$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa File: dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa (raw, json) Hash identifier: y3D7sxnATHudfjsJ9uLJi3gYFGLxgkNtR8DLoEgwf3Y= Subject key identifier: D2:FD:65:E0:C4:1C:77:B8:A3:5F:7D:13:1E:01:4D:59:64:BF:FF:A1 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584D316F7CEB0C05F72C7C4D5F00 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 22709 IP address blocks: 2605:280::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:7c:eb:0c:05:f7:2c:7c:4d:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=4b30d299-0660-4cbd-8749-bd90e07c6200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:43:30:1c:5f:57:a1:33:0a:a5:1c:f1:74: 40:6e:76:90:82:0a:fa:13:d5:db:22:02:f2:07:3e: e1:d5:9c:5a:ff:7f:e9:53:50:6f:8c:51:0c:e7:fb: a8:97:fd:e9:b5:f9:dc:3d:e3:12:ef:94:bb:e9:c7: 77:39:bc:9e:5d:ac:e5:76:b3:7e:87:0f:9a:99:39: 4f:82:28:09:c2:5f:c4:b0:54:2a:40:73:ab:0f:64: bc:29:f5:f1:9a:6a:c5:c9:df:94:c4:72:ca:f2:bc: d4:ba:fd:17:a6:40:5c:db:7e:c3:d6:a7:a2:c6:b6: ef:e4:2a:59:74:20:8c:54:78:f7:8a:d9:89:10:13: 5d:4c:61:e6:35:bd:8a:b5:ab:94:84:7e:ba:1c:f0: 1c:21:25:29:a4:22:7a:26:a9:b2:ef:16:d4:7d:0a: 81:8a:ab:64:79:18:e0:ff:43:d6:67:06:9e:c9:1c: c9:23:e0:92:aa:64:91:29:a0:46:a6:03:2e:c4:cd: 90:d2:3e:65:3c:79:05:8b:84:db:ab:da:d1:62:08: fb:97:0c:c6:23:ab:7c:aa:1c:ce:56:ea:03:3d:6c: 59:50:8f:1a:ce:37:2d:52:63:ee:db:dd:66:55:8b: 86:90:b2:af:b3:ec:ce:6c:dc:b1:c8:9d:a1:77:0c: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FD:65:E0:C4:1C:77:B8:A3:5F:7D:13:1E:01:4D:59:64:BF:FF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/dc7a4196-26da-3b6b-a999-e244c05cb9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv6: 2605:280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:09:72:0f:34:a2:e0:55:1c:56:48:9e:81:e9:02:c0:5b:01: 84:8a:38:f5:fc:a3:f3:b4:54:20:c2:fd:a8:0f:4d:79:07:64: 78:3c:85:d4:af:94:3c:f4:fb:4d:71:87:99:65:56:ba:01:74: 13:54:ae:ce:e0:f3:20:f3:54:de:38:97:6a:ca:ca:c9:79:ea: d7:18:36:1d:93:78:91:27:27:89:a8:58:36:a4:2b:14:b9:a6: 6c:6b:c0:45:44:51:12:8e:c3:1f:85:ff:9d:29:a4:40:13:2b: ba:fb:2d:c2:10:44:2d:fa:b2:c4:ac:22:8e:84:67:b2:15:9f: b5:99:c2:07:27:d6:ba:5a:b4:a2:78:d0:b7:18:c2:ab:36:12: 2b:71:f1:2a:50:4c:50:cf:50:37:4f:d1:9d:ce:54:4d:31:7f: 25:e8:79:4d:ea:2d:33:9e:a7:6d:6a:9e:df:99:e6:64:66:d6: d0:c4:c1:5a:12:b7:8d:f0:6c:70:fd:e9:df:98:8d:b9:9f:f8: 8b:e4:52:ab:15:3a:eb:1f:c0:34:f8:ca:f7:ca:d9:46:4a:d0: 37:c4:dc:19:8f:c4:b7:c5:8b:29:cf:2c:94:22:fc:99:56:c5: 38:4a:6f:26:cb:ba:8c:62:80:59:73:58:d9:30:86:5a:20:07: 93:88:1c:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0xb3zrDAX3LHxNXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NGIzMGQyOTktMDY2MC00Y2JkLTg3NDktYmQ5MGUwN2M2MjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmghDMBxfV6EzCqUc8XRAbnaQggr6E9XbIgLy Bz7h1Zxa/3/pU1BvjFEM5/uol/3ptfncPeMS75S76cd3ObyeXazldrN+hw+amTlP gigJwl/EsFQqQHOrD2S8KfXxmmrFyd+UxHLK8rzUuv0XpkBc237D1qeixrbv5CpZ dCCMVHj3itmJEBNdTGHmNb2KtauUhH66HPAcISUppCJ6Jqmy7xbUfQqBiqtkeRjg /0PWZwaeyRzJI+CSqmSRKaBGpgMuxM2Q0j5lPHkFi4Tbq9rRYgj7lwzGI6t8qhzO VuoDPWxZUI8azjctUmPu291mVYuGkLKvs+zObNyxyJ2hdww/vwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNL9ZeDEHHe4o199Ex4BTVlkv/+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvZGM3YTQxOTYtMjZkYS0z YjZiLWE5OTktZTI0NGMwNWNiOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA5CXIPNKLgVRxWSJ6B6QLAWwGEijj1/KPztFQgwv2oD015B2R4PIXU r5Q89PtNcYeZZVa6AXQTVK7O4PMg81TeOJdqysrJeerXGDYdk3iRJyeJqFg2pCsU uaZsa8BFRFESjsMfhf+dKaRAEyu6+y3CEEQt+rLErCKOhGeyFZ+1mcIHJ9a6WrSi eNC3GMKrNhIrcfEqUExQz1A3T9GdzlRNMX8l6HlN6i0znqdtap7fmeZkZtbQxMFa EreN8Gxw/enfmI25n/iL5FKrFTrrH8A0+Mr3ytlGStA3xNwZj8S3xYspzyyUIvyZ VsU4Sm8my7qMYoBZc1jZMIZaIAeTiBz/ -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:30 2026 by rpki-client