$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa File: 1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa (raw, json) Hash identifier: W4JLqaoiP7O/KL6c9cIQDFvsA1yneSAsEt2wIoBjWrc= Subject key identifier: C9:C3:20:2E:EA:BD:D6:DA:93:5F:CC:28:74:79:8B:63:B5:DE:9A:92 Certificate issuer: /CN=94cfb244-34f1-4c74-919b-4784f0348dd1 Certificate serial: 010D0C9F4328584D186CFC19CD0955D0CA79B220 Authority key identifier: BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa Signing time: Sun 08 Mar 2026 02:00:31 +0000 ROA not before: Sun 08 Mar 2026 02:00:31 +0000 ROA not after: Sat 06 Jun 2026 01:00:31 +0000 asID: 401908 IP address blocks: 2620:da:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:6c:fc:19:cd:09:55:d0:ca:79:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94cfb244-34f1-4c74-919b-4784f0348dd1 Validity Not Before: Mar 8 02:00:31 2026 GMT Not After : Jun 6 01:00:31 2026 GMT Subject: CN=7b0784bc-e170-4f69-b366-3eccd8298672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:54:1c:e3:76:b3:f1:5d:c5:93:88:e4:8c:53: f1:ff:d7:d9:30:3d:38:6c:e1:e9:19:77:f6:2d:98: 1c:5d:ed:c5:7f:1f:9b:3c:9a:6e:7d:c0:ee:ac:f8: 1d:e6:ae:97:0f:85:aa:2a:a7:0f:29:54:3f:da:4b: c0:11:ba:c2:e3:b5:8f:96:6f:0e:2c:00:1c:a9:83: 19:5b:a6:93:f2:42:b1:56:f0:6c:b7:e7:5c:04:00: 5d:51:bd:cc:16:50:62:b4:88:72:73:d6:dd:be:04: f9:c5:37:13:a1:96:36:a8:aa:3a:ae:82:b3:68:98: 63:42:26:e4:d4:2a:2b:e8:56:8d:2b:ad:23:92:5e: 7b:28:8a:7f:10:09:a6:e9:c2:56:84:18:90:f8:5b: f9:e7:e5:6e:3f:68:07:91:10:43:69:3a:f3:e0:2f: 8c:49:c8:46:dc:9e:07:83:41:f4:f5:81:b8:ee:11: ac:3a:98:5b:74:6c:49:2c:45:d3:19:50:c9:8f:1d: 55:e8:ee:33:be:47:f1:d3:e6:f7:d9:83:0f:1f:1f: 2b:d4:f9:1b:aa:1b:22:72:c7:fa:aa:ec:37:b8:4d: de:71:da:81:94:5b:2d:7e:5f:fa:e3:c1:07:1d:18: 30:f4:2e:3f:1b:1a:29:f0:09:dc:e0:6f:b5:35:b6: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C3:20:2E:EA:BD:D6:DA:93:5F:CC:28:74:79:8B:63:B5:DE:9A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/1df1c32d-3d78-3f3a-8911-3c0ae30de6c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1/94cfb244-34f1-4c74-919b-4784f0348dd1.crl X509v3 Authority Key Identifier: keyid:BA:81:2A:A8:CA:E1:A0:4F:3D:80:1A:27:F3:CB:05:6A:4F:23:4A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/94cfb244-34f1-4c74-919b-4784f0348dd1.cer sbgp-ipAddrBlock: critical IPv6: 2620:da:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cc:85:6a:99:be:55:bd:22:51:c7:20:64:32:17:2e:9e:9c: