$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/86402a89-3956-3acb-9995-719ce0679b3a.roa File: 86402a89-3956-3acb-9995-719ce0679b3a.roa (raw, json) Hash identifier: pVgpJY+7g0G9TdzmMr/qo1pUrFgkkjDx5ctf73ZTb1A= Subject key identifier: B5:99:72:B1:85:50:D1:E9:D6:74:8B:7D:3E:80:03:21:44:08:27:F7 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFC95F4BBBF46EAB573000 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/86402a89-3956-3acb-9995-719ce0679b3a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 2605:a401:8136::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:c9:5f:4b:bb:f4:6e:ab:57:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=4ca1c249-028f-4332-918f-0114a0c69f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:f0:21:d9:12:6c:17:c3:6f:23:3a:ba:eb: bd:f2:2d:f1:20:ff:9a:0a:d6:16:01:26:96:57:53: ce:cf:40:1c:e1:23:28:c3:29:a8:9e:4f:87:9b:50: f8:5b:b5:d2:02:9d:73:46:0b:b8:7d:44:60:cb:d8: d9:7f:4f:c5:f7:39:eb:f3:79:0f:b7:a3:57:39:7e: d6:df:97:b1:54:ab:a2:c7:b1:95:68:56:2c:16:d0: 9d:37:89:cc:ce:c1:6c:65:81:cf:31:fc:e9:84:6a: e3:4b:ec:6b:99:f0:85:8f:fd:f4:ef:39:85:c1:2f: 41:54:a8:24:13:14:aa:a7:34:4c:53:c9:7f:d8:d9: 97:8b:82:03:6a:75:22:4d:c6:95:ea:df:61:4d:6c: 61:41:92:38:18:1d:95:60:32:fd:74:72:46:9d:58: 38:1f:72:53:59:1d:8b:b2:a2:f1:71:56:9b:7a:15: 31:da:ca:ff:fd:cd:6b:13:c2:a0:be:51:24:22:1b: 64:2b:35:dd:34:82:ba:a5:5a:2a:99:8d:75:a0:00: 03:db:b8:cd:13:54:1d:c3:90:13:f3:44:c3:ae:1f: 27:d0:3e:3a:8a:97:87:a1:0c:1c:37:2b:f3:16:e6: 7c:8b:b2:1e:38:02:66:c3:1a:93:02:ba:86:88:be: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:72:B1:85:50:D1:E9:D6:74:8B:7D:3E:80:03:21:44:08:27:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/86402a89-3956-3acb-9995-719ce0679b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8136::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:69:cb:eb:b3:58:c1:1b:3f:0c:c4:aa:f8:b6:03:a5:41:24: 9b:b7:02:93:5a:de:3b:20:1d:d2:66:77:65:29:73:b4:6d:23: 34:6f:2d:51:fc:06:af:35:27:2e:e5:f9:d0:e3:95:3f:a1:5a: fa:6f:32:9a:7e:37:c3:52:98:5a:29:32:16:3d:c6:b6:19:aa: 6d:25:7d:59:a6:33:dd:e8:ea:66:98:fa:a6:9a:95:90:05:51: e2:dd:92:d4:ef:ca:b8:39:9c:74:3d:6c:b5:c1:41:13:c5:74: 9b:63:77:69:e5:0a:68:5a:82:76:09:1d:18:d4:d5:cd:cc:b0: 6e:65:40:83:56:10:00:79:be:ac:0e:c5:5e:60:f4:43:6b:0e: 8b:5a:c9:e0:05:65:9a:9f:a2:cc:ff:6d:78:21:e2:de:51:4f: a0:0b:0a:62:f5:6b:3a:6c:f8:77:f4:0c:45:f8:be:87:bd:2b: b6:85:d0:7d:5d:67:bf:2a:00:ab:48:f9:d5:37:ec:61:83:20: fd:e9:7a:85:b8:a4:02:24:2b:5d:cc:32:9e:48:a5:33:08:1d: f3:9b:ea:e9:5d:a6:a4:d9:5e:8f:20:c7:55:a1:c2:80:05:a0: 39:7b:8f:84:21:c6:a2:79:db:2b:6b:11:7d:f9:01:17:03:6a: c2:1b:eb:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/8lfS7v0bqtXMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NGNhMWMyNDktMDI4Zi00MzMyLTkxOGYtMDExNGEwYzY5ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipHwIdkSbBfDbyM6uuu98i3xIP+aCtYWASaW V1POz0Ac4SMowymonk+Hm1D4W7XSAp1zRgu4fURgy9jZf0/F9znr83kPt6NXOX7W 35exVKuix7GVaFYsFtCdN4nMzsFsZYHPMfzphGrjS+xrmfCFj/307zmFwS9BVKgk ExSqpzRMU8l/2NmXi4IDanUiTcaV6t9hTWxhQZI4GB2VYDL9dHJGnVg4H3JTWR2L sqLxcVabehUx2sr//c1rE8KgvlEkIhtkKzXdNIK6pVoqmY11oAAD27jNE1Qdw5AT 80TDrh8n0D46ipeHoQwcNyvzFuZ8i7IeOAJmwxqTArqGiL6OZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLWZcrGFUNHp1nSLfT6AAyFECCf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODY0MDJhODktMzk1Ni0z YWNiLTk5OTUtNzE5Y2UwNjc5YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYE2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACxpy+uzWMEbPwzEqvi2A6VBJJu3ApNa3jsgHdJmd2Upc7RtIzRv LVH8Bq81Jy7l+dDjlT+hWvpvMpp+N8NSmFopMhY9xrYZqm0lfVmmM93o6maY+qaa lZAFUeLdktTvyrg5nHQ9bLXBQRPFdJtjd2nlCmhagnYJHRjU1c3MsG5lQINWEAB5 vqwOxV5g9ENrDotayeAFZZqfosz/bXgh4t5RT6ALCmL1azps+Hf0DEX4voe9K7aF 0H1dZ78qAKtI+dU37GGDIP3peoW4pAIkK13MMp5IpTMIHfOb6uldpqTZXo8gx1Wh woAFoDl7j4QhxqJ52ytrEX35ARcDasIb6wQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:41 2026 by rpki-client