$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa File: 3c43b276-fc41-37ea-b4d5-c88fba282149.roa (raw, json) Hash identifier: 4OAmDU1k8Os7dQl/V6b98+3GpUH+SAcLB4f6hj2jhX4= Subject key identifier: 14:40:72:29:BA:70:FA:33:34:60:EB:17:D6:A1:05:FC:0E:E7:4B:96 Certificate issuer: /CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Certificate serial: 010D0C9F4328584D3F64F39B17E47CF38FB63580 Authority key identifier: CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 40706 IP address blocks: 2620:57:a000::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f3:9b:17:e4:7c:f3:8f:b6:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=dc9029ea-ef2f-4c99-a12f-8e6b1a5ad102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:00:c2:b5:2f:e3:66:39:e7:40:34:12:1c: ef:32:68:5e:e5:c4:b6:ac:0b:a5:ab:1c:4d:f3:6c: d5:32:20:80:28:d9:7d:e2:79:10:d2:c6:9c:0b:31: 0c:2e:66:cc:01:b4:78:ca:b4:0f:5f:32:ff:8f:b7: 77:a4:5b:ed:20:11:83:4e:0f:ed:b1:ad:14:cd:ec: 40:58:1a:bc:2e:b2:b7:a0:90:b3:e8:89:9e:9a:89: 77:c5:b2:7e:82:59:61:92:f6:e8:f1:22:0f:39:88: 57:13:ef:4a:9a:1e:98:c3:1c:c6:3c:13:d7:b5:ae: d8:69:68:6f:35:13:8f:41:5b:b8:7c:84:4e:5f:d5: af:17:99:02:3d:25:db:ad:6e:2b:63:7f:14:91:46: 91:30:61:1f:50:46:88:4e:11:e1:7e:6d:29:36:7c: 23:d1:5c:fd:55:4c:b0:9c:51:0f:60:96:37:c2:48: 61:ca:ec:62:cb:dd:2b:b1:ff:d3:49:23:86:e5:11: 40:3b:e1:77:56:00:42:cd:d9:e4:ea:eb:31:d5:13: 51:af:25:e2:79:cc:9f:74:de:f0:49:3d:9f:bf:79: 29:70:a7:9c:5c:82:6b:2a:ea:c5:35:32:ce:f3:00: e2:33:13:a7:9f:52:8a:c6:b3:35:16:73:81:e0:e0: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:40:72:29:BA:70:FA:33:34:60:EB:17:D6:A1:05:FC:0E:E7:4B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/3c43b276-fc41-37ea-b4d5-c88fba282149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl X509v3 Authority Key Identifier: keyid:CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer sbgp-ipAddrBlock: critical IPv6: 2620:57:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:59:07:7d:26:9f:1b:5b:df:4d:1c:ac:14:7a:9a:4d:e4:94: ac:95:61:63:36:b4:8b:42:2d:55:3d:98:79:3f:f9:17:af:6c: fd:ca:f5:41:15:d9:92:74:52:3b:1a:9b:0e:c3:e2:ea:45:f9: 51:20:44:44:07:4b:84:31:2e:f4:e2:bc:db:82:8f:70:47:8f: e7:49:28:c8:b1:be:88:f1:72:1a:1a:b7:eb:5f:c7:a2:ad:95: 5b:0a:c2:24:41:62:7a:a0:a0:76:8c:d1:83:28:50:85:46:e8: 07:07:a5:02:61:0f:ba:c2:1a:e0:60:f7:f2:4a:d8:ab:3c:96: 4d:89:8a:0c:2d:5b:da:55:1b:97:95:81:93:36:17:cf:24:c4: 60:99:bd:61:0b:fe:51:ed:54:22:40:54:1e:6e:36:bb:b7:46: e6:63:e8:a3:4d:fa:dd:b3:c0:65:87:30:ee:79:09:c6:ac:83: 40:3f:ad:89:1b:fc:ea:37:5b:ff:0e:82:7c:09:f9:4c:3b:8d: 8b:a6:a4:23:53:30:b6:b4:07:ff:da:73:a9:0a:99:a9:78:bc: e8:27:d3:47:26:7b:80:f4:e9:29:bf:0a:87:4b:10:ed:13:a4: 79:a7:a1:d2:9a:a7:ea:ab:58:83:84:7f:72:f1:cb:b0:10:44: ae:af:ef:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZPObF+R884+2NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmYzFkNTItYzAwOC00ZmRjLWFjZDEtNzNhYjZjNzFi MTUzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZGM5MDI5ZWEtZWYyZi00Yzk5LWExMmYtOGU2YjFhNWFkMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBYAwrUv42Y550A0EhzvMmhe5cS2rAulqxxN 82zVMiCAKNl94nkQ0sacCzEMLmbMAbR4yrQPXzL/j7d3pFvtIBGDTg/tsa0UzexA WBq8LrK3oJCz6Imemol3xbJ+gllhkvbo8SIPOYhXE+9Kmh6YwxzGPBPXta7YaWhv NROPQVu4fIROX9WvF5kCPSXbrW4rY38UkUaRMGEfUEaIThHhfm0pNnwj0Vz9VUyw nFEPYJY3wkhhyuxiy90rsf/TSSOG5RFAO+F3VgBCzdnk6usx1RNRryXiecyfdN7w ST2fv3kpcKecXIJrKurFNTLO8wDiMxOnn1KKxrM1FnOB4ODuIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRAcim6cPozNGDrF9ahBfwO50uWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZj MWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2FiNmM3MWIxNTMvM2M0M2IyNzYtZmM0MS0z N2VhLWI0ZDUtYzg4ZmJhMjgyMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzlmYzFkNTItYzAwOC00ZmRjLWFj ZDEtNzNhYjZjNzFiMTUzL2M5ZmMxZDUyLWMwMDgtNGZkYy1hY2QxLTczYWI2Yzcx YjE1My5jcmwwHwYDVR0jBBgwFoAUzxswEXB1OE9yPumwzQkqt1oIxu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZjMWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2Fi NmM3MWIxNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAV6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZZB30mnxtb300crBR6mk3klKyVYWM2tItCLVU9mHk/+RevbP3K 9UEV2ZJ0Ujsamw7D4upF+VEgREQHS4QxLvTivNuCj3BHj+dJKMixvojxchoat+tf x6KtlVsKwiRBYnqgoHaM0YMoUIVG6AcHpQJhD7rCGuBg9/JK2Ks8lk2JigwtW9pV G5eVgZM2F88kxGCZvWEL/lHtVCJAVB5uNru3RuZj6KNN+t2zwGWHMO55Ccasg0A/ rYkb/Oo3W/8OgnwJ+Uw7jYumpCNTMLa0B//ac6kKmal4vOgn00cme4D06Sm/CodL EO0TpHmnodKap+qrWIOEf3Lxy7AQRK6v7/A= -----END CERTIFICATE-----Generated at Thu Mar 26 20:15:17 2026 by rpki-client