$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa File: 9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa (raw, json) Hash identifier: JVb4j2TQw2wAWuDKcEG4BwQSI2EDmUt/ugp4+99uPjw= Subject key identifier: D7:BB:06:38:BA:55:AD:47:05:55:81:06:44:61:A7:0A:A6:62:03:70 Certificate issuer: /CN=9bd4f17b-3d8c-4bcd-a454-9647e663c093 Certificate serial: 010D0C9F4328584D386A21BCC2C058AC7EB82480 Authority key identifier: 45:C1:4A:C3:33:AC:98:E7:BE:EE:1A:63:E1:7D:E8:F4:EE:6E:4F:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 40591 IP address blocks: 2620:0:d90::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:21:bc:c2:c0:58:ac:7e:b8:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd4f17b-3d8c-4bcd-a454-9647e663c093 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=508b711b-99f5-4848-aa5d-9f517ba2834f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:5b:d3:74:22:42:1c:a8:cc:41:2d:e8:75: d5:3f:6f:ee:57:64:68:62:1f:45:14:1d:fa:14:66: ad:59:32:7e:20:c6:2d:c2:ce:58:05:d7:c2:49:91: ab:76:81:2a:04:d2:7c:16:ed:be:50:aa:ec:34:89: 35:f3:a5:bf:00:a5:c5:f3:2d:2c:bb:2f:6a:79:b6: 28:24:60:a3:44:ea:dc:12:da:b4:e1:13:21:62:75: d5:a8:de:d8:81:6c:71:e5:02:f6:76:4b:bc:f3:76: 68:a2:b3:10:80:94:ff:6c:e7:ff:58:3f:1f:a3:f5: c9:e4:fa:48:13:7d:7d:41:f3:54:27:14:45:64:d6: 0f:4b:d9:be:00:f5:7c:cc:87:0f:aa:c5:53:cc:27: 36:84:f9:63:31:0e:5f:07:72:80:63:13:45:14:a8: 69:3c:e0:42:d0:62:fe:38:3f:a1:a8:8b:3d:f6:61: 39:fe:8e:7e:3e:7d:af:cd:d6:b5:da:1d:ce:70:5b: 65:e8:7d:ea:c9:42:ed:7d:bb:dc:e1:2e:b5:96:20: e7:39:bf:fd:c1:fd:f8:29:58:18:ea:2d:df:39:81: 3c:81:6f:78:4d:66:7a:a9:87:04:d2:5d:d0:36:8b: d4:3c:81:71:60:51:eb:c4:48:4a:d7:ed:c3:74:13: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BB:06:38:BA:55:AD:47:05:55:81:06:44:61:A7:0A:A6:62:03:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.crl X509v3 Authority Key Identifier: keyid:45:C1:4A:C3:33:AC:98:E7:BE:EE:1A:63:E1:7D:E8:F4:EE:6E:4F:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:d90::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:52:83:e4:7d:5d:59:2a:a2:6d:9c:66:49:65:45:59:a8:6a: 03:55:0a:c3:2a:6b:50:9b:84:ce:e2:6c:7e:2b:91:bf:46:d3: b8:77:e3:52:95:3b:1e:b7:3e:c8:2c:26:7b:e0:72:4e:bd:1e: 5b:63:a9:21:ee:7c:73:5d:5d:4e:f2:83:17:24:23:c3:ca:58: 61:48:b6:c4:44:8e:c2:79:c1:c9:ba:4f:00:52:b7:4a:9d:6b: 92:ae:ee:ff:75:6e:72:82:a3:b4:6f:66:8a:51:e6:19:3d:11: 08:7e:f2:43:12:5c:01:69:7a:31:cf:5a:1b:f2:b1:8d:08:16: 36:db:71:73:33:fd:2a:d3:3e:bb:bd:ad:9b:87:5b:be:70:cf: 8c:b0:18:51:44:44:06:0d:44:0c:56:e4:9d:d9:5b:fe:7e:44: df:1f:4a:28:47:03:c6:57:6a:1c:5d:9b:6a:bf:d2:08:01:7e: 33:95:65:e0:b7:44:7f:80:a1:d1:b0:46:b1:0b:2e:a0:f4:58: 27:00:8a:68:74:35:ba:d5:1b:6c:61:f4:36:0f:2a:7b:7f:56: 0b:b2:d8:59:54:ec:91:ab:1a:d7:8d:92:2e:6c:b7:44:36:b9: e0:13:a4:fa:20:2d:7a:c8:eb:44:29:8d:f8:7e:6b:5f:b7:c6: 05:66:dc:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04aiG8wsBYrH64JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkNGYxN2ItM2Q4Yy00YmNkLWE0NTQtOTY0N2U2NjNj MDkzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NTA4YjcxMWItOTlmNS00ODQ4LWFhNWQtOWY1MTdiYTI4MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQRb03QiQhyozEEt6HXVP2/uV2RoYh9FFB36 FGatWTJ+IMYtws5YBdfCSZGrdoEqBNJ8Fu2+UKrsNIk186W/AKXF8y0suy9qebYo JGCjROrcEtq04RMhYnXVqN7YgWxx5QL2dku883ZoorMQgJT/bOf/WD8fo/XJ5PpI E319QfNUJxRFZNYPS9m+APV8zIcPqsVTzCc2hPljMQ5fB3KAYxNFFKhpPOBC0GL+ OD+hqIs99mE5/o5+Pn2vzda12h3OcFtl6H3qyULtfbvc4S61liDnOb/9wf34KVgY 6i3fOYE8gW94TWZ6qYcE0l3QNovUPIFxYFHrxEhK1+3DdBNg+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNe7Bji6Va1HBVWBBkRhpwqmYgNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YmQ0 ZjE3Yi0zZDhjLTRiY2QtYTQ1NC05NjQ3ZTY2M2MwOTMvOWFmZDFiOWEtZjI4OC0z N2MxLWE5YTktNjYzMTQ4MWQ5MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWJkNGYxN2ItM2Q4Yy00YmNkLWE0 NTQtOTY0N2U2NjNjMDkzLzliZDRmMTdiLTNkOGMtNGJjZC1hNDU0LTk2NDdlNjYz YzA5My5jcmwwHwYDVR0jBBgwFoAURcFKwzOsmOe+7hpj4X3o9O5uT/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85YmQ0ZjE3Yi0zZDhjLTRiY2QtYTQ1NC05NjQ3 ZTY2M2MwOTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA2Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1Sg+R9XVkqom2cZkllRVmoagNVCsMqa1CbhM7ibH4rkb9G07h3 41KVOx63PsgsJnvgck69HltjqSHufHNdXU7ygxckI8PKWGFItsREjsJ5wcm6TwBS t0qda5Ku7v91bnKCo7RvZopR5hk9EQh+8kMSXAFpejHPWhvysY0IFjbbcXMz/SrT Pru9rZuHW75wz4ywGFFERAYNRAxW5J3ZW/5+RN8fSihHA8ZXahxdm2q/0ggBfjOV ZeC3RH+AodGwRrELLqD0WCcAimh0NbrVG2xh9DYPKnt/Vguy2FlU7JGrGteNki5s t0Q2ueATpPogLXrI60Qpjfh+a1+3xgVm3Lc= -----END CERTIFICATE-----Generated at Thu Mar 26 09:11:25 2026 by rpki-client