94.roa File: 68b75e77-2026-3748-8a3f-58aba2474f94.roa (raw, json) Hash identifier: vekO52YC1MPo4KByDgwrhmVmrIo4LOpGyrxC5WrHljc= Subject key identifier: 77:9A:E8:E6:D9:0D:C0:3D:C0:56:B7:74:BE:0B:07:82:90:36:92:7B Certificate issuer: /CN=bc8cb991-2064-4b59-b1f6-82aba3073313 Certificate serial: 010D0C9F4328584D492A75B0A0B19F7722E5A520 Authority key identifier: BD:73:60:98:92:1C:E6:B9:C5:87:58:CB:F4:F8:3C:AC:9E:8B:9E:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/68b75e77-2026-3748-8a3f-58aba2474f94.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 32608 IP address blocks: 2607:c340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/bc8cb991-2064-4b59-b1f6-82aba3073313.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/bc8cb991-2064-4b59-b1f6-82aba3073313.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:75:b0:a0:b1:9f:77:22:e5:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc8cb991-2064-4b59-b1f6-82aba3073313 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=1d33c80e-7abd-46bf-811d-008a80183c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:6b:62:12:e9:74:c5:c4:8b:55:bf:c9:ce: 5f:e2:2b:63:5b:29:ef:c6:11:f6:c1:17:89:4e:9f: 3d:67:f9:6a:3a:c8:32:fc:ff:7b:02:9c:52:b0:4f: c6:55:a3:99:79:3c:00:1e:8a:40:cb:89:7b:0e:be: 48:9d:b6:21:b7:96:3f:95:1b:97:5d:2d:3f:d3:58: 6a:01:c6:4e:40:04:15:ed:a6:a7:91:0b:9b:e5:00: cc:88:4c:7b:d8:f2:a2:be:a8:56:53:ec:a1:8a:87: ac:7a:61:0d:fb:43:82:c6:47:32:11:b7:ea:d1:3e: 8a:6d:d0:9c:f5:39:2e:d0:9b:db:25:5d:60:c0:e3: 73:3e:e2:a0:11:ba:cf:af:40:97:6b:c0:fa:f8:29: 57:0f:fe:d9:0c:08:3f:e0:26:e8:d9:47:10:bf:e7: 57:54:33:bf:f0:05:8a:0c:4d:9b:c7:f9:a8:70:43: be:f7:d7:d2:90:eb:c3:97:ac:f5:21:99:39:77:f1: 66:b4:80:e9:e2:3e:2a:b3:a9:da:c7:24:e1:dd:94: a5:a6:d2:81:7c:9c:be:b1:2c:53:25:69:61:f7:82: fa:77:fb:c7:18:44:1c:ee:82:16:55:20:54:ff:02: c2:ff:c0:29:a1:c6:29:78:80:35:c0:5c:59:31:4c: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:E8:E6:D9:0D:C0:3D:C0:56:B7:74:BE:0B:07:82:90:36:92:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/68b75e77-2026-3748-8a3f-58aba2474f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/bc8cb991-2064-4b59-b1f6-82aba3073313.crl X509v3 Authority Key Identifier: keyid:BD:73:60:98:92:1C:E6:B9:C5:87:58:CB:F4:F8:3C:AC:9E:8B:9E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313.cer sbgp-ipAddrBlock: critical IPv6: 2607:c340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1e:8a:49:03:8f:e0:5b:c2:77:96:34:71:22:21:e0:10:8f: 