$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa File: d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa (raw, json) Hash identifier: Yoiu0tdlHl2XP9jrsNsrIGHSoFwdMY+56TDIzanxNyk= Subject key identifier: D3:86:D5:BE:79:E8:10:6C:40:E2:24:25:EB:AD:14:2D:5C:44:A1:64 Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F4328584D2BDA1EAB8D4E55973396BE40 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 399358 IP address blocks: 2607:6bc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1e:ab:8d:4e:55:97:33:96:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=1cd4e881-3140-4b19-9bd5-b2c4a62b7087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f3:7d:20:10:fd:89:e0:2a:a4:ee:7e:27:53: 7c:1a:ab:f7:31:7e:2f:25:5b:de:4f:fb:bf:7a:75: 2d:a8:4f:cd:dc:98:72:d0:db:78:8c:10:75:df:80: 2a:f4:21:e1:27:c9:57:2b:2d:58:bc:88:82:01:9d: 1a:97:6b:1f:59:07:91:ba:f5:03:dd:04:97:29:85: 8a:38:b2:fe:b0:99:8c:a9:3f:e9:de:ca:b0:4f:06: d0:1b:40:7a:e5:cd:c6:67:73:99:c1:fe:52:01:73: f5:38:bb:b0:66:7b:ab:95:dd:3f:e0:1e:62:87:72: a8:46:93:4e:f9:52:60:35:53:66:57:4c:24:11:e4: 43:6e:8e:79:33:47:24:9a:e3:1d:3c:5e:d1:39:36: cf:63:32:ad:88:c8:18:8d:d3:11:85:d3:c0:91:70: de:01:e9:93:2b:3e:61:c3:81:6d:78:f8:fb:75:02: 2e:11:b0:6e:c6:2b:70:43:f5:9d:5b:10:45:1f:f2: 1d:9b:1e:f1:a9:98:98:6d:a7:a9:07:41:05:b3:08: 3a:3b:6a:dd:4d:3d:fe:cf:a1:96:20:04:e5:4e:77: 2e:b1:18:87:50:b7:d3:ae:8d:77:28:41:20:1b:4e: 8d:93:89:de:b8:12:9a:12:41:35:16:29:4e:64:19: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:D5:BE:79:E8:10:6C:40:E2:24:25:EB:AD:14:2D:5C:44:A1:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:91:24:f5:ff:13:63:99:08:20:f8:a8:41:de:2f:17:b5:43: 17:69:43:e0:d5:3e:ea:dd:77:4f:a0:f3:31:d4:51:aa:79:85: fc:6f:80:d9:32:16:15:b2:58:d4:ff:fc:db:2b:f2:41:f4:dc: 60:3a:01:8d:77:ae:6f:60:e8:78:0b:1d:32:d7:03:57:ed:90: 6e:2e:b7:14:19:96:1a:9a:51:e4:13:a7:51:57:79:14:7c:e5: 87:b3:e6:b8:1d:48:3d:69:10:70:33:42:df:0c:e7:31:62:d4: df:14:a9:a0:1a:fd:72:b2:92:7c:ba:73:9f:0a:a7:56:47:99: 1e:65:f9:f2:5c:0d:eb:5e:63:79:6f:3e:4d:63:ed:f2:eb:56: c8:b4:02:c7:bc:02:00:66:34:ca:b0:fb:9a:10:7a:a0:6f:73: 5e:69:2e:d1:f5:05:b3:e2:20:38:71:77:7d:d7:db:6b:ac:56: 40:e0:99:15:91:9a:dd:ba:8d:94:1c:7e:34:6b:d5:08:74:82: e8:9f:b2:c3:2e:d4:08:d5:1f:43:dd:07:74:3e:d1:ea:34:be: f8:34:e7:cd:05:27:f3:5a:ad:fe:67:c0:7b:26:2c:a0:ed:ec: 4b:89:7f:3e:63:a3:ba:c4:fc:91:de:66:85:cc:32:60:a8:42: 0f:79:37:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0r2h6rjU5VlzOWvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MWNkNGU4ODEtMzE0MC00YjE5LTliZDUtYjJjNGE2MmI3MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivN9IBD9ieAqpO5+J1N8Gqv3MX4vJVveT/u/ enUtqE/N3Jhy0Nt4jBB134Aq9CHhJ8lXKy1YvIiCAZ0al2sfWQeRuvUD3QSXKYWK OLL+sJmMqT/p3sqwTwbQG0B65c3GZ3OZwf5SAXP1OLuwZnurld0/4B5ih3KoRpNO +VJgNVNmV0wkEeRDbo55M0ckmuMdPF7ROTbPYzKtiMgYjdMRhdPAkXDeAemTKz5h w4FtePj7dQIuEbBuxitwQ/WdWxBFH/Idmx7xqZiYbaepB0EFswg6O2rdTT3+z6GW IATlTncusRiHULfTro13KEEgG06Nk4neuBKaEkE1FilOZBk5EQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNOG1b556BBsQOIkJeutFC1cRKFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvZDIwNzc1YzMtZThjNi0z NjcwLWJjYWEtN2Y3ZTY4Y2ViZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBekST1/xNjmQgg+KhB3i8XtUMXaUPg1T7q3XdPoPMx1FGqeYX8b4DZ MhYVsljU//zbK/JB9NxgOgGNd65vYOh4Cx0y1wNX7ZBuLrcUGZYamlHkE6dRV3kU fOWHs+a4HUg9aRBwM0LfDOcxYtTfFKmgGv1yspJ8unOfCqdWR5keZfnyXA3rXmN5 bz5NY+3y61bItALHvAIAZjTKsPuaEHqgb3NeaS7R9QWz4iA4cXd919trrFZA4JkV kZrduo2UHH40a9UIdILon7LDLtQI1R9D3Qd0PtHqNL74NOfNBSfzWq3+Z8B7Jiyg 7exLiX8+Y6O6xPyR3maFzDJgqEIPeTdO -----END CERTIFICATE-----Generated at Thu Mar 26 05:46:35 2026 by rpki-client