$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa File: da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa (raw, json) Hash identifier: g5O4Ht8BBDNjkxkSqMltMyVe/cNEdg9zdeoBeeb3Zm0= Subject key identifier: CD:86:19:D6:FB:5F:08:1A:A2:E5:B5:53:01:B2:4A:99:7A:86:A5:D3 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584D2644C2D7B0962A2A44EB5540 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 0 IP address blocks: 2001:504:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c2:d7:b0:96:2a:2a:44:eb:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=af4483fb-760a-47e2-a50f-31c4838d2b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:fd:92:0b:e4:95:a7:47:9b:16:fd:3e:2b: f3:76:1b:da:c8:10:cd:52:84:df:c4:61:62:fa:73: ec:7c:90:d6:0e:7b:cf:a3:3b:87:b2:09:57:e2:87: 6a:ea:f9:89:c8:45:e2:08:2c:d7:72:08:09:4f:fe: b1:66:3c:fb:50:79:6d:04:3e:78:0e:27:50:dc:44: d7:23:f8:3a:c3:86:c6:2e:3c:8b:d9:d1:b9:ae:91: 75:ff:1c:18:05:0c:63:7b:35:70:17:80:01:b9:65: 9e:64:d2:f5:69:2d:98:46:03:cd:fc:9d:0b:ae:94: 60:8c:27:f4:50:dc:9c:fc:f5:bf:a0:d1:9e:05:31: cc:86:5d:f0:d8:08:80:f9:ec:f6:9b:b3:91:db:48: 4c:7c:f9:21:c2:90:f3:26:e6:7e:c1:21:d7:ee:3c: b8:ea:1f:ad:9c:44:4f:ca:be:57:80:d9:47:79:60: 25:b4:7f:5e:1e:de:56:d6:42:a1:e8:b1:3b:6f:38: 7d:b9:19:73:78:20:75:60:0b:f0:c9:24:a0:f9:6e: eb:87:1f:cb:59:67:3c:78:3c:f2:71:8b:f6:04:7d: 98:ce:ee:c3:05:3f:dc:c9:09:9e:cf:03:33:28:ca: 72:bc:74:5c:25:d9:fc:64:48:8d:50:8f:f1:05:36: 61:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:86:19:D6:FB:5F:08:1A:A2:E5:B5:53:01:B2:4A:99:7A:86:A5:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c7:d2:dc:da:90:c7:43:fe:45:b0:47:71:c9:fd:d7:d0:4a: f9:09:98:fa:d0:48:54:37:58:84:5a:52:09:d8:0b:75:b1:18: 0e:89:58:71:f9:64:c0:9a:09:b5:e1:45:bb:60:50:b7:28:40: 92:22:23:7f:8c:45:cf:93:19:a1:2b:f9:ee:a7:29:79:48:1f: b4:85:63:0b:1c:88:d4:16:85:0a:d2:9e:1f:64:15:7e:95:8c: 6c:a2:57:62:8f:a2:f5:e4:74:ca:c2:2b:ae:8f:fa:e3:ac:7b: ea:25:44:73:ac:4d:a2:5a:72:2d:a9:aa:8d:8e:43:15:98:76: 80:f6:40:fd:c3:4c:cd:e9:d4:d3:b4:ac:f2:24:8c:64:61:0c: 44:ce:60:c0:6c:26:01:99:4e:df:79:00:04:0f:78:cf:3a:df: 63:26:c7:82:f5:31:23:f5:ed:6c:ba:24:a9:22:a0:c1:51:5b: b8:17:9c:9a:75:f7:e7:77:9a:f5:1a:d9:94:30:43:68:60:b0: 03:c0:9d:e6:e3:23:09:f7:03:6e:31:84:83:b4:50:87:cf:b7: 71:46:40:2c:02:1c:7f:e3:82:a8:92:04:59:d4:84:c1:c6:e6: 4c:a8:86:ee:f8:6a:52:c0:93:65:f1:9c:da:19:6b:31:b4:c2: 22:68:d2:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRMLXsJYqKkTrVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YWY0NDgzZmItNzYwYS00N2UyLWE1MGYtMzFjNDgzOGQyYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh79kgvkladHmxb9PivzdhvayBDNUoTfxGFi +nPsfJDWDnvPozuHsglX4odq6vmJyEXiCCzXcggJT/6xZjz7UHltBD54DidQ3ETX I/g6w4bGLjyL2dG5rpF1/xwYBQxjezVwF4ABuWWeZNL1aS2YRgPN/J0LrpRgjCf0 UNyc/PW/oNGeBTHMhl3w2AiA+ez2m7OR20hMfPkhwpDzJuZ+wSHX7jy46h+tnERP yr5XgNlHeWAltH9eHt5W1kKh6LE7bzh9uRlzeCB1YAvwySSg+W7rhx/LWWc8eDzy cYv2BH2Yzu7DBT/cyQmezwMzKMpyvHRcJdn8ZEiNUI/xBTZhYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM2GGdb7XwgaouW1UwGySpl6hqXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZGE5NjFiZTAtNWNhNi0z ZjM0LWJmZDgtZmQ4MDdmYThkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3H0tzakMdD/kWwR3HJ/dfQSvkJmPrQSFQ3WIRaUgnYC3WxGA6J WHH5ZMCaCbXhRbtgULcoQJIiI3+MRc+TGaEr+e6nKXlIH7SFYwsciNQWhQrSnh9k FX6VjGyiV2KPovXkdMrCK66P+uOse+olRHOsTaJaci2pqo2OQxWYdoD2QP3DTM3p 1NO0rPIkjGRhDETOYMBsJgGZTt95AAQPeM8632Mmx4L1MSP17Wy6JKkioMFRW7gX nJp19+d3mvUa2ZQwQ2hgsAPAnebjIwn3A24xhIO0UIfPt3FGQCwCHH/jgqiSBFnU hMHG5kyohu74alLAk2XxnNoZazG0wiJo0lE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:49 2026 by rpki-client