a8:41:86:2e:4e:01:57:82:00:d3:ad:71:01:47:b5:ab:b1:86: 88:c9:af:5f:52:8f:27:d5:17:a7:45:a5:d4:7b:10:f1:ce:58: d2:4e:da:f8:26:f6:3e:ff:7f:76:86:12:32:81:44:44:bc:10: e8:af:59:55:38:55:d4:b1:46:67:d1:d3:8c:69:76:01:a6:37: 40:c6:37:cf:9b:ee:39:e2:46:48:35:79:d0:15:b3:de:cd:4a: 90:91:f2:aa:da:cb:ae:91:ff:33:cb:3a:eb:dd:e9:9a:92:d2: a1:50:5a:3e:44:2c:58:61:d1:08:13:c1:04:83:ad:30:69:6e: 23:fc:5a:e2:5f:4e:8f:ec:74:1f:30:60:a7:f9:5f:14:0a:ee: 8d:24:59:c1:16:b0:9a:33:d8:55:c3:9e:cd:c8:9e:db:98:28: 91:6b:1d:5a:f6:8c:40:d5:f7:2f:ef:81:5b:57:db:0d:16:67: 70:0f:5d:b5:1e:00:9d:71:19:ce:73:90:26:b2:b8:4b:56:70: 0f:fa:19:fd:7c:d8:0a:cd:85:30:60:09:5d:9f:ee:9f:29:8e: f8:4b:9c:24:df:f6:c8:04:bc:45:59:36:f2:d1:2c:85:bd:74: af:6a:42:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0YbPwZzQlV0Mp5siAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRjZmIyNDQtMzRmMS00Yzc0LTkxOWItNDc4NGYwMzQ4 ZGQxMB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk N2IwNzg0YmMtZTE3MC00ZjY5LWIzNjYtM2VjY2Q4Mjk4NjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVQc43az8V3Fk4jkjFPx/9fZMD04bOHpGXf2 LZgcXe3Ffx+bPJpufcDurPgd5q6XD4WqKqcPKVQ/2kvAEbrC47WPlm8OLAAcqYMZ W6aT8kKxVvBst+dcBABdUb3MFlBitIhyc9bdvgT5xTcToZY2qKo6roKzaJhjQibk 1Cor6FaNK60jkl57KIp/EAmm6cJWhBiQ+Fv55+VuP2gHkRBDaTrz4C+MSchG3J4H g0H09YG47hGsOphbdGxJLEXTGVDJjx1V6O4zvkfx0+b32YMPHx8r1Pkbqhsicsf6 quw3uE3ecdqBlFstfl/648EHHRgw9C4/Gxop8Anc4G+1NbaZiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnDIC7qvdbak1/MKHR5i2O13pqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NGNm YjI0NC0zNGYxLTRjNzQtOTE5Yi00Nzg0ZjAzNDhkZDEvMWRmMWMzMmQtM2Q3OC0z ZjNhLTg5MTEtM2MwYWUzMGRlNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTRjZmIyNDQtMzRmMS00Yzc0LTkx OWItNDc4NGYwMzQ4ZGQxLzk0Y2ZiMjQ0LTM0ZjEtNGM3NC05MTliLTQ3ODRmMDM0 OGRkMS5jcmwwHwYDVR0jBBgwFoAUuoEqqMrhoE89gBon88sFak8jStAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NGNmYjI0NC0zNGYxLTRjNzQtOTE5Yi00Nzg0 ZjAzNDhkZDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA2qAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvMhWqZvlW9IlHHIGQyFy6enKhBhi5OAVeCANOtcQFHtauxhojJ r19SjyfVF6dFpdR7EPHOWNJO2vgm9j7/f3aGEjKBRES8EOivWVU4VdSxRmfR04xp dgGmN0DGN8+b7jniRkg1edAVs97NSpCR8qray66R/zPLOuvd6ZqS0qFQWj5ELFhh 0QgTwQSDrTBpbiP8WuJfTo/sdB8wYKf5XxQK7o0kWcEWsJoz2FXDns3IntuYKJFr HVr2jEDV9y/vgVtX2w0WZ3APXbUeAJ1xGc5zkCayuEtWcA/6Gf182ArNhTBgCV2f 7p8pjvhLnCTf9sgEvEVZNvLRLIW9dK9qQnY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:42 2026 by rpki-client