$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa File: cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa (raw, json) Hash identifier: zKxqIjtuZNcpBLUVYXTMXLJLqy8QKvhK95Nly0nnvDs= Subject key identifier: D1:6B:AB:39:0D:C6:F8:32:20:30:F0:42:CC:1A:AF:47:39:6A:7B:55 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFF17A25B03DF92E75F540 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 2603:9000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:f1:7a:25:b0:3d:f9:2e:75:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=f73a5f12-3814-451a-adcd-9cdca0117762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:ae:ff:1d:10:a3:d1:d7:68:4e:a0:bb:fd: dc:3e:55:0e:fc:df:5f:a6:ad:13:f9:48:34:0d:ff: a1:57:72:eb:62:d7:3f:9a:c1:05:dd:6d:4f:56:76: c0:8b:45:85:23:a9:34:74:9d:73:3c:14:c1:1e:40: ca:a7:66:35:4d:56:e8:50:58:32:3d:c8:ca:8f:ad: 7f:d5:b0:dd:d6:90:47:8b:71:d1:cc:cb:bd:83:89: 53:d3:c7:fa:62:49:cc:9f:f7:ff:15:16:b0:e7:85: a9:bd:7a:c1:d7:4f:ee:7b:06:1c:ea:27:bb:b2:46: 55:35:44:b9:1c:7c:29:62:6a:ce:d7:5d:7f:be:d4: dd:b1:94:91:37:da:ab:1f:3b:8e:54:aa:f7:65:6d: ba:6c:d1:1b:7d:06:e7:8f:bb:ce:44:c4:57:87:54: a8:27:dc:ad:26:32:7e:2f:3d:2f:a1:73:29:25:2f: c0:88:dc:29:a6:40:64:9b:c0:05:5d:36:88:cd:24: f7:2d:6e:b5:bd:3e:70:66:88:79:ad:32:78:cb:52: 2f:c4:17:27:ca:e6:66:cf:b5:96:09:f1:90:87:25: 1a:4c:42:2c:0b:92:57:8a:98:c8:0d:10:81:05:14: 67:5d:09:5f:fd:33:84:20:8b:33:a3:cf:99:c0:d6: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6B:AB:39:0D:C6:F8:32:20:30:F0:42:CC:1A:AF:47:39:6A:7B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2603:9000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:02:03:e4:8d:77:c3:b3:70:22:df:ea:67:33:97:40:e2:65: 02:7a:6b:b6:d7:d8:e0:b5:3a:95:e2:6a:6f:e4:4a:43:24:da: 8b:17:d5:f4:a8:3d:13:ce:5b:2f:bf:2d:72:82:bb:93:b7:0e: e5:1a:96:32:a6:74:56:1e:b1:48:e6:36:8f:ae:db:02:57:e3: c5:22:f6:ce:ad:70:29:94:62:7c:a2:03:8b:7f:90:15:b0:97: a7:07:e5:ee:a8:dd:63:18:39:37:76:74:c2:13:2d:7d:02:c2: 5b:5d:c9:97:13:f7:9d:ad:34:51:95:61:34:28:d4:75:e9:8e: f4:0a:3d:88:aa:67:78:de:68:63:73:6a:d5:f0:ef:09:d2:f5: 68:94:cb:f9:94:5f:d2:2a:ae:7f:b9:c6:00:32:a2:36:f2:19: fa:3d:99:95:33:61:c2:b9:6d:49:72:c5:b6:04:b2:46:ad:e2: bb:7b:24:93:03:07:6a:42:4d:b6:09:19:aa:85:a7:34:a5:6c: 16:0d:49:04:ac:5d:17:2e:b4:d0:30:eb:b8:75:c0:48:e4:7a: 1c:25:8b:23:37:10:e3:03:fe:fa:80:dd:6b:e6:6a:5f:d9:f6: ff:10:f1:c4:43:93:1a:e8:40:1a:e4:b6:73:3b:af:1d:2c:8a: 5d:98:30:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09//F6JbA9+S519UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjczYTVmMTItMzgxNC00NTFhLWFkY2QtOWNkY2EwMTE3NzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj6u/x0Qo9HXaE6gu/3cPlUO/N9fpq0T+Ug0 Df+hV3LrYtc/msEF3W1PVnbAi0WFI6k0dJ1zPBTBHkDKp2Y1TVboUFgyPcjKj61/ 1bDd1pBHi3HRzMu9g4lT08f6YknMn/f/FRaw54WpvXrB10/uewYc6ie7skZVNUS5 HHwpYmrO111/vtTdsZSRN9qrHzuOVKr3ZW26bNEbfQbnj7vORMRXh1SoJ9ytJjJ+ Lz0voXMpJS/AiNwppkBkm8AFXTaIzST3LW61vT5wZoh5rTJ4y1IvxBcnyuZmz7WW CfGQhyUaTEIsC5JXipjIDRCBBRRnXQlf/TOEIIszo8+ZwNZVxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNFrqzkNxvgyIDDwQswar0c5antVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2ZjMmMzYzEtYjk5ZC0z ODkwLTk0YzMtYmVkMGRhMjc1ZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgOQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0AgPkjXfDs3Ai3+pnM5dA4mUCemu219jgtTqV4mpv5EpDJNqLF9X0 qD0Tzlsvvy1ygruTtw7lGpYypnRWHrFI5jaPrtsCV+PFIvbOrXAplGJ8ogOLf5AV sJenB+XuqN1jGDk3dnTCEy19AsJbXcmXE/edrTRRlWE0KNR16Y70Cj2Iqmd43mhj c2rV8O8J0vVolMv5lF/SKq5/ucYAMqI28hn6PZmVM2HCuW1JcsW2BLJGreK7eyST AwdqQk22CRmqhac0pWwWDUkErF0XLrTQMOu4dcBI5HocJYsjNxDjA/76gN1r5mpf 2fb/EPHEQ5Ma6EAa5LZzO68dLIpdmDBz -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:49 2026 by rpki-client