$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa File: 5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa (raw, json) Hash identifier: bVjRUZtB1S7abYTbTsDqmjGSSyhEqlfFhiYHbtnxng8= Subject key identifier: 88:5E:26:8B:7D:E2:E6:44:2E:BF:7E:5C:B9:94:5D:91:0F:7F:32:58 Certificate issuer: /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Certificate serial: 010D0C9F4328584D2BDA0CF70809A44394A53230 Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 2620:10b:b008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:0c:f7:08:09:a4:43:94:a5:32:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=551a4e95-d6cd-49de-83ad-7346022a3f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:2c:a5:1e:80:37:f9:50:04:d4:e6:e0:ac: b3:50:d0:32:84:99:c4:43:7c:1e:bd:28:00:60:94: 00:04:a9:02:d8:c3:e3:41:1e:0c:45:b2:d2:ec:7d: 24:be:3c:57:7e:47:c1:f9:83:6b:42:c2:89:a2:4f: 5f:ef:68:a7:67:0e:2d:55:eb:1c:cd:f7:eb:94:90: f0:5b:30:60:b7:2c:a4:31:67:2d:ab:56:be:c7:4c: c7:5c:52:85:4c:05:a8:48:5d:90:ae:9f:c9:6c:ed: 0c:86:2a:b5:78:29:82:5f:51:fe:e6:7c:4b:86:a8: 29:00:96:31:a3:91:0c:f7:62:0a:42:b0:33:90:4d: e9:c0:1c:14:75:fe:f9:66:da:88:57:cb:a1:26:f5: 81:2c:0d:6a:a2:b9:af:86:49:c9:dd:11:fb:62:81: 26:91:94:a0:1e:30:e4:30:1a:1f:d2:9c:49:8f:9c: 10:75:bb:ed:96:6f:1e:4f:16:8e:9c:65:f5:32:02: c9:92:7e:0c:64:11:ee:20:21:d1:2e:3b:a5:3e:95: 01:88:40:25:97:03:97:33:69:00:71:82:09:01:ba: 93:71:0a:89:31:fe:ae:fd:ed:ea:b2:ca:18:00:1e: 65:28:2c:93:5d:61:ee:e0:73:09:a5:52:d3:75:26: cb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5E:26:8B:7D:E2:E6:44:2E:BF:7E:5C:B9:94:5D:91:0F:7F:32:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl X509v3 Authority Key Identifier: keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:10b:b008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:13:78:78:a1:9f:e8:bb:6a:ea:80:d1:68:72:0d:6c:5f:c5: c6:5e:a6:5e:18:7e:63:37:5a:7b:33:a1:14:29:f0:1a:64:22: bb:13:c1:c3:94:e6:0a:87:cc:10:1b:f8:85:56:02:38:e9:2d: 4b:62:22:5b:25:1d:a7:ef:5b:ff:02:85:65:be:32:bd:a2:b0: b6:97:b0:e1:13:a4:32:b9:40:81:57:0d:ef:5b:eb:d5:fa:1c: 23:2e:c8:81:65:06:3d:65:ae:cb:b5:9d:34:d6:85:3d:2e:ce: 66:00:8f:3a:d4:e8:0c:b7:5b:72:75:ec:e2:d1:24:3a:bc:c2: f8:12:bc:94:28:57:c6:85:10:38:01:05:32:25:ff:9c:5c:ce: 33:2a:dd:41:f5:8b:45:f9:5e:4c:fe:5d:16:03:43:f2:85:cc: 96:43:8e:db:c8:dc:0c:16:93:fa:b6:2c:9c:51:bd:45:40:a4: 90:36:80:c1:52:30:b5:e1:53:0a:1b:b3:c6:32:00:38:ef:1f: 39:60:e2:a6:9d:a9:e4:29:6c:2d:38:60:04:46:d2:57:63:d5: ce:8b:e7:dc:9b:17:c0:5b:9a:f5:4e:14:9a:b4:f7:bd:cf:bd: 4d:d7:b2:71:35:38:8a:5e:8a:ab:cd:cf:8d:25:d9:a9:08:b9: bc:85:e5:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0r2gz3CAmkQ5SlMjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1 MmM2MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NTUxYTRlOTUtZDZjZC00OWRlLTgzYWQtNzM0NjAyMmEzZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5wspR6AN/lQBNTm4KyzUNAyhJnEQ3wevSgA YJQABKkC2MPjQR4MRbLS7H0kvjxXfkfB+YNrQsKJok9f72inZw4tVesczffrlJDw WzBgtyykMWctq1a+x0zHXFKFTAWoSF2Qrp/JbO0Mhiq1eCmCX1H+5nxLhqgpAJYx o5EM92IKQrAzkE3pwBwUdf75ZtqIV8uhJvWBLA1qormvhknJ3RH7YoEmkZSgHjDk MBof0pxJj5wQdbvtlm8eTxaOnGX1MgLJkn4MZBHuICHRLjulPpUBiEAllwOXM2kA cYIJAbqTcQqJMf6u/e3qssoYAB5lKCyTXWHu4HMJpVLTdSbLbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIheJot94uZELr9+XLmUXZEPfzJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWUzYWUxYzAtNGU1Yy0z ODM5LWJjYzctODU5NDQ3NDFmNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHgTeHihn+i7auqA0WhyDWxfxcZepl4YfmM3WnszoRQp8BpkIrsT wcOU5gqHzBAb+IVWAjjpLUtiIlslHafvW/8ChWW+Mr2isLaXsOETpDK5QIFXDe9b 69X6HCMuyIFlBj1lrsu1nTTWhT0uzmYAjzrU6Ay3W3J17OLRJDq8wvgSvJQoV8aF EDgBBTIl/5xczjMq3UH1i0X5Xkz+XRYDQ/KFzJZDjtvI3AwWk/q2LJxRvUVApJA2 gMFSMLXhUwobs8YyADjvHzlg4qadqeQpbC04YARG0ldj1c6L59ybF8BbmvVOFJq0 973PvU3XsnE1OIpeiqvNz40l2akIubyF5T0= -----END CERTIFICATE-----Generated at Thu Mar 26 03:51:05 2026 by rpki-client