$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/3d4a1812-5a8a-3de8-99d7-9d8fa65fe110.roa File: 3d4a1812-5a8a-3de8-99d7-9d8fa65fe110.roa (raw, json) Hash identifier: YPA5xtSHi7yb8ZRfex4LAryabvlm0lUOe17jSDtr9PU= Subject key identifier: D7:7F:12:C9:B6:2C:D6:98:B9:E8:C7:63:43:41:D7:60:90:20:F6:CC Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F4328584D1260DE179C2F187293C27130 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/3d4a1812-5a8a-3de8-99d7-9d8fa65fe110.roa Signing time: Thu 05 Mar 2026 22:01:18 +0000 ROA not before: Thu 05 Mar 2026 22:01:18 +0000 ROA not after: Wed 03 Jun 2026 21:01:18 +0000 asID: 396982 IP address blocks: 2607:6bc0:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:60:de:17:9c:2f:18:72:93:c2:71:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Mar 5 22:01:18 2026 GMT Not After : Jun 3 21:01:18 2026 GMT Subject: CN=a56b25ee-f53f-441a-8ae9-b981e4c6d3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:cf:be:f7:da:24:e2:e6:f0:3f:e1:24:75: f3:15:4d:e5:dc:b2:01:85:d6:00:d0:e6:0f:89:e1: e2:21:6a:8b:98:f1:62:11:70:03:6c:44:78:01:a3: da:eb:bc:16:4d:7e:d1:47:b6:cf:0a:90:9b:c8:49: 91:4c:6b:16:17:f7:64:cd:61:88:ee:3e:02:0b:22: 21:e4:1c:a6:78:1f:93:22:50:13:eb:87:a0:20:60: 16:0a:be:56:29:68:96:69:4d:ef:b4:b5:b1:ce:99: 4b:45:10:35:1a:1c:cb:31:c1:a9:a3:03:91:99:1f: 6f:1f:f4:12:42:7e:25:d3:1d:a3:a7:1c:87:32:10: f8:0b:b6:71:24:ce:58:35:6a:09:db:3f:a6:cf:3e: fa:43:12:98:15:63:b1:fe:c0:ca:89:5a:bd:de:68: 33:3c:d6:51:ae:64:81:2c:c5:89:64:41:fd:51:c2: fb:a8:79:cf:c3:f5:84:23:72:88:06:d2:fa:4f:b4: 28:95:9f:2e:a1:4f:96:9c:2b:5e:d1:50:8e:67:08: 6a:a3:7d:11:d4:20:68:56:f3:62:00:8a:72:99:15: 9e:88:53:1b:d1:0a:43:94:de:2e:fd:50:ed:47:d3: 5c:54:90:fd:02:bc:52:18:e9:f2:90:20:80:bd:6d: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7F:12:C9:B6:2C:D6:98:B9:E8:C7:63:43:41:D7:60:90:20:F6:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/3d4a1812-5a8a-3de8-99d7-9d8fa65fe110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1a:ab:08:ed:ea:d1:ff:46:c3:a2:c9:31:66:0b:d1:31:a8: 88:05:96:a4:4a:cb:de:b2:9a:05:11:5a:1e:7a:93:bf:21:a1: f3:78:a4:30:ca:7a:be:b8:bb:70:ee:c4:27:80:96:d2:98:db: 8f:be:0a:de:74:77:e2:3b:ca:a6:1c:42:16:ce:8c:31:09:de: c4:0a:a8:44:66:65:88:30:87:7e:e8:f2:c0:cb:f4:46:26:a6: 62:b0:ed:c6:70:21:b5:12:46:25:46:69:60:79:c2:4d:15:5e: 48:11:bc:72:cf:89:06:af:98:e4:ca:c9:97:b9:39:0f:4f:ba: 92:fa:fa:db:88:1c:55:e2:8c:77:f9:91:76:bd:6e:6d:d5:57: 49:92:9c:48:ad:8c:46:a5:d8:58:98:1c:dd:e7:b9:fc:06:59: e5:39:a3:76:44:e0:61:e6:99:74:bf:e7:19:09:ac:e9:31:c2: 87:d3:1e:75:84:74:74:c0:9f:e5:f5:eb:a7:87:1f:61:d8:15: b3:56:ef:12:48:73:87:32:c1:fd:05:87:7e:e9:1e:a0:e6:54: bf:bc:af:48:57:9f:91:b0:83:9b:c0:d3:2b:4b:a6:46:f2:e7: 7b:32:e5:e0:26:92:5e:38:d9:46:26:35:6b:39:ef:55:95:69: d7:eb:33:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0SYN4XnC8YcpPCcTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI2MDMwNTIyMDExOFoXDTI2MDYwMzIxMDExOFowLzEtMCsGA1UEAxMk YTU2YjI1ZWUtZjUzZi00NDFhLThhZTktYjk4MWU0YzZkM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DjPvvfaJOLm8D/hJHXzFU3l3LIBhdYA0OYP ieHiIWqLmPFiEXADbER4AaPa67wWTX7RR7bPCpCbyEmRTGsWF/dkzWGI7j4CCyIh 5BymeB+TIlAT64egIGAWCr5WKWiWaU3vtLWxzplLRRA1GhzLMcGpowORmR9vH/QS Qn4l0x2jpxyHMhD4C7ZxJM5YNWoJ2z+mzz76QxKYFWOx/sDKiVq93mgzPNZRrmSB LMWJZEH9UcL7qHnPw/WEI3KIBtL6T7QolZ8uoU+WnCte0VCOZwhqo30R1CBoVvNi AIpymRWeiFMb0QpDlN4u/VDtR9NcVJD9ArxSGOnykCCAvW2LXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNd/Esm2LNaYuejHY0NB12CQIPbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvM2Q0YTE4MTItNWE4YS0z ZGU4LTk5ZDctOWQ4ZmE2NWZlMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrwIAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIMaqwjt6tH/RsOiyTFmC9ExqIgFlqRKy96ymgURWh56k78hofN4 pDDKer64u3DuxCeAltKY24++Ct50d+I7yqYcQhbOjDEJ3sQKqERmZYgwh37o8sDL 9EYmpmKw7cZwIbUSRiVGaWB5wk0VXkgRvHLPiQavmOTKyZe5OQ9PupL6+tuIHFXi jHf5kXa9bm3VV0mSnEitjEal2FiYHN3nufwGWeU5o3ZE4GHmmXS/5xkJrOkxwofT HnWEdHTAn+X166eHH2HYFbNW7xJIc4cywf0Fh37pHqDmVL+8r0hXn5Gwg5vA0ytL pkby53sy5eAmkl442UYmNWs571WVadfrM04= -----END CERTIFICATE-----Generated at Thu Mar 26 11:08:34 2026 by rpki-client