$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa File: f20db414-9887-3258-bbe3-5440b1f22bf0.roa (raw, json) Hash identifier: 57fYeh7s5tXdgyVYnKWojUvznoWfJyj5C5gt2zxo37c= Subject key identifier: 96:E6:4D:94:A2:12:96:92:B7:58:69:DF:02:C3:7F:F0:16:7D:82:C3 Certificate issuer: /CN=a1046e21-4a33-4415-a524-c10db602b0ec Certificate serial: 010D0C9F4328584D20AF49F2EAE39AA0C2F30880 Authority key identifier: E8:29:BE:FC:43:BB:9D:31:56:BD:62:E1:85:15:11:AF:0E:F4:A0:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 396204 IP address blocks: 2620:22:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:49:f2:ea:e3:9a:a0:c2:f3:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1046e21-4a33-4415-a524-c10db602b0ec Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=f106c275-6eb5-407b-b7a0-b0a4d53e377b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:bc:cc:11:7f:22:19:a1:c3:10:3b:e0:12: 28:1c:35:5d:3b:08:c8:99:71:aa:b6:5b:8d:76:f2: c6:d1:e9:75:d5:ed:ff:7d:c1:16:06:e9:07:71:f8: bf:28:3d:71:66:5c:4a:73:98:c4:16:64:85:fd:51: 53:f0:a1:37:5e:d7:b0:1b:d4:8a:79:74:8b:bb:9f: 2b:17:35:9a:8a:4a:3a:bc:1e:aa:be:ca:fd:c8:2a: 9f:6b:3a:12:b8:2f:a3:28:f8:c9:f3:48:16:5e:4f: fa:98:68:cb:b2:eb:f6:27:ed:35:71:2c:e7:fe:5a: 6b:e9:ba:2f:66:4c:06:07:61:86:7c:1c:b2:d2:5a: 40:73:10:19:20:82:94:ae:54:37:9c:27:2e:da:c6: 0e:53:fa:2e:19:70:ef:98:a8:1d:51:0e:bc:f4:c8: cd:64:ff:16:21:8c:fe:59:fb:93:9b:ef:7d:54:e4: 14:83:f6:e2:ef:d4:a1:fd:66:fb:1f:10:cf:7d:f1: e2:d0:77:59:3a:30:ff:38:de:49:7b:19:08:fe:fb: 79:06:6b:0b:82:48:b2:b5:dd:3f:a6:d3:e6:79:98: 04:02:e2:c6:70:12:82:1a:67:bd:f2:69:e3:18:31: 87:8f:67:5a:fd:4d:b2:d6:57:eb:d5:1f:51:9e:2e: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E6:4D:94:A2:12:96:92:B7:58:69:DF:02:C3:7F:F0:16:7D:82:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.crl X509v3 Authority Key Identifier: keyid:E8:29:BE:FC:43:BB:9D:31:56:BD:62:E1:85:15:11:AF:0E:F4:A0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer sbgp-ipAddrBlock: critical IPv6: 2620:22:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:62:27:c8:ad:77:43:32:f5:3a:a3:00:38:a9:15:6f:a9:bb: 73:b7:5b:cb:1a:c6:14:fb:16:07:5b:03:b3:7d:90:58:e7:60: 76:a1:29:ed:88:4a:dc:6b:58:39:7c:90:fb:51:85:54:82:79: eb:80:b4:9c:09:fc:97:a2:c6:22:a1:b0:48:09:26:15:19:59: 34:d4:c7:9f:a1:db:19:0c:70:05:d2:ff:8a:87:69:ee:0e:ea: 98:76:df:80:09:82:02:fd:5d:1b:e3:85:90:1d:eb:5e:74:2f: 3c:5a:c9:de:21:10:09:b1:94:08:f4:1e:56:a4:56:cd:0f:c0: 80:36:20:ee:97:76:27:8a:49:1e:39:3b:57:e5:e9:97:4e:bb: 57:d3:e4:7a:9d:7a:28:06:7f:85:3e:67:71:2c:6a:b7:c9:e3: 3f:6f:1e:79:40:20:7a:02:0a:1f:95:97:50:8b:0f:94:3a:f1: fa:ac:87:9c:6d:0d:a4:e8:fd:ce:30:ab:f9:96:8d:33:ba:18: ec:25:17:b7:42:7d:a3:e7:54:4a:3b:25:b3:da:e4:82:5a:0a: 8c:57:28:3e:6b:ba:b8:77:ce:dc:f4:d3:58:6c:12:48:29:d5: 22:7a:3e:97:4c:06:94:51:17:40:7b:9b:8e:a9:a7:76:04:80: 9c:e4:9b:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0gr0ny6uOaoMLzCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEwNDZlMjEtNGEzMy00NDE1LWE1MjQtYzEwZGI2MDJi MGVjMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjEwNmMyNzUtNmViNS00MDdiLWI3YTAtYjBhNGQ1M2UzNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ68zBF/IhmhwxA74BIoHDVdOwjImXGqtluN dvLG0el11e3/fcEWBukHcfi/KD1xZlxKc5jEFmSF/VFT8KE3XtewG9SKeXSLu58r FzWaiko6vB6qvsr9yCqfazoSuC+jKPjJ80gWXk/6mGjLsuv2J+01cSzn/lpr6bov ZkwGB2GGfByy0lpAcxAZIIKUrlQ3nCcu2sYOU/ouGXDvmKgdUQ689MjNZP8WIYz+ WfuTm+99VOQUg/bi79Sh/Wb7HxDPffHi0HdZOjD/ON5JexkI/vt5BmsLgkiytd0/ ptPmeZgEAuLGcBKCGme98mnjGDGHj2da/U2y1lfr1R9Rni6KqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJbmTZSiEpaSt1hp3wLDf/AWfYLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMTA0 NmUyMS00YTMzLTQ0MTUtYTUyNC1jMTBkYjYwMmIwZWMvZjIwZGI0MTQtOTg4Ny0z MjU4LWJiZTMtNTQ0MGIxZjIyYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTEwNDZlMjEtNGEzMy00NDE1LWE1 MjQtYzEwZGI2MDJiMGVjL2ExMDQ2ZTIxLTRhMzMtNDQxNS1hNTI0LWMxMGRiNjAy YjBlYy5jcmwwHwYDVR0jBBgwFoAU6Cm+/EO7nTFWvWLhhRURrw70oNgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMTA0NmUyMS00YTMzLTQ0MTUtYTUyNC1jMTBk YjYwMmIwZWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFiJ8itd0My9TqjADipFW+pu3O3W8saxhT7FgdbA7N9kFjnYHah Ke2IStxrWDl8kPtRhVSCeeuAtJwJ/JeixiKhsEgJJhUZWTTUx5+h2xkMcAXS/4qH ae4O6ph234AJggL9XRvjhZAd6150Lzxayd4hEAmxlAj0HlakVs0PwIA2IO6XdieK SR45O1fl6ZdOu1fT5HqdeigGf4U+Z3EsarfJ4z9vHnlAIHoCCh+Vl1CLD5Q68fqs h5xtDaTo/c4wq/mWjTO6GOwlF7dCfaPnVEo7JbPa5IJaCoxXKD5rurh3ztz001hs Ekgp1SJ6PpdMBpRRF0B7m46pp3YEgJzkm6A= -----END CERTIFICATE-----Generated at Thu Mar 26 21:36:34 2026 by rpki-client