$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa File: 43d013ec-a6c3-3388-8d14-0791322dd8c0.roa (raw, json) Hash identifier: E8FcaXFRdL+Ac0T+ZNWIw05XPt+kvp8+Cc9YHefVmAk= Subject key identifier: 31:B7:7F:E1:8E:AE:08:83:7D:60:74:AA:8D:EF:23:B5:50:59:FB:E7 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584D117262F911DD7054BF5DE480 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 399889 IP address blocks: 2602:fc54::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:62:f9:11:dd:70:54:bf:5d:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=ff8b8147-c4d6-438b-8197-6d159937da82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7e:21:c7:4f:5c:41:b8:1d:02:be:cc:02:3b: da:1e:7b:33:8c:00:12:cf:fc:08:11:8b:15:12:85: 70:03:13:d2:7a:f1:a3:3c:3f:2f:80:4e:1a:1e:48: 0e:fc:ea:fa:bf:5e:a1:de:bd:15:28:f4:cd:f5:1a: 99:80:c0:85:04:6b:a0:5b:cd:e1:70:33:f2:7f:77: a9:e1:15:7e:9d:da:5c:65:fc:3e:e7:6e:32:e6:15: 58:cd:5d:3f:79:e0:c4:b4:4e:c3:0e:ef:27:a2:d2: bd:b5:e0:fa:ea:a4:31:3d:a2:ec:d6:5f:06:ae:00: 47:31:fa:a0:0a:bf:88:7b:f4:b3:ba:14:3f:9d:5d: 69:d2:a0:e7:d5:f6:55:04:26:64:56:2b:93:bb:9b: 13:12:80:84:de:57:09:b9:4f:cf:32:be:b6:d4:7b: 78:df:14:c4:6e:96:17:89:bd:ca:c2:91:96:5c:be: 6c:7c:6a:60:07:0a:7c:48:31:de:7d:11:d7:41:91: 26:94:50:24:dd:f7:51:e3:37:6f:63:6c:a7:80:1d: 98:86:4d:9d:68:d3:f1:bb:53:1e:09:2c:6c:b7:1f: 4e:e6:75:39:13:a6:9b:dd:63:4b:dc:5f:9d:74:1a: a4:b5:86:b4:ff:a6:c1:2c:d5:c6:97:f7:4b:06:c1: 36:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B7:7F:E1:8E:AE:08:83:7D:60:74:AA:8D:EF:23:B5:50:59:FB:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc54::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9a:a9:d9:27:e8:be:5f:7d:99:96:12:fb:5e:9f:79:72:87: 3b:4d:09:64:ff:e2:e4:48:3a:18:3d:24:2d:9d:5a:04:78:40: 3c:8c:8e:cf:6b:f4:1f:f9:81:d4:da:b5:15:3e:65:48:5b:13: 51:e0:7b:62:ab:0a:6b:92:a5:16:c3:df:7b:9d:9d:3b:22:a4: 9e:3b:dd:0a:ca:54:d8:3b:20:d0:83:bf:16:5c:a6:c0:45:1c: b4:a7:f7:8d:3a:2f:1e:7f:47:b9:54:b4:72:6a:9f:21:e2:29: f8:c6:df:f5:84:09:38:2e:71:f0:2b:2b:d1:70:67:34:2c:01: 73:43:cb:88:cb:7a:57:31:d1:9d:2d:ce:58:03:63:6d:d2:dd: 9f:66:7b:90:f2:ec:41:e3:dd:f9:fa:a8:f2:53:0e:e1:52:52: 1f:e6:c9:ed:f0:7f:af:f0:0f:59:5f:3f:8e:62:50:df:5a:f4: a9:57:f5:6c:82:e4:b9:52:cd:2a:1a:b7:98:2b:b8:8f:a0:bc: 4f:0a:18:a4:1c:48:30:79:9a:de:e5:d3:3d:8e:e3:18:ec:cc: ac:5d:59:c0:4e:93:f8:09:66:83:65:7b:96:de:d5:e5:cc:65: 6d:98:49:14:f4:00:7e:e7:89:df:5a:6b:6e:ba:94:2d:ac:8c: da:2a:cf:3d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0RcmL5Ed1wVL9d5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZmY4YjgxNDctYzRkNi00MzhiLTgxOTctNmQxNTk5MzdkYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn4hx09cQbgdAr7MAjvaHnszjAASz/wIEYsV EoVwAxPSevGjPD8vgE4aHkgO/Or6v16h3r0VKPTN9RqZgMCFBGugW83hcDPyf3ep 4RV+ndpcZfw+524y5hVYzV0/eeDEtE7DDu8notK9teD66qQxPaLs1l8GrgBHMfqg Cr+Ie/SzuhQ/nV1p0qDn1fZVBCZkViuTu5sTEoCE3lcJuU/PMr621Ht43xTEbpYX ib3KwpGWXL5sfGpgBwp8SDHefRHXQZEmlFAk3fdR4zdvY2yngB2Yhk2daNPxu1Me CSxstx9O5nU5E6ab3WNL3F+ddBqktYa0/6bBLNXGl/dLBsE2qwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDG3f+GOrgiDfWB0qo3vI7VQWfvnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvNDNkMDEzZWMtYTZjMy0z Mzg4LThkMTQtMDc5MTMyMmRkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8VAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARpqp2Sfovl99mZYS+16feXKHO00JZP/i5Eg6GD0kLZ1aBHhAPIyO z2v0H/mB1Nq1FT5lSFsTUeB7YqsKa5KlFsPfe52dOyKknjvdCspU2Dsg0IO/Flym wEUctKf3jTovHn9HuVS0cmqfIeIp+Mbf9YQJOC5x8Csr0XBnNCwBc0PLiMt6VzHR nS3OWANjbdLdn2Z7kPLsQePd+fqo8lMO4VJSH+bJ7fB/r/APWV8/jmJQ31r0qVf1 bILkuVLNKhq3mCu4j6C8TwoYpBxIMHma3uXTPY7jGOzMrF1ZwE6T+Almg2V7lt7V 5cxlbZhJFPQAfueJ31prbrqULayM2irPPQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:16 2026 by rpki-client