$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa File: 2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa (raw, json) Hash identifier: lweKumFu6LndIT4ZcV3erMja5Kv4oAv9DttxxrGA28Q= Subject key identifier: 4E:6E:AF:2A:48:61:47:83:DA:24:C2:EC:07:A0:42:09:58:6E:42:03 Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F4328584D1F4A1889638A83EB5CECE344 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 1828 IP address blocks: 2605:f500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:18:89:63:8a:83:eb:5c:ec:e3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=fed087c3-5126-4911-baab-036b3e9015de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:31:57:bc:e8:3e:e7:53:96:cf:24:84:87:a3: bd:a3:fe:01:ab:2a:7f:a3:b1:72:d7:88:ad:67:90: 94:02:09:8c:3b:33:ef:34:89:86:0e:ef:79:06:ec: bc:35:19:f1:41:e8:59:6e:34:a4:21:25:aa:5c:f7: 7b:dd:b0:43:1e:6b:93:af:0e:99:16:52:d9:25:ac: 6d:95:fe:1e:bb:c2:88:5b:fd:b9:93:a4:4d:f9:a2: a0:20:5f:b3:d3:92:8b:64:ed:9d:09:30:6a:6a:e3: f8:3a:bc:c4:ad:a2:b2:a0:1b:ba:c8:8d:18:2d:ca: c0:5f:85:36:78:63:78:b8:e2:e9:8d:d7:87:70:51: 5e:02:12:66:bb:73:06:6c:ad:c6:09:a6:ed:23:63: 8e:75:ae:20:e6:5f:b5:46:2c:75:04:1f:83:6d:aa: 44:12:64:43:7e:5c:22:81:99:6f:44:f8:e3:2e:72: b3:ea:b9:ce:a3:0e:57:e6:0c:fd:fa:d0:cd:24:c9: 1f:7f:3c:4b:b8:7b:01:76:41:a4:51:74:9c:65:84: 42:dd:84:8d:9a:31:23:ac:b8:df:b8:97:be:d9:f8: d5:e3:93:61:6a:bf:1f:d0:78:8b:93:08:ce:97:4b: 20:00:2b:af:3d:90:2a:85:d6:66:39:fe:ce:31:13: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6E:AF:2A:48:61:47:83:DA:24:C2:EC:07:A0:42:09:58:6E:42:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv6: 2605:f500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:28:63:45:e8:91:4d:d1:86:8e:e0:a6:3f:83:8b:7d:43:cf: e6:ce:66:70:91:42:af:5f:f2:ca:4a:9a:27:5b:1c:2b:7e:a1: 19:b8:96:5a:42:4a:d0:b1:62:df:50:e7:09:99:a9:9a:aa:89: 71:95:ba:cd:03:5c:fc:41:a9:55:eb:91:45:cf:3c:82:c8:f0: f0:d2:3a:5c:c2:9d:b6:fd:b1:a1:ae:80:0a:8a:f8:a0:3b:62: 17:c5:9e:3a:d8:2d:1b:2f:b2:ba:ce:aa:43:e0:84:23:e0:4c: e4:03:66:5c:4c:6f:78:53:02:86:85:fe:5d:93:d4:6f:3e:e7: 00:a7:35:52:48:04:49:c2:30:51:67:5a:d5:2c:02:db:f9:3c: 83:e9:56:10:7c:21:56:9e:b0:81:57:fb:17:64:fc:9c:88:cb: 0e:99:ae:c8:8e:b6:fe:cc:bf:67:fa:b4:a3:a4:86:0b:c1:7f: 01:05:75:f9:6f:15:c3:55:3b:b2:8c:95:f6:ce:e6:f8:1f:ff: 53:c2:ed:07:ee:cf:cc:da:1b:af:0a:3b:59:00:9e:d9:49:cd: 85:7c:b4:63:c6:62:04:38:2f:12:3c:8b:68:3d:6b:e3:35:66: 0a:75:5c:75:6a:6c:e7:42:4f:1b:7d:9f:2e:b1:4f:77:7a:d4: 13:76:74:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fShiJY4qD61zs40QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZmVkMDg3YzMtNTEyNi00OTExLWJhYWItMDM2YjNlOTAxNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjFXvOg+51OWzySEh6O9o/4Bqyp/o7Fy14it Z5CUAgmMOzPvNImGDu95Buy8NRnxQehZbjSkISWqXPd73bBDHmuTrw6ZFlLZJaxt lf4eu8KIW/25k6RN+aKgIF+z05KLZO2dCTBqauP4OrzEraKyoBu6yI0YLcrAX4U2 eGN4uOLpjdeHcFFeAhJmu3MGbK3GCabtI2OOda4g5l+1Rix1BB+DbapEEmRDflwi gZlvRPjjLnKz6rnOow5X5gz9+tDNJMkffzxLuHsBdkGkUXScZYRC3YSNmjEjrLjf uJe+2fjV45Nhar8f0HiLkwjOl0sgACuvPZAqhdZmOf7OMRP/DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE5urypIYUeD2iTC7AegQglYbkIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvMjkyN2I0OGEtZjVmZC0z ZDg3LWE5NWEtMGI2MDVlNmIyZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX1AAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkoY0XokU3Rho7gpj+Di31Dz+bOZnCRQq9f8spKmidbHCt+oRm4 llpCStCxYt9Q5wmZqZqqiXGVus0DXPxBqVXrkUXPPILI8PDSOlzCnbb9saGugAqK +KA7YhfFnjrYLRsvsrrOqkPghCPgTOQDZlxMb3hTAoaF/l2T1G8+5wCnNVJIBEnC MFFnWtUsAtv5PIPpVhB8IVaesIFX+xdk/JyIyw6ZrsiOtv7Mv2f6tKOkhgvBfwEF dflvFcNVO7KMlfbO5vgf/1PC7Qfuz8zaG68KO1kAntlJzYV8tGPGYgQ4LxI8i2g9 a+M1Zgp1XHVqbOdCTxt9ny6xT3d61BN2dKQ= -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:30 2026 by rpki-client