1b:2e:b7:8c:24:a6:89:b6:e7:73:0d:78:00:80:3f:a9:a1:bc: a2:ec:06:01:ce:14:23:da:06:f0:87:89:40:29:2d:d4:7d:e4: 73:ed:19:b6:5e:47:88:24:12:fc:7e:e3:dd:44:b1:0d:1b:5f: 43:3a:fa:9f:b2:69:ec:a9:2f:75:79:35:5c:55:a6:fa:e5:76: 5b:e6:49:b6:e4:45:a6:f4:47:f5:57:3e:b2:00:fd:03:6b:e8: 69:0e:dc:bc:b0:0b:49:98:74:7f:38:36:39:ea:30:46:20:b0: d7:65:0c:91:d6:d3:f3:30:2d:06:ea:a7:2c:c4:45:f0:13:41: d2:c8:c4:4b:15:98:44:4f:42:f6:d4:b2:c2:57:e7:f0:24:40: 04:19:00:c9:90:69:05:b7:88:3c:2a:d3:92:f4:6d:43:27:54: c2:da:70:8e:53:fb:dd:04:ec:7b:58:85:bd:eb:12:01:23:4d: 9a:15:7b:d7:78:22:e2:58:07:a2:32:e6:c8:22:69:5c:c1:48: 9a:3e:06:ec:80:bf:a0:3c:8b:b6:fc:c6:0b:ab:e0:bb:b6:ce: ec:b5:57:d2:b9:59:aa:f3:d2:58:7a:0f:d4:43:aa:04:83:75: 8a:fa:a3:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1JKnWwoLGfdyLlpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM4Y2I5OTEtMjA2NC00YjU5LWIxZjYtODJhYmEzMDcz MzEzMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MWQzM2M4MGUtN2FiZC00NmJmLTgxMWQtMDA4YTgwMTgzYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH5rYhLpdMXEi1W/yc5f4itjWynvxhH2wReJ Tp89Z/lqOsgy/P97ApxSsE/GVaOZeTwAHopAy4l7Dr5InbYht5Y/lRuXXS0/01hq AcZOQAQV7aankQub5QDMiEx72PKivqhWU+yhioesemEN+0OCxkcyEbfq0T6KbdCc 9Tku0JvbJV1gwONzPuKgEbrPr0CXa8D6+ClXD/7ZDAg/4Cbo2UcQv+dXVDO/8AWK DE2bx/mocEO+99fSkOvDl6z1IZk5d/FmtIDp4j4qs6naxyTh3ZSlptKBfJy+sSxT JWlh94L6d/vHGEQc7oIWVSBU/wLC/8ApocYpeIA1wFxZMUyyaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHea6ObZDcA9wFa3dL4LB4KQNpJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYzhj Yjk5MS0yMDY0LTRiNTktYjFmNi04MmFiYTMwNzMzMTMvNjhiNzVlNzctMjAyNi0z NzQ4LThhM2YtNThhYmEyNDc0Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmM4Y2I5OTEtMjA2NC00YjU5LWIx ZjYtODJhYmEzMDczMzEzL2JjOGNiOTkxLTIwNjQtNGI1OS1iMWY2LTgyYWJhMzA3 MzMxMy5jcmwwHwYDVR0jBBgwFoAUvXNgmJIc5rnFh1jL9Pg8rJ6LngAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYzhjYjk5MS0yMDY0LTRiNTktYjFmNi04MmFi YTMwNzMzMTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsHopJA4/gW8J3ljRxIiHgEI8bLreMJKaJtudzDXgAgD+pobyi7AYB zhQj2gbwh4lAKS3UfeRz7Rm2XkeIJBL8fuPdRLENG19DOvqfsmnsqS91eTVcVab6 5XZb5km25EWm9Ef1Vz6yAP0Da+hpDty8sAtJmHR/ODY56jBGILDXZQyR1tPzMC0G 6qcsxEXwE0HSyMRLFZhET0L21LLCV+fwJEAEGQDJkGkFt4g8KtOS9G1DJ1TC2nCO U/vdBOx7WIW96xIBI02aFXvXeCLiWAeiMubIImlcwUiaPgbsgL+gPIu2/MYLq+C7 ts7stVfSuVmq89JYeg/UQ6oEg3WK+qM9 -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:44 2026 by rpki-client