$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa File: 5cf65140-1fa6-3025-943f-30f9ab0055c6.roa (raw, json) Hash identifier: N6CxrnAecV2K++qz2xa4XL4JKfL5PS5XtTw9g1OoIGE= Subject key identifier: 24:B7:85:21:A8:16:B7:7A:3C:2B:DD:12:D6:F2:30:BA:1C:DC:E7:01 Certificate issuer: /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a Certificate serial: 010D0C9F4328584D3F650253404A5066FAC31700 Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 134963 IP address blocks: 2600:3100::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:65:02:53:40:4a:50:66:fa:c3:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=1b73e43a-f998-4631-842a-82fb32e07e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:64:d3:ca:e4:53:92:b3:0d:55:e3:05:33: ee:fb:d8:be:04:c3:37:ff:41:23:3f:97:21:ee:6c: e2:aa:af:d6:7b:04:a9:d7:38:77:90:ba:5b:25:19: b7:51:fe:8d:6e:bc:c8:7e:1b:32:56:9a:79:d6:c7: 34:ec:3a:59:7d:02:5d:c6:73:8a:23:91:80:7e:c9: 0f:6a:a7:14:3f:9f:75:c4:f7:5e:96:04:84:6d:b4: 22:45:e6:3a:df:53:f3:44:fe:e6:52:0f:61:2d:1c: 58:be:a0:01:37:22:52:30:84:33:38:16:fc:67:16: 08:72:22:4c:46:2d:95:72:5e:35:22:c2:e2:d5:f2: 6e:2a:2c:ce:90:9c:66:55:ca:82:84:6f:f2:98:ef: bd:02:2a:a8:7e:52:a2:17:02:b8:4e:05:fa:32:16: 5b:85:1a:c3:f4:76:80:0c:92:2e:35:70:f6:9f:86: ff:90:3c:59:58:24:c9:7b:29:4a:d8:e5:b0:48:09: 61:c8:14:8e:8e:9a:cf:b6:b4:08:3f:2f:8e:0f:cf: fb:ed:4f:8b:d8:fd:dc:ae:b4:68:38:43:cb:03:ed: 5e:29:f2:cf:71:96:76:1e:b8:7a:c7:d6:69:53:49: 65:83:57:e3:e5:dc:77:28:52:0c:48:93:97:81:d3: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B7:85:21:A8:16:B7:7A:3C:2B:DD:12:D6:F2:30:BA:1C:DC:E7:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5cf65140-1fa6-3025-943f-30f9ab0055c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl X509v3 Authority Key Identifier: keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer sbgp-ipAddrBlock: critical IPv6: 2600:3100::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ef:e1:43:3d:c4:63:2d:86:88:76:3d:9a:05:78:5a:d2:83: ab:53:21:e6:91:63:d4:bd:61:f4:c3:ec:fd:89:e8:fc:66:46: c3:ea:ff:d3:b1:ea:c1:ba:bc:09:66:a2:bd:85:5e:37:08:07: 6a:53:34:c6:a4:a4:e1:d8:40:f0:8f:51:e8:79:87:2b:2d:51: 83:ce:7e:0a:78:d7:85:d7:e7:42:c2:86:bd:1a:d7:ab:d0:bd: 51:5a:2f:93:27:17:b5:b8:07:ca:d5:23:e6:b0:62:10:a8:8b: 15:47:50:b0:76:b9:33:f3:77:86:3f:88:98:56:de:de:93:5f: 0b:4d:0e:32:5b:31:2a:42:f1:e5:24:02:3a:2a:1a:00:05:f7: bd:96:97:97:9d:e8:74:8a:2c:25:19:f9:50:82:51:07:ac:2c: 97:db:df:1c:a0:b6:7b:55:4f:00:e9:95:ac:0e:39:8d:8b:b5: 5b:8c:ca:f7:70:82:b5:4d:4f:76:6d:a2:b0:06:1f:df:4f:53: ee:c0:d0:55:55:33:35:15:43:e8:90:d3:99:f8:06:ed:a9:d8: d7:42:06:86:be:97:f4:98:f3:42:43:58:47:d9:1a:ea:ba:00: e6:fe:b0:ae:56:90:e5:b2:2c:15:41:97:35:15:85:7d:bb:cb: 24:f3:26:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZQJTQEpQZvrDFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQzMTYxZTQtZGFjMS00MDdiLThmMTYtNTVlNmVmMTAw ZDBhMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MWI3M2U0M2EtZjk5OC00NjMxLTg0MmEtODJmYjMyZTA3ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFdk08rkU5KzDVXjBTPu+9i+BMM3/0EjP5ch 7mziqq/WewSp1zh3kLpbJRm3Uf6NbrzIfhsyVpp51sc07DpZfQJdxnOKI5GAfskP aqcUP591xPdelgSEbbQiReY631PzRP7mUg9hLRxYvqABNyJSMIQzOBb8ZxYIciJM Ri2Vcl41IsLi1fJuKizOkJxmVcqChG/ymO+9AiqoflKiFwK4TgX6MhZbhRrD9HaA DJIuNXD2n4b/kDxZWCTJeylK2OWwSAlhyBSOjprPtrQIPy+OD8/77U+L2P3crrRo OEPLA+1eKfLPcZZ2Hrh6x9ZpU0llg1fj5dx3KFIMSJOXgdMJRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCS3hSGoFrd6PCvdEtbyMLoc3OcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDMx NjFlNC1kYWMxLTQwN2ItOGYxNi01NWU2ZWYxMDBkMGEvNWNmNjUxNDAtMWZhNi0z MDI1LTk0M2YtMzBmOWFiMDA1NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQzMTYxZTQtZGFjMS00MDdiLThm MTYtNTVlNmVmMTAwZDBhL2Q0MzE2MWU0LWRhYzEtNDA3Yi04ZjE2LTU1ZTZlZjEw MGQwYS5jcmwwHwYDVR0jBBgwFoAUD636QCJrXbrLDTg1NoyGIMzZXrMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDMxNjFlNC1kYWMxLTQwN2ItOGYxNi01NWU2 ZWYxMDBkMGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAxADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA27+FDPcRjLYaIdj2aBXha0oOrUyHmkWPUvWH0w+z9iej8ZkbD6v/T serBurwJZqK9hV43CAdqUzTGpKTh2EDwj1HoeYcrLVGDzn4KeNeF1+dCwoa9Gter 0L1RWi+TJxe1uAfK1SPmsGIQqIsVR1Cwdrkz83eGP4iYVt7ek18LTQ4yWzEqQvHl JAI6KhoABfe9lpeXneh0iiwlGflQglEHrCyX298coLZ7VU8A6ZWsDjmNi7VbjMr3 cIK1TU92baKwBh/fT1PuwNBVVTM1FUPokNOZ+AbtqdjXQgaGvpf0mPNCQ1hH2Rrq ugDm/rCuVpDlsiwVQZc1FYV9u8sk8yb9 -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:02 2026 by rpki-client