$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/066a94a9-f717-34f2-8c42-142f5b062fb2.roa File: 066a94a9-f717-34f2-8c42-142f5b062fb2.roa (raw, json) Hash identifier: FmEweklZZW1cXPRp+67ScyydHRfrba8qanpBZXaqH44= Subject key identifier: 88:B9:8F:FB:AA:36:7B:06:42:40:03:07:DD:88:E2:D8:4D:5B:34:EC Certificate issuer: /CN=a4ae31f6-760c-4fae-baac-05fd22f7432d Certificate serial: 010D0C9F4328584D343A373FDE5801948F5FBB80 Authority key identifier: 83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/066a94a9-f717-34f2-8c42-142f5b062fb2.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 20273 IP address blocks: 2604:23a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:37:3f:de:58:01:94:8f:5f:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ae31f6-760c-4fae-baac-05fd22f7432d Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=0f3cd9a6-4323-47ae-91e0-942e3f58ee7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:e9:4c:bf:21:7a:92:2b:e9:dc:35:0a:3a: 88:37:60:f3:3b:67:19:98:d3:9f:09:e4:71:e9:70: b0:71:98:15:e9:5e:f6:6d:89:df:48:96:2d:47:42: 65:d4:06:d1:ab:48:f8:db:87:5f:99:1d:01:f6:76: 04:57:32:29:0e:90:26:29:2c:19:57:36:cc:21:9e: 2e:92:ed:46:ec:77:0c:36:01:6f:e0:e0:4d:94:7f: 61:af:d8:87:6a:65:7d:33:02:19:c9:1e:ab:79:ee: c9:2d:41:e9:f8:6f:f6:c1:fd:a3:c0:80:f2:3f:2d: fc:39:5d:c4:6d:63:55:bc:ad:3b:41:81:47:43:11: a0:a1:e4:0a:13:eb:74:01:6f:81:53:dd:ea:bb:97: a6:1d:f4:ff:64:8a:33:d7:e2:a3:9c:bd:64:47:22: 47:9d:51:df:16:92:c6:62:01:97:76:20:96:be:e4: a9:9a:f6:a8:d8:85:36:cc:54:5b:eb:12:2d:db:43: 78:ac:c2:48:a9:11:30:93:b2:1c:1a:0c:4a:7e:68: 03:ef:1f:a6:f8:33:12:d1:36:bf:c5:f6:6f:5e:5c: 33:0e:d0:91:d4:b6:ce:be:5c:70:82:47:c7:de:d0: 3d:52:2f:39:0d:3a:c9:9d:a7:56:22:8b:9b:1e:cd: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B9:8F:FB:AA:36:7B:06:42:40:03:07:DD:88:E2:D8:4D:5B:34:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/066a94a9-f717-34f2-8c42-142f5b062fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d/a4ae31f6-760c-4fae-baac-05fd22f7432d.crl X509v3 Authority Key Identifier: keyid:83:47:5A:4E:4B:9E:8D:34:02:FC:30:90:4A:93:FC:FD:D1:6A:5C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4ae31f6-760c-4fae-baac-05fd22f7432d.cer sbgp-ipAddrBlock: critical IPv6: 2604:23a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7b:d7:5b:f9:8b:ee:d6:bc:5f:bd:71:e2:ac:43:82:dc:ed: ea:02:00:56:2a:7a:c6:78:cc:3a:0c:ba:a8:55:50:93:ce:ea: aa:06:07:59:ce:8d:2c:d5:b3:9d:b6:aa:90:c0:7b:92:2b:15: 26:d9:fb:25:fb:c3:f0:8b:df:bd:72:bf:83:aa:9f:1c:29:de: 5d:e9:61:73:7d:22:d1:81:4e:68:c4:bb:2e:d9:2c:7a:3b:95: 12:6f:d2:84:c6:2b:42:50:51:60:93:89:40:11:f2:75:ae:fe: 78:a5:5f:c7:0f:aa:33:e5:fb:a5:12:27:6c:09:81:da:f7:65: b5:2b:c9:83:d4:08:61:d9:3c:8c:19:35:38:c5:04:c9:64:cd: e6:3b:8a:83:ac:bd:44:df:0c:66:e8:1b:c6:7d:a5:6d:27:a4: fc:d1:80:8a:0f:df:8b:66:be:fb:24:34:be:cf:33:7d:7e:d5: 6e:0d:d2:0d:b0:d5:fb:ac:82:1a:3f:9e:2e:1e:f4:bb:1b:cf: 8c:91:9b:1c:e4:f4:9f:28:06:50:cc:9c:f9:77:7f:c7:41:ec: 6c:78:89:e4:a8:e8:7a:2c:92:99:dc:37:45:f5:c4:cf:f5:9c: f6:bc:dd:0c:f9:2a:ea:be:aa:2b:c5:4f:6b:95:e1:42:d4:89: b8:d2:a4:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE00Ojc/3lgBlI9fu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRhZTMxZjYtNzYwYy00ZmFlLWJhYWMtMDVmZDIyZjc0 MzJkMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MGYzY2Q5YTYtNDMyMy00N2FlLTkxZTAtOTQyZTNmNThlZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMvpTL8hepIr6dw1CjqIN2DzO2cZmNOfCeRx 6XCwcZgV6V72bYnfSJYtR0Jl1AbRq0j424dfmR0B9nYEVzIpDpAmKSwZVzbMIZ4u ku1G7HcMNgFv4OBNlH9hr9iHamV9MwIZyR6ree7JLUHp+G/2wf2jwIDyPy38OV3E bWNVvK07QYFHQxGgoeQKE+t0AW+BU93qu5emHfT/ZIoz1+KjnL1kRyJHnVHfFpLG YgGXdiCWvuSpmvao2IU2zFRb6xIt20N4rMJIqREwk7IcGgxKfmgD7x+m+DMS0Ta/ xfZvXlwzDtCR1LbOvlxwgkfH3tA9Ui85DTrJnadWIoubHs2REwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIi5j/uqNnsGQkADB92I4thNWzTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGFl MzFmNi03NjBjLTRmYWUtYmFhYy0wNWZkMjJmNzQzMmQvMDY2YTk0YTktZjcxNy0z NGYyLThjNDItMTQyZjViMDYyZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRhZTMxZjYtNzYwYy00ZmFlLWJh YWMtMDVmZDIyZjc0MzJkL2E0YWUzMWY2LTc2MGMtNGZhZS1iYWFjLTA1ZmQyMmY3 NDMyZC5jcmwwHwYDVR0jBBgwFoAUg0daTkuejTQC/DCQSpP8/dFqXGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGFlMzFmNi03NjBjLTRmYWUtYmFhYy0wNWZk MjJmNzQzMmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQjoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYe9db+Yvu1rxfvXHirEOC3O3qAgBWKnrGeMw6DLqoVVCTzuqqBgdZ zo0s1bOdtqqQwHuSKxUm2fsl+8Pwi9+9cr+Dqp8cKd5d6WFzfSLRgU5oxLsu2Sx6 O5USb9KExitCUFFgk4lAEfJ1rv54pV/HD6oz5fulEidsCYHa92W1K8mD1Ahh2TyM GTU4xQTJZM3mO4qDrL1E3wxm6BvGfaVtJ6T80YCKD9+LZr77JDS+zzN9ftVuDdIN sNX7rIIaP54uHvS7G8+MkZsc5PSfKAZQzJz5d3/HQexseInkqOh6LJKZ3DdF9cTP 9Zz2vN0M+SrqvqorxU9rleFC1Im40qR0 -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:57 2026 by rpki-client