$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa File: 519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa (raw, json) Hash identifier: k9s0CIW/wx5xdIXfXjqeKIWWo6moTpXOau+BdYW8jS4= Subject key identifier: 48:D7:A6:DE:10:2F:0E:29:FD:EB:5B:BA:D1:D7:CB:D5:BC:53:B6:53 Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F4328584D0D426575F2CB30D40D900E40 Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 399844 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:65:75:f2:cb:30:d4:0d:90:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=dea72f24-a5ce-42b5-9bb4-ddf8adbf1b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:90:02:8b:a1:f3:fe:55:6d:67:e5:24:05: c7:3d:ef:f0:33:25:aa:40:3b:0c:b9:74:a6:31:84: 01:91:cf:b7:fc:37:0a:78:0c:b4:bb:a9:e8:8c:e1: bb:87:1e:01:9b:ee:10:ed:39:25:66:61:f1:43:73: 77:b7:19:74:07:5f:66:de:b6:cd:8d:9d:35:bf:11: e3:a5:2e:7a:1a:ab:b9:b0:0f:42:ef:a4:b1:b4:ff: 4e:31:cb:d3:de:0e:27:fa:a0:e1:60:39:25:0d:d5: 67:a4:a9:41:bf:b8:ca:6f:79:0d:05:da:33:66:03: 6a:ae:f1:18:45:d0:58:3b:ce:32:78:bc:df:cd:6a: 89:82:55:b5:76:f5:79:b8:2d:f5:a0:9f:f4:4d:75: 8f:fe:3c:f5:e4:65:f0:17:db:39:98:9f:e4:d8:4f: 7f:1f:22:79:a7:e3:b2:a9:b1:02:46:fc:dd:3f:2b: ed:e8:9c:7d:cd:a3:39:c5:c0:c5:38:35:3c:eb:bc: bb:7a:b6:c9:0a:72:d1:7b:a4:64:52:be:d2:06:b9: 9a:9f:df:be:09:5e:8c:c9:67:04:6f:df:8f:ed:22: 46:0d:8a:de:6e:b6:e5:75:7b:77:06:1f:40:9f:b9: 93:8b:f0:f1:08:2f:10:8a:aa:4e:5e:59:be:ea:b9: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D7:A6:DE:10:2F:0E:29:FD:EB:5B:BA:D1:D7:CB:D5:BC:53:B6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e4:94:bf:bf:47:7c:f9:6e:08:52:4a:e9:db:2b:5d:dd:54: c6:58:d6:fe:f5:3b:73:43:d1:90:9e:a7:c8:91:a3:db:33:67: bb:01:82:71:d1:1d:33:14:d7:ec:1f:5c:44:08:77:a0:6a:23: c8:c4:87:3c:33:fe:14:d8:c3:13:e1:0b:ed:7b:19:56:80:2f: 44:49:3a:1d:29:fc:3e:36:f6:74:55:5f:88:32:95:f1:84:fa: 6a:72:9a:73:7e:15:16:82:93:26:ff:83:95:ed:b5:3c:20:7b: 14:1e:33:54:20:c5:ed:52:33:ac:88:80:22:f5:ca:70:04:b6: 24:3e:ce:7c:93:fd:c7:fb:2d:b1:b7:6d:87:10:9f:d1:c2:66: 1c:c3:fb:bf:d2:80:f6:47:34:17:99:27:a9:24:7e:05:cf:e3: 97:8f:db:4a:84:41:a8:cc:9d:b7:43:bc:f2:d4:1d:67:0a:14: e2:fd:4b:a8:58:ff:51:91:6e:9e:c1:76:5a:c0:11:b1:75:04: 98:09:24:9f:26:e0:b2:ed:99:c7:c2:64:ff:dc:2f:4b:c4:55: 44:33:a9:94:15:21:15:b8:e6:96:be:b0:64:10:bd:ce:75:98: 2e:69:0d:e0:49:56:31:e6:d1:d8:41:fb:7e:de:c3:22:21:70: d9:a2:65:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQmV18ssw1A2QDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGVhNzJmMjQtYTVjZS00MmI1LTliYjQtZGRmOGFkYmYxYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZyQAouh8/5VbWflJAXHPe/wMyWqQDsMuXSm MYQBkc+3/DcKeAy0u6nojOG7hx4Bm+4Q7TklZmHxQ3N3txl0B19m3rbNjZ01vxHj pS56Gqu5sA9C76SxtP9OMcvT3g4n+qDhYDklDdVnpKlBv7jKb3kNBdozZgNqrvEY RdBYO84yeLzfzWqJglW1dvV5uC31oJ/0TXWP/jz15GXwF9s5mJ/k2E9/HyJ5p+Oy qbECRvzdPyvt6Jx9zaM5xcDFODU867y7erbJCnLRe6RkUr7SBrman9++CV6MyWcE b9+P7SJGDYrebrbldXt3Bh9An7mTi/DxCC8QiqpOXlm+6rnClwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEjXpt4QLw4p/etbutHXy9W8U7ZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvNTE5ZWQxY2YtZGE3Yy0z ZjgwLWFiZDEtZDhlNGFkOWQ4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB7klL+/R3z5bghSSunbK13dVMZY1v71O3ND0ZCep8iRo9szZ7sB gnHRHTMU1+wfXEQId6BqI8jEhzwz/hTYwxPhC+17GVaAL0RJOh0p/D429nRVX4gy lfGE+mpymnN+FRaCkyb/g5XttTwgexQeM1Qgxe1SM6yIgCL1ynAEtiQ+znyT/cf7 LbG3bYcQn9HCZhzD+7/SgPZHNBeZJ6kkfgXP45eP20qEQajMnbdDvPLUHWcKFOL9 S6hY/1GRbp7BdlrAEbF1BJgJJJ8m4LLtmcfCZP/cL0vEVUQzqZQVIRW45pa+sGQQ vc51mC5pDeBJVjHm0dhB+37ewyIhcNmiZWE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:33 2026 by rpki-client