$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa File: b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa (raw, json) Hash identifier: BM7bPSKAdV+DTEjFxR3gendcAqhKuVsotgphg5Vlvt0= Subject key identifier: DD:0E:40:31:4F:9E:C5:91:CB:C8:20:79:77:39:AA:44:F9:1B:47:97 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F4328584D359FA74A0EAA444859343980 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 399045 IP address blocks: 2606:d640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a7:4a:0e:aa:44:48:59:34:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b14f8266-08ba-49b5-b4bc-a3c633913f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a5:30:07:80:f4:c9:59:3d:69:79:92:a5:93: 58:ae:70:57:57:24:cd:7e:de:ad:af:b6:58:ad:f1: 1e:43:be:ef:aa:86:53:15:83:14:f6:c6:80:24:7b: 70:2b:a1:47:8c:de:a8:2c:cd:1c:c3:86:01:ce:64: b9:82:41:f9:bc:67:19:7a:49:ba:03:ff:2b:82:56: 2c:6b:99:07:27:64:74:77:89:17:2a:3b:00:f3:9b: da:b8:3a:47:d8:f7:2f:1b:dd:e9:53:a9:cb:5c:fe: fc:17:6a:72:0f:54:ad:38:c5:28:42:51:f5:fb:8e: 50:32:3b:13:e9:9a:e2:2e:ec:ed:a2:74:8a:46:e8: 98:a5:d4:2e:e4:03:c9:c1:85:15:94:d9:e5:2a:b6: bd:ca:b5:32:c9:89:8b:6d:e9:ad:b5:66:de:11:83: f6:e7:bb:cc:21:9a:c4:08:c2:f3:68:0d:54:8a:1b: e2:e8:61:fa:17:a3:d9:43:cb:1b:ad:48:42:aa:4f: ce:c9:0e:1a:33:73:3a:93:e9:3e:b2:3e:00:dc:53: 55:24:2f:85:58:f2:50:d7:14:b2:0c:b5:41:19:40: 9c:01:fa:f3:05:24:17:9d:64:69:f6:86:1e:39:d4: f0:37:8c:ae:b1:d3:8f:e8:99:3e:2f:5a:8a:96:94: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0E:40:31:4F:9E:C5:91:CB:C8:20:79:77:39:AA:44:F9:1B:47:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv6: 2606:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:26:2f:9b:cd:0b:8d:01:7a:43:4c:e0:1b:09:63:32:25:7f: b5:4b:7d:a4:4d:e8:07:a9:e5:73:0e:95:15:34:34:20:fe:29: 0e:b9:6c:00:51:33:2d:56:72:63:90:6d:dd:22:a3:61:11:df: 71:42:54:f4:f5:35:e7:d3:ee:81:4b:36:b2:23:4b:8c:34:11: ce:32:b7:23:0c:6f:7d:80:a1:54:1d:9e:06:fc:e6:2c:bf:8a: 54:a5:00:3d:48:83:a0:40:14:00:78:1a:94:68:e1:e0:f7:59: 87:88:ee:fe:92:7d:1f:3c:70:5d:48:98:88:43:0d:50:b6:75: ab:ee:1c:85:78:79:ff:b2:a5:21:c0:e7:30:d2:00:53:8c:86: 75:ba:c2:85:a9:39:5a:05:8d:65:3b:00:04:96:8a:70:7f:d8: e8:43:27:cc:d0:16:e8:b4:22:52:94:69:8b:1a:66:92:d8:d5: bf:51:df:cb:09:13:8d:30:30:15:1e:8e:06:81:52:56:bc:93: e2:27:5d:01:7e:06:61:84:d4:c6:9c:72:2b:6b:9d:88:89:9a: 80:fc:46:1b:c7:22:96:53:2e:1a:20:5e:1d:35:96:fc:6e:e3: 6d:fa:ad:70:86:5e:86:a4:da:cd:42:dc:da:59:e4:13:39:cc: 4e:31:57:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE01n6dKDqpESFk0OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YjE0ZjgyNjYtMDhiYS00OWI1LWI0YmMtYTNjNjMzOTEzZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKUwB4D0yVk9aXmSpZNYrnBXVyTNft6tr7ZY rfEeQ77vqoZTFYMU9saAJHtwK6FHjN6oLM0cw4YBzmS5gkH5vGcZekm6A/8rglYs a5kHJ2R0d4kXKjsA85vauDpH2PcvG93pU6nLXP78F2pyD1StOMUoQlH1+45QMjsT 6ZriLuztonSKRuiYpdQu5APJwYUVlNnlKra9yrUyyYmLbemttWbeEYP257vMIZrE CMLzaA1Uihvi6GH6F6PZQ8sbrUhCqk/OyQ4aM3M6k+k+sj4A3FNVJC+FWPJQ1xSy DLVBGUCcAfrzBSQXnWRp9oYeOdTwN4yusdOP6Jk+L1qKlpRt4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN0OQDFPnsWRy8ggeXc5qkT5G0eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvYjk5YjM2ZjctNmUzZC0z YjNmLTliY2QtNjdhZmEzY2VmZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEJi+bzQuNAXpDTOAbCWMyJX+1S32kTegHqeVzDpUVNDQg/ikOuWwA UTMtVnJjkG3dIqNhEd9xQlT09TXn0+6BSzayI0uMNBHOMrcjDG99gKFUHZ4G/OYs v4pUpQA9SIOgQBQAeBqUaOHg91mHiO7+kn0fPHBdSJiIQw1QtnWr7hyFeHn/sqUh wOcw0gBTjIZ1usKFqTlaBY1lOwAElopwf9joQyfM0BbotCJSlGmLGmaS2NW/Ud/L CRONMDAVHo4GgVJWvJPiJ10BfgZhhNTGnHIra52IiZqA/EYbxyKWUy4aIF4dNZb8 buNt+q1whl6GpNrNQtzaWeQTOcxOMVfG -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:05 2026 by rpki-client