$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa File: e635d76f-d2d0-3af9-a38c-c806ec850321.roa (raw, json) Hash identifier: ML73k+SP43XyVSRqSIAXn2A4BaxB5HnKFzoVU/y/VE4= Subject key identifier: 34:DB:DA:48:FC:9E:A1:D8:50:D1:9B:6E:43:45:7B:16:DB:9B:26:7A Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F4328584D0D42707E4FF193A14B98F280 Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 397335 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:70:7e:4f:f1:93:a1:4b:98:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=f10d10cf-65fa-4e2f-857c-fca4fa5ad374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:75:82:2c:07:75:5a:35:3f:11:6f:44:03: bb:7c:34:8b:65:1f:00:ad:fe:a3:3d:86:b1:2e:52: ba:62:db:91:c1:3b:07:3d:79:06:7b:0e:f5:13:01: 72:2d:b4:d5:ad:99:05:eb:9f:33:3f:18:af:5f:47: 42:26:64:d0:9b:8b:15:0c:18:7c:fa:b8:cf:20:97: 07:71:63:27:df:d9:a0:0b:5f:26:b8:02:33:34:34: 3d:cc:92:41:e2:82:d3:33:dc:da:45:4e:3f:bd:52: b5:9c:5f:4d:92:12:ef:11:bf:36:04:f6:61:cd:0a: 70:19:8d:4e:89:f1:86:0e:0e:a4:e0:68:70:cb:db: 83:9a:fa:4a:74:ee:69:99:58:53:cf:a4:06:85:5f: ec:95:60:a7:4f:7c:4c:8a:e9:d0:84:0f:2b:f1:4a: 8e:98:62:ee:b5:15:0e:58:de:60:d6:70:c7:3a:c0: ee:65:c9:d8:c9:c8:3b:f5:2a:61:79:34:15:30:71: 57:1d:e2:8e:bf:d4:a8:ad:1f:c5:56:21:5c:fa:63: 29:b0:93:d4:e8:b1:ce:e1:36:ce:f8:97:1e:50:5c: 46:ea:25:5c:24:ec:90:5b:32:e2:f9:62:3c:13:50: 50:a7:1f:38:32:3b:05:99:92:4c:e1:44:69:46:12: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DB:DA:48:FC:9E:A1:D8:50:D1:9B:6E:43:45:7B:16:DB:9B:26:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f9:e0:f4:99:ea:01:aa:89:28:74:52:f9:cf:2a:85:dd:b1: 28:87:31:80:27:fd:99:04:9e:0c:5d:07:5f:e3:fb:41:99:d0: 8d:bc:f8:72:e1:34:a0:cf:42:7f:d7:7a:fe:97:b7:71:bc:95: 67:5f:20:d7:79:9b:ea:85:82:6f:1d:13:c6:92:1e:58:2d:93: 90:4b:a9:c8:e8:57:0f:90:b7:38:99:e1:70:44:47:f8:31:b4: 84:ed:b0:7a:4e:04:4f:3f:21:a7:67:8b:8a:c7:d0:fa:b8:b7: 27:d8:44:91:47:b2:05:f1:48:7c:72:03:2c:cf:7a:72:c4:8a: e6:44:9a:79:7a:2c:0b:ab:2a:09:dd:aa:29:62:59:fb:ff:35: b4:05:42:23:e9:a2:b6:0a:4d:2a:ec:1c:c3:32:cc:6d:d1:9a: fa:ff:ca:1a:5b:2c:d0:fe:46:aa:24:76:94:31:e7:c3:81:6e: 3d:37:ac:db:45:69:5c:0d:05:b8:51:e2:11:d1:8a:dd:83:b9: d0:db:4a:91:33:14:dd:c6:07:ad:61:a2:32:2f:0d:14:85:b8: 60:31:47:f6:6f:7c:24:89:ba:cd:26:ef:f3:89:8e:c7:f8:6d: 72:0d:9d:d1:79:86:0e:2b:86:64:16:29:04:bf:75:f8:52:63: 70:c7:8b:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQnB+T/GToUuY8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZjEwZDEwY2YtNjVmYS00ZTJmLTg1N2MtZmNhNGZhNWFkMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnZ1giwHdVo1PxFvRAO7fDSLZR8Arf6jPYax LlK6YtuRwTsHPXkGew71EwFyLbTVrZkF658zPxivX0dCJmTQm4sVDBh8+rjPIJcH cWMn39mgC18muAIzNDQ9zJJB4oLTM9zaRU4/vVK1nF9NkhLvEb82BPZhzQpwGY1O ifGGDg6k4Ghwy9uDmvpKdO5pmVhTz6QGhV/slWCnT3xMiunQhA8r8UqOmGLutRUO WN5g1nDHOsDuZcnYycg79SpheTQVMHFXHeKOv9SorR/FViFc+mMpsJPU6LHO4TbO +JceUFxG6iVcJOyQWzLi+WI8E1BQpx84MjsFmZJM4URpRhJdBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDTb2kj8nqHYUNGbbkNFexbbmyZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvZTYzNWQ3NmYtZDJkMC0z YWY5LWEzOGMtYzgwNmVjODUwMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIz54PSZ6gGqiSh0UvnPKoXdsSiHMYAn/ZkEngxdB1/j+0GZ0I28 +HLhNKDPQn/Xev6Xt3G8lWdfINd5m+qFgm8dE8aSHlgtk5BLqcjoVw+QtziZ4XBE R/gxtITtsHpOBE8/Iadni4rH0Pq4tyfYRJFHsgXxSHxyAyzPenLEiuZEmnl6LAur KgndqiliWfv/NbQFQiPporYKTSrsHMMyzG3Rmvr/yhpbLND+RqokdpQx58OBbj03 rNtFaVwNBbhR4hHRit2DudDbSpEzFN3GB61hojIvDRSFuGAxR/ZvfCSJus0m7/OJ jsf4bXINndF5hg4rhmQWKQS/dfhSY3DHi2w= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:29 2026 by rpki-client