$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/1c17f3f2-82ac-3f07-b5c2-00ef0a3a94fa.roa File: 1c17f3f2-82ac-3f07-b5c2-00ef0a3a94fa.roa (raw, json) Hash identifier: B8i+6MPxMo9qaca8pP1z4iidee2WkEzFxJvYCYbaAqY= Subject key identifier: 02:49:E4:55:73:98:0B:9A:72:FD:D7:3A:4A:B9:85:8C:07:F9:A0:2A Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F4328584D1F4A167FEEB3B3148732B280 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/1c17f3f2-82ac-3f07-b5c2-00ef0a3a94fa.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 1828 IP address blocks: 2605:f500:106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:16:7f:ee:b3:b3:14:87:32:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=f0dd47fc-1335-4fa4-9e89-3033ffec154b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:09:b2:98:ca:09:5d:39:6b:ca:69:00:b4: a5:77:6d:6e:ad:14:ce:78:cc:73:64:af:a3:6d:51: d8:1a:83:28:bc:6c:de:31:2e:eb:e0:f7:cf:27:cf: 3d:4b:8f:44:6a:db:76:47:18:4a:8d:8b:3a:98:c2: 14:ae:a9:2b:34:45:fe:d0:f3:30:11:97:0f:e9:cf: 4b:d1:f8:eb:b7:6d:cd:e6:18:ea:fc:bc:36:1a:75: 47:10:9e:74:91:4e:f5:e0:ee:11:78:d5:19:55:c4: ea:73:f9:d8:01:d3:07:e7:e5:c8:3e:87:d9:dc:31: 56:ae:f4:f3:64:2e:db:9a:50:0a:90:cf:bf:c7:6e: 5b:78:83:ea:a1:eb:87:71:b2:45:4c:b2:d1:cb:0f: 37:fd:91:a3:c7:64:70:16:42:54:0b:8b:17:ee:49: af:7c:25:6a:27:5a:bf:87:15:f7:2d:32:e9:1b:3e: 86:ec:49:b9:dc:9d:3a:74:9f:30:88:bd:1c:2c:c1: ce:47:b7:cd:2f:c4:97:0b:46:2a:29:fd:ee:e9:99: d5:32:97:1b:eb:ca:29:ab:bc:66:c1:9a:9a:52:6f: 0f:2a:8b:97:c6:63:ca:cb:af:e5:10:09:f4:06:57: 28:d9:3c:0e:bf:1a:51:38:e7:e6:29:6d:91:f1:46: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:49:E4:55:73:98:0B:9A:72:FD:D7:3A:4A:B9:85:8C:07:F9:A0:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/1c17f3f2-82ac-3f07-b5c2-00ef0a3a94fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv6: 2605:f500:106::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e4:c0:50:d4:be:d2:5e:72:97:dc:61:10:23:36:3b:43:c1: 93:86:92:4b:04:a0:bd:26:42:65:c9:a7:cf:80:b1:08:9f:28: 8f:63:f7:d4:09:ba:dc:78:4f:15:b3:c8:c2:33:cc:2f:4b:4c: 7c:73:7e:63:88:54:13:d4:27:74:7b:58:33:f5:76:49:82:af: ad:3b:0b:2e:e5:1b:64:19:fc:75:e4:cc:b6:ef:7a:14:d5:24: 6d:ac:56:db:35:c3:1e:c0:eb:95:3b:87:ee:04:f5:af:c7:81: 78:af:f4:37:0d:a0:e8:34:51:b2:bb:98:29:d3:99:8b:23:19: af:af:ff:1c:05:fa:32:db:c1:44:f5:0e:96:b0:2b:0a:b6:b0: fc:c5:3a:e6:97:55:84:14:eb:45:48:7a:82:b9:be:0f:72:b5: 9f:58:ba:17:a8:77:94:44:01:c9:13:21:29:48:66:e6:62:75: d6:d3:27:0f:67:b1:12:61:08:ed:c1:c3:5e:6b:08:8d:b9:ab: 4d:03:0a:25:eb:40:bd:ad:b3:66:4e:7f:e4:23:82:dc:ba:d8: 35:ac:2b:e5:22:22:08:e2:7f:44:3c:0d:51:26:27:04:2d:a0: 3d:40:15:0d:32:25:db:09:62:f2:b0:5e:26:a7:df:d1:a4:4d: 2b:0a:f4:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fShZ/7rOzFIcysoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZjBkZDQ3ZmMtMTMzNS00ZmE0LTllODktMzAzM2ZmZWMxNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpgJspjKCV05a8ppALSld21urRTOeMxzZK+j bVHYGoMovGzeMS7r4PfPJ889S49Eatt2RxhKjYs6mMIUrqkrNEX+0PMwEZcP6c9L 0fjrt23N5hjq/Lw2GnVHEJ50kU714O4ReNUZVcTqc/nYAdMH5+XIPofZ3DFWrvTz ZC7bmlAKkM+/x25beIPqoeuHcbJFTLLRyw83/ZGjx2RwFkJUC4sX7kmvfCVqJ1q/ hxX3LTLpGz6G7Em53J06dJ8wiL0cLMHOR7fNL8SXC0YqKf3u6ZnVMpcb68opq7xm wZqaUm8PKouXxmPKy6/lEAn0Blco2TwOvxpROOfmKW2R8UYRBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJJ5FVzmAuacv3XOkq5hYwH+aAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvMWMxN2YzZjItODJhYy0z ZjA3LWI1YzItMDBlZjBhM2E5NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX1AAEG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPkwFDUvtJecpfcYRAjNjtDwZOGkksEoL0mQmXJp8+AsQifKI9j 99QJutx4TxWzyMIzzC9LTHxzfmOIVBPUJ3R7WDP1dkmCr607Cy7lG2QZ/HXkzLbv ehTVJG2sVts1wx7A65U7h+4E9a/HgXiv9DcNoOg0UbK7mCnTmYsjGa+v/xwF+jLb wUT1DpawKwq2sPzFOuaXVYQU60VIeoK5vg9ytZ9Yuheod5REAckTISlIZuZiddbT Jw9nsRJhCO3Bw15rCI25q00DCiXrQL2ts2ZOf+Qjgty62DWsK+UiIgjif0Q8DVEm JwQtoD1AFQ0yJdsJYvKwXian39GkTSsK9CU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:38 2026 by rpki-client