$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa File: 9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa (raw, json) Hash identifier: K6J7nzJzznNf2Jffs+Z3DPi85NPAgJbUkCgpBlShguk= Subject key identifier: CE:66:F6:FE:E0:6F:C8:FC:53:B0:12:87:B5:86:62:B4:DD:B6:78:74 Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F4328584D1F4A3F4E396AEF40D8D67900 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 63072 IP address blocks: 2605:1740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:3f:4e:39:6a:ef:40:d8:d6:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=bef08108-82d6-440a-8a5f-88088cca7603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:08:87:b5:34:b4:4a:64:21:60:ce:3a:f1:81: 92:73:88:58:d7:51:3d:8a:21:3e:02:95:b8:4e:c2: fd:43:3d:de:d4:dd:a4:99:14:7d:98:af:19:bd:c7: ad:e1:b6:92:be:f2:d7:b6:e6:c5:ac:f3:36:d4:fe: 15:c5:95:ae:26:58:bd:86:1e:c4:e4:1d:27:f4:c9: 3a:3b:be:e4:68:7d:02:09:82:ae:b7:a3:0d:69:32: 0f:5a:b2:f3:ec:93:da:d0:18:f8:75:bc:09:ac:73: 66:df:3c:6b:f4:0c:fa:d0:c6:b3:78:3e:61:dd:eb: 0a:c4:e2:e3:5f:be:fd:e2:96:0a:94:4a:ae:a3:b0: e5:2c:97:3a:e2:9c:c7:c3:b4:07:af:73:55:f5:92: 40:2b:86:be:01:de:a1:42:c7:0d:29:d6:35:3c:91: 5e:49:b8:a0:f9:f4:b3:e7:b2:da:9d:2d:65:ca:43: 1f:e3:f6:3f:43:ae:eb:54:5f:6a:68:1f:29:58:06: 2a:fb:16:9d:97:08:85:d0:a2:e8:a1:63:d4:77:b1: 85:a3:5f:ea:fb:d7:99:e8:ae:13:a8:98:6c:2c:7f: 4b:24:0c:b2:0b:78:06:a9:fe:e4:00:d6:45:4d:4d: 58:ea:0b:62:b8:72:f5:50:8f:28:77:99:b6:f2:5e: ac:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:66:F6:FE:E0:6F:C8:FC:53:B0:12:87:B5:86:62:B4:DD:B6:78:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv6: 2605:1740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d2:78:88:d0:a8:2b:af:d0:84:f4:d2:1d:8d:1c:6d:ca:57: 88:83:f3:ae:28:60:7d:28:17:b1:cf:ca:b2:5d:13:45:5e:12: e9:b1:49:7d:86:81:07:08:49:20:ad:d3:70:2f:ab:33:5d:a9: 47:a8:78:da:21:d7:6f:f0:b6:64:12:71:16:98:b3:e4:04:a2: 49:a4:b4:c7:3a:8b:6e:a9:37:59:d2:16:bf:ff:4f:20:2e:40: 10:f1:c9:2a:6c:28:1f:b1:be:70:75:16:df:50:2e:6a:9d:b5: 4f:dc:9b:19:7b:9d:17:6a:62:a8:1f:93:0a:b5:21:03:88:55: fd:54:bd:36:7d:e7:1c:f1:59:4f:3e:e3:2d:0a:a8:3d:2c:fb: 2a:89:f2:fb:3e:86:5b:87:19:75:27:72:24:4d:64:9f:b5:f2: 98:d9:4b:75:5e:98:dc:d8:ee:71:81:d9:46:18:25:be:ba:f6: 04:7c:c4:53:76:93:b9:1e:13:da:81:51:66:57:fa:d1:2c:c6: 5d:06:87:eb:57:47:78:71:87:43:ff:87:fe:01:30:26:f7:32: 01:6b:b1:59:7c:4b:79:e6:32:b2:7a:fb:94:b0:87:7e:b9:b7: d2:c2:14:e6:e3:6b:88:34:04:c9:fa:75:cd:27:23:87:9c:90: 33:b3:44:d4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0fSj9OOWrvQNjWeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YmVmMDgxMDgtODJkNi00NDBhLThhNWYtODgwODhjY2E3NjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAiHtTS0SmQhYM468YGSc4hY11E9iiE+ApW4 TsL9Qz3e1N2kmRR9mK8Zvcet4baSvvLXtubFrPM21P4VxZWuJli9hh7E5B0n9Mk6 O77kaH0CCYKut6MNaTIPWrLz7JPa0Bj4dbwJrHNm3zxr9Az60MazeD5h3esKxOLj X7794pYKlEquo7DlLJc64pzHw7QHr3NV9ZJAK4a+Ad6hQscNKdY1PJFeSbig+fSz 57LanS1lykMf4/Y/Q67rVF9qaB8pWAYq+xadlwiF0KLooWPUd7GFo1/q+9eZ6K4T qJhsLH9LJAyyC3gGqf7kANZFTU1Y6gtiuHL1UI8od5m28l6sRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM5m9v7gb8j8U7ASh7WGYrTdtnh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvOWJhOWI3NjktYjc3ZS0z MTdiLTlhMTItMTBiMTlkY2YwMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUXQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB50niI0Kgrr9CE9NIdjRxtyleIg/OuKGB9KBexz8qyXRNFXhLpsUl9 hoEHCEkgrdNwL6szXalHqHjaIddv8LZkEnEWmLPkBKJJpLTHOotuqTdZ0ha//08g LkAQ8ckqbCgfsb5wdRbfUC5qnbVP3JsZe50XamKoH5MKtSEDiFX9VL02fecc8VlP PuMtCqg9LPsqifL7PoZbhxl1J3IkTWSftfKY2Ut1Xpjc2O5xgdlGGCW+uvYEfMRT dpO5HhPagVFmV/rRLMZdBofrV0d4cYdD/4f+ATAm9zIBa7FZfEt55jKyevuUsId+ ubfSwhTm42uINATJ+nXNJyOHnJAzs0TU -----END CERTIFICATE-----Generated at Sat Mar 28 14:58:10 2026 by rpki-client