$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa File: ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa (raw, json) Hash identifier: 0Tg4J54FfZLdLTsGDoiPTdCI9SkJH77XD1l9MLzlKHU= Subject key identifier: A2:7D:2D:9E:ED:4E:94:F6:B9:2C:05:99:0A:C6:1E:94:72:0D:79:1A Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F4328584D44FA6802098286FA3E0D6FC0 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 2620:117:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:68:02:09:82:86:fa:3e:0d:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=9d202012-4702-442e-b8d5-a05fb3711700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:f3:73:92:ac:fc:f1:26:4e:5b:e2:0b:1e: 5a:64:f2:93:06:18:c3:74:ab:7e:3c:7b:33:d7:36: 4b:11:4c:45:eb:90:49:47:a7:8c:17:91:b8:72:9d: 6d:a1:3e:29:90:49:80:09:89:83:c0:39:ad:88:ed: 90:ac:4d:f6:ac:b9:0f:67:eb:ed:dc:96:8e:d5:9c: 86:e9:2c:18:d5:0a:d7:09:22:22:d3:7f:d9:a4:7f: e0:15:0e:a5:db:07:a3:15:22:ef:63:be:b8:fa:48: 0e:4e:b0:61:e4:be:8f:98:07:b7:ca:5e:5b:13:fc: 35:2b:29:c1:aa:a1:13:01:4d:65:b8:2e:05:4d:56: 44:0b:df:40:3d:7c:85:84:c1:a3:9d:94:c6:b7:33: d6:2d:92:b4:a4:79:42:ad:b0:98:10:ef:e4:31:78: 70:46:47:79:b2:f1:82:28:85:dd:c1:b1:92:1d:78: 48:a2:5c:a4:b2:0e:c1:ff:35:89:16:e0:f8:4a:bc: a4:ae:b9:e9:c2:a6:6e:e6:59:ad:da:80:d0:41:e7: 32:24:24:86:90:b3:8d:ed:cc:32:0a:3f:b3:bd:92: 2d:36:3f:f9:83:6f:9d:2d:af:cb:46:45:9a:c4:7a: 03:07:95:c4:d7:2b:43:ab:22:bc:6d:72:b5:cc:08: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7D:2D:9E:ED:4E:94:F6:B9:2C:05:99:0A:C6:1E:94:72:0D:79:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:5200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:71:81:69:ac:82:c0:81:3f:a8:87:18:99:bd:31:64:2a:46: fd:e4:8e:45:dd:11:31:63:fc:4d:64:5c:3e:e5:a8:9e:80:b5: e6:fa:f0:d3:d1:4f:7a:26:61:98:b8:ca:bd:70:15:63:9b:aa: 29:7e:aa:84:29:07:37:16:e9:29:93:21:c1:d2:e3:e4:cf:c7: 3b:04:97:2c:27:24:f8:43:5c:6b:94:f2:18:cc:67:1b:84:a0: 15:8e:fc:aa:16:be:a4:e4:a2:e1:24:1c:33:83:c7:b4:5e:f1: 7d:1c:16:61:9b:f2:5e:8c:81:3f:f5:67:d9:0d:10:e5:f6:70: e2:20:53:5b:d8:e8:f3:e4:1e:c1:fe:f3:ad:bb:e0:7e:93:06: 5d:ee:78:a1:f8:17:c5:9f:9c:f0:bb:7d:f8:52:1e:9b:12:50: ef:04:d5:f5:c1:a2:70:cf:7b:f6:3f:22:e8:73:18:08:c3:66: 92:62:35:a4:fc:6c:f7:de:b8:35:9d:79:6b:2d:25:a1:33:c5: eb:bd:71:2c:ec:14:90:81:f3:ab:56:d7:3e:dd:a2:90:b7:c6: 56:af:4e:d2:bf:28:af:0b:fd:24:e4:a2:6d:2a:26:31:f4:d8: e4:97:36:00:86:c8:62:35:4c:55:c2:eb:5b:87:14:5d:fc:83: 57:4b:26:9b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1E+mgCCYKG+j4Nb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OWQyMDIwMTItNDcwMi00NDJlLWI4ZDUtYTA1ZmIzNzExNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshbzc5Ks/PEmTlviCx5aZPKTBhjDdKt+PHsz 1zZLEUxF65BJR6eMF5G4cp1toT4pkEmACYmDwDmtiO2QrE32rLkPZ+vt3JaO1ZyG 6SwY1QrXCSIi03/ZpH/gFQ6l2wejFSLvY764+kgOTrBh5L6PmAe3yl5bE/w1KynB qqETAU1luC4FTVZEC99APXyFhMGjnZTGtzPWLZK0pHlCrbCYEO/kMXhwRkd5svGC KIXdwbGSHXhIolyksg7B/zWJFuD4SrykrrnpwqZu5lmt2oDQQecyJCSGkLON7cwy Cj+zvZItNj/5g2+dLa/LRkWaxHoDB5XE1ytDqyK8bXK1zAhBGwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKJ9LZ7tTpT2uSwFmQrGHpRyDXkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvY2EzZTg5OWQtZTcyNC0z NWU4LThiNDMtY2JkYmU3YzkyZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABF1Iw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA0HGBaayCwIE/qIcYmb0xZCpG/eSORd0RMWP8TWRcPuWonoC15vrw 09FPeiZhmLjKvXAVY5uqKX6qhCkHNxbpKZMhwdLj5M/HOwSXLCck+ENca5TyGMxn G4SgFY78qha+pOSi4SQcM4PHtF7xfRwWYZvyXoyBP/Vn2Q0Q5fZw4iBTW9jo8+Qe wf7zrbvgfpMGXe54ofgXxZ+c8Lt9+FIemxJQ7wTV9cGicM979j8i6HMYCMNmkmI1 pPxs9964NZ15ay0loTPF671xLOwUkIHzq1bXPt2ikLfGVq9O0r8orwv9JOSibSom MfTY5Jc2AIbIYjVMVcLrW4cUXfyDV0smmw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:12 2026 by rpki-client