$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/85da9da1-bccc-3cd7-98b0-14450ea7e226.roa File: 85da9da1-bccc-3cd7-98b0-14450ea7e226.roa (raw, json) Hash identifier: IoJzCqXL2jXZmm83jstFu+cCusf/XNFDi4ZmV53q5BM= Subject key identifier: FF:3E:A1:2A:95:FF:FE:8A:E7:FE:1F:EF:B0:2D:85:E3:8C:90:C6:ED Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFF86F83A9E29BEB8ACB80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/85da9da1-bccc-3cd7-98b0-14450ea7e226.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 2605:a401:811e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:f8:6f:83:a9:e2:9b:eb:8a:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=577e1e16-c1bb-4138-8d63-78ee6fcf1ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:ab:df:cc:f7:26:93:fd:9a:33:e8:04:02: 3e:49:85:ba:55:a0:84:52:45:95:c0:f6:58:a7:52: f0:42:c0:0e:d5:33:5e:49:8d:87:a9:1d:d2:07:46: 01:a0:e6:32:bf:2a:21:da:ed:1d:d3:48:24:06:6f: d7:69:7a:28:a0:d8:4b:52:e2:24:18:d1:63:34:47: 65:73:e6:2f:89:80:e7:d5:6b:37:25:86:71:86:94: d3:36:6e:1f:94:96:f1:33:d3:8c:f1:5b:ce:9b:c4: c3:c8:b5:56:e3:71:30:97:65:53:cd:6d:53:fe:74: 8b:6a:53:72:7c:fc:58:89:32:a1:3f:7b:7f:cc:17: 55:3c:54:5d:64:59:3d:6d:9c:12:65:ec:7e:7f:6e: fe:00:25:b8:37:9c:0f:ea:bd:c9:c2:8a:c6:3f:ca: d8:a3:d5:a9:05:cc:af:37:3e:b6:23:b7:ee:2d:fb: 67:a0:85:7c:de:fa:bc:2e:45:a1:ac:f4:6d:0e:ec: 16:19:67:45:22:a9:c6:48:41:37:bc:ff:67:a7:29: 26:43:e8:51:44:67:ab:64:34:e2:51:99:71:de:6b: 49:9d:a3:1d:51:6b:ff:41:4f:18:44:27:df:12:4b: 71:08:85:6d:8e:53:66:c4:63:24:05:b9:75:12:4f: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3E:A1:2A:95:FF:FE:8A:E7:FE:1F:EF:B0:2D:85:E3:8C:90:C6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/85da9da1-bccc-3cd7-98b0-14450ea7e226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:811e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:46:3b:09:a6:5b:67:fc:9b:e9:8b:54:98:bb:c5:5c:14:9c: 6b:59:ec:b4:e6:a4:0f:a2:86:5e:6b:68:48:cd:e1:ea:1a:fb: af:7c:75:ff:bb:8b:5a:5e:fc:a5:be:69:5e:bc:37:ee:e1:ea: 31:63:c1:44:f8:1d:18:14:ad:d5:ed:cf:ab:f5:dd:a9:47:81: 6a:2d:ab:7c:26:59:8e:b3:68:8d:4d:c5:2e:45:8b:42:cf:94: d0:2d:97:37:fb:ba:24:85:86:bf:0d:95:1d:0a:e9:db:27:1b: b9:ac:27:e3:a3:63:6a:93:64:26:9a:fa:79:50:fe:71:d9:b2: ea:b6:e0:36:96:3d:8e:44:c5:cb:c3:83:1f:96:06:a9:80:fb: 24:9a:34:ba:64:4f:63:68:da:ed:2d:d0:16:99:2a:e6:be:3d: fd:91:ae:f4:56:64:3a:51:4a:4a:d9:e8:b3:8f:37:4c:50:ed: dd:b6:5a:e5:ed:5d:5f:c0:de:cd:bd:58:b6:e5:7f:66:62:88: aa:6e:d0:e6:9f:f3:fb:41:7e:4e:2a:24:17:6a:b5:58:01:c0: 03:0c:a8:37:a9:5c:c5:7b:68:9c:d0:c6:e8:09:6b:dc:b8:eb: 69:a1:38:17:0d:87:ed:41:ac:2e:b6:a2:a4:cf:d6:62:7a:0e: c9:ab:b7:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09//hvg6nim+uKy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NTc3ZTFlMTYtYzFiYi00MTM4LThkNjMtNzhlZTZmY2YxZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxyr38z3JpP9mjPoBAI+SYW6VaCEUkWVwPZY p1LwQsAO1TNeSY2HqR3SB0YBoOYyvyoh2u0d00gkBm/XaXoooNhLUuIkGNFjNEdl c+YviYDn1Ws3JYZxhpTTNm4flJbxM9OM8VvOm8TDyLVW43Ewl2VTzW1T/nSLalNy fPxYiTKhP3t/zBdVPFRdZFk9bZwSZex+f27+ACW4N5wP6r3JworGP8rYo9WpBcyv Nz62I7fuLftnoIV83vq8LkWhrPRtDuwWGWdFIqnGSEE3vP9npykmQ+hRRGerZDTi UZlx3mtJnaMdUWv/QU8YRCffEktxCIVtjlNmxGMkBbl1Ek/iswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8+oSqV//6K5/4f77AtheOMkMbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODVkYTlkYTEtYmNjYy0z Y2Q3LTk4YjAtMTQ0NTBlYTdlMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERGOwmmW2f8m+mLVJi7xVwUnGtZ7LTmpA+ihl5raEjN4eoa+698 df+7i1pe/KW+aV68N+7h6jFjwUT4HRgUrdXtz6v13alHgWotq3wmWY6zaI1NxS5F i0LPlNAtlzf7uiSFhr8NlR0K6dsnG7msJ+OjY2qTZCaa+nlQ/nHZsuq24DaWPY5E xcvDgx+WBqmA+ySaNLpkT2No2u0t0BaZKua+Pf2RrvRWZDpRSkrZ6LOPN0xQ7d22 WuXtXV/A3s29WLblf2ZiiKpu0Oaf8/tBfk4qJBdqtVgBwAMMqDepXMV7aJzQxugJ a9y462mhOBcNh+1BrC62oqTP1mJ6Dsmrt+0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:54 2026 by rpki-client