$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa File: 4d791053-3127-3f02-a4e7-20d3e1e44946.roa (raw, json) Hash identifier: +pqnjlacuyQH9l2qS8/a01pjJ3EGMaBmqvNK+zbrQZA= Subject key identifier: 28:E6:C5:50:97:06:09:D2:68:3A:21:A0:E5:20:3A:5A:8F:64:58:A1 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F4328584D343A147FFC6B58F2E0FF8A60 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 399045 IP address blocks: 2606:d640:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:14:7f:fc:6b:58:f2:e0:ff:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=65fe9a31-387a-488a-a9fa-d0715561a36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:1b:4a:c8:fd:63:3a:c4:70:29:9e:e6:90: 10:e2:fd:1d:bb:8e:0d:ce:25:1d:24:21:b7:9f:61: 6a:04:0c:f4:0a:b7:54:19:4c:04:a6:e1:65:bd:d6: 8d:bb:62:0d:ce:9b:1b:4c:47:b5:05:85:2e:19:b8: 41:31:e6:4f:7b:1c:68:ef:7c:09:21:84:ae:71:69: 32:03:2c:a7:87:1b:0c:40:83:4d:89:73:04:7f:8d: 42:ba:1e:cf:93:53:1b:f1:26:6f:e1:59:10:6f:eb: e0:67:a2:b8:83:e7:83:7d:1e:37:a5:61:db:86:43: 2c:9c:02:99:1e:0d:4d:a9:6a:f3:a5:db:93:5b:26: ac:56:e0:52:1e:2d:88:45:be:5d:90:93:0c:70:80: a3:7d:10:e0:f9:12:b9:49:1a:b6:73:fe:ee:e7:28: 0c:85:2f:fe:5a:ac:f2:66:8f:d6:f0:d0:be:e4:fe: 27:88:b5:72:db:5a:48:75:4f:c1:82:a4:98:08:5a: fb:c3:d5:f2:89:83:4e:ec:cc:4f:00:dd:48:88:f9: 94:a2:fb:94:18:ca:b5:62:5b:22:07:01:cd:af:11: 5e:f3:f8:98:bd:66:c2:4b:bd:78:de:51:bc:30:9a: 11:8a:6a:b2:31:a8:fa:93:02:ca:90:4c:78:7c:4c: 9f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E6:C5:50:97:06:09:D2:68:3A:21:A0:E5:20:3A:5A:8F:64:58:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv6: 2606:d640:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:19:0b:09:39:1a:06:99:8a:33:8c:3f:ba:4f:94:24:e5:b6: 78:6c:db:b9:26:e4:b8:9c:5b:32:bf:35:d2:7a:65:17:6f:9d: 91:aa:3e:47:86:b3:5c:67:bf:84:37:00:e3:26:64:ef:d5:a0: 88:81:6f:db:20:90:35:27:25:54:ff:9a:86:1c:87:9f:3d:a8: e8:0c:e4:2a:58:f7:cf:9e:83:46:25:4d:01:ae:ad:ba:92:a3: 4a:7f:6b:49:e9:d3:c1:a7:07:96:50:1f:ae:6e:7e:db:b5:e5: 5c:90:11:4c:66:dc:e1:0a:f9:1e:c9:79:04:35:42:36:ae:d9: ae:5c:dc:21:b1:2f:fc:93:d5:95:f2:22:3b:cc:35:c1:a1:e0: 5f:05:58:88:de:eb:f5:fb:42:41:42:1f:88:fb:80:ea:31:9d: 5b:15:b1:51:ee:a1:e0:6c:6a:66:9b:cb:da:e9:9a:f4:45:ee: 44:77:e3:9e:dd:91:09:7d:4e:ba:64:26:71:c4:1e:97:a0:34: d6:49:36:34:64:5e:8d:27:75:ab:74:06:0f:ea:92:2a:83:49: 5a:1a:ae:b8:71:e2:f6:91:92:de:d0:45:51:29:58:2a:91:4a: 79:0c:36:f6:8b:a0:8e:61:8f:36:db:e2:69:d0:6f:50:d9:a6: 9c:dd:1f:bf -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE00OhR//GtY8uD/imAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk NjVmZTlhMzEtMzg3YS00ODhhLWE5ZmEtZDA3MTU1NjFhMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolcbSsj9YzrEcCme5pAQ4v0du44NziUdJCG3 n2FqBAz0CrdUGUwEpuFlvdaNu2INzpsbTEe1BYUuGbhBMeZPexxo73wJIYSucWky AyynhxsMQINNiXMEf41Cuh7Pk1Mb8SZv4VkQb+vgZ6K4g+eDfR43pWHbhkMsnAKZ Hg1NqWrzpduTWyasVuBSHi2IRb5dkJMMcICjfRDg+RK5SRq2c/7u5ygMhS/+Wqzy Zo/W8NC+5P4niLVy21pIdU/BgqSYCFr7w9XyiYNO7MxPAN1IiPmUovuUGMq1Ylsi BwHNrxFe8/iYvWbCS7143lG8MJoRimqyMaj6kwLKkEx4fEyf4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCjmxVCXBgnSaDohoOUgOlqPZFihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvNGQ3OTEwNTMtMzEyNy0z ZjAyLWE0ZTctMjBkM2UxZTQ0OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbWQAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUhkLCTkaBpmKM4w/uk+UJOW2eGzbuSbkuJxbMr810nplF2+dkao+ R4azXGe/hDcA4yZk79WgiIFv2yCQNSclVP+ahhyHnz2o6AzkKlj3z56DRiVNAa6t upKjSn9rSenTwacHllAfrm5+27XlXJARTGbc4Qr5Hsl5BDVCNq7ZrlzcIbEv/JPV lfIiO8w1waHgXwVYiN7r9ftCQUIfiPuA6jGdWxWxUe6h4GxqZpvL2uma9EXuRHfj nt2RCX1OumQmccQel6A01kk2NGRejSd1q3QGD+qSKoNJWhquuHHi9pGS3tBFUSlY KpFKeQw29ougjmGPNtviadBvUNmmnN0fvw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:40 2026 by rpki-client