$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa File: a43a41c8-9815-3189-85dc-d60e1985a8f9.roa (raw, json) Hash identifier: Zetb9q7hShpToESnZoBBs8ViGU65tjNyYIjViAMq9iI= Subject key identifier: FA:EB:96:9A:91:27:79:4B:D3:B3:71:B6:76:59:C6:A8:DA:AD:19:19 Certificate issuer: /CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Certificate serial: 010D0C9F4328584D44FA441A2D48CBB0D43E7BC0 Authority key identifier: CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16430 IP address blocks: 2620:f4:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:44:1a:2d:48:cb:b0:d4:3e:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=9fcef6d2-8e25-4e96-973d-ac0e3ace4e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:3f:1a:cd:d0:fa:1b:5a:ff:6c:b0:fd:2a: e8:10:58:90:d0:ff:7e:4f:4a:b5:a7:ac:22:7e:6f: d3:73:25:99:49:7b:b4:19:8c:43:87:59:4d:77:63: 94:95:75:4c:39:c4:7a:28:f4:d2:69:a4:c6:11:04: 9a:1a:72:85:be:e6:a3:19:66:06:ff:85:4c:be:db: 28:6e:09:b9:95:d9:c6:43:48:9c:9c:15:d2:64:38: 46:e0:6a:39:6b:60:90:12:5a:11:cb:38:16:4a:fd: e3:ab:90:a2:13:6f:40:13:98:c8:29:9e:ea:f8:80: b0:36:9c:ac:fc:03:06:e7:9e:2c:30:c5:89:77:ec: 0a:ec:ed:76:91:60:d6:eb:91:ef:1d:e3:08:37:f6: e7:34:8d:9e:74:32:48:00:a4:db:53:b8:31:7a:a3: 68:49:df:e7:fa:25:0a:69:56:02:ca:6e:7d:f6:3f: 93:de:29:2a:8e:f6:df:12:28:ec:5c:26:67:8e:33: a2:65:6d:5f:e1:b0:fe:07:ca:35:c5:b8:64:7f:e9: 51:4b:0d:4c:e7:1b:90:97:29:e7:9c:7c:0e:33:33: 59:29:56:84:c6:60:33:c1:7a:6d:6d:14:66:dc:15: ad:41:05:dc:e3:ac:9d:59:75:3e:99:6e:2e:b1:00: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EB:96:9A:91:27:79:4B:D3:B3:71:B6:76:59:C6:A8:DA:AD:19:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl X509v3 Authority Key Identifier: keyid:CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:f4:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:89:0b:fb:2a:b2:e1:1d:ee:b5:14:52:b7:c4:62:4a:a9:28: 2e:16:7c:ad:6a:61:1e:63:b1:ff:ff:df:fa:6c:61:0b:99:ac: 49:11:91:8c:25:ba:1a:3d:9b:c1:e6:3a:ee:a2:8f:79:f3:da: cd:41:71:8e:02:60:05:03:3b:0e:31:22:3f:c6:ae:60:a9:89: 33:76:e4:5f:95:64:3c:94:fc:25:50:17:ef:2d:ce:fc:45:ad: e5:1e:b8:e4:b0:07:a9:51:1c:7e:e5:23:52:b4:0b:7a:e3:18: 51:84:5d:58:f2:3e:18:7a:44:50:cc:49:d5:d9:81:35:64:a5: 10:b3:c6:38:01:f5:12:2d:ea:81:25:e0:a4:bf:a1:8b:4e:8b: 55:bd:3e:0d:c1:9f:bf:80:c3:34:47:37:ea:f6:d9:d5:e7:e1: 5d:99:9c:9b:15:23:02:e8:96:42:c4:ad:61:3c:24:2e:99:b6: fd:1c:0e:4b:62:95:4d:f9:c0:47:26:60:f9:db:fe:c3:64:2a: fc:2a:a7:09:08:7e:af:ce:e4:20:93:24:68:e9:25:c5:01:97: f8:e6:95:dc:12:e0:40:16:77:89:f7:1b:d6:34:26:eb:b7:60: cb:48:22:cd:d1:8e:72:1f:33:82:27:0e:71:c8:1e:14:0a:a7: ee:19:6d:51 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1E+kQaLUjLsNQ+e8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU3OTcxYjUtODgyZi00OGNjLWIxMjMtYjg0ZDdiOWI4 YzViMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OWZjZWY2ZDItOGUyNS00ZTk2LTk3M2QtYWMwZTNhY2U0ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmog/Gs3Q+hta/2yw/SroEFiQ0P9+T0q1p6wi fm/TcyWZSXu0GYxDh1lNd2OUlXVMOcR6KPTSaaTGEQSaGnKFvuajGWYG/4VMvtso bgm5ldnGQ0icnBXSZDhG4Go5a2CQEloRyzgWSv3jq5CiE29AE5jIKZ7q+ICwNpys /AMG554sMMWJd+wK7O12kWDW65HvHeMIN/bnNI2edDJIAKTbU7gxeqNoSd/n+iUK aVYCym599j+T3ikqjvbfEijsXCZnjjOiZW1f4bD+B8o1xbhkf+lRSw1M5xuQlynn nHwOMzNZKVaExmAzwXptbRRm3BWtQQXc46ydWXU+mW4usQDANwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPrrlpqRJ3lL07NxtnZZxqjarRkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5 NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRkN2I5YjhjNWIvYTQzYTQxYzgtOTgxNS0z MTg5LTg1ZGMtZDYwZTE5ODVhOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmU3OTcxYjUtODgyZi00OGNjLWIx MjMtYjg0ZDdiOWI4YzViL2ZlNzk3MWI1LTg4MmYtNDhjYy1iMTIzLWI4NGQ3Yjli OGM1Yi5jcmwwHwYDVR0jBBgwFoAUy5bUIW8WkMzqeX0Tn+eTv/wdqUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRk N2I5YjhjNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAA9EAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYokL+yqy4R3utRRSt8RiSqkoLhZ8rWphHmOx///f+mxhC5msSRGR jCW6Gj2bweY67qKPefPazUFxjgJgBQM7DjEiP8auYKmJM3bkX5VkPJT8JVAX7y3O /EWt5R645LAHqVEcfuUjUrQLeuMYUYRdWPI+GHpEUMxJ1dmBNWSlELPGOAH1Ei3q gSXgpL+hi06LVb0+DcGfv4DDNEc36vbZ1efhXZmcmxUjAuiWQsStYTwkLpm2/RwO S2KVTfnARyZg+dv+w2Qq/CqnCQh+r87kIJMkaOklxQGX+OaV3BLgQBZ3ifcb1jQm 67dgy0gizdGOch8zgicOccgeFAqn7hltUQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:22 2026 by rpki-client