$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa File: a2d5db0b-200d-364d-a412-c50d76bffc06.roa (raw, json) Hash identifier: fl4DkkjVrELigEN9mna7cPbk71u+uy8HjRL6XHVGhw4= Subject key identifier: E6:14:1A:61:27:9A:CC:E2:4F:12:27:79:91:D8:41:6D:2B:05:0E:C0 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584D422F858C71020C48C9F6A300 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 393844 IP address blocks: 2600:a400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:85:8c:71:02:0c:48:c9:f6:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=e6fc8af4-438b-4075-a016-d44a20afbda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:74:e4:34:1f:97:37:f7:a2:f8:47:99:13: cc:d1:3c:f0:15:b4:6f:44:2d:99:b2:9b:28:0f:63: 76:da:93:c7:92:35:da:62:61:24:f8:d9:e9:df:8d: a8:81:32:0b:0a:5c:c6:98:40:7c:74:4f:49:32:c1: 97:33:c2:d3:5b:55:b7:05:a7:32:d3:b3:7a:92:1d: c0:6f:1f:0b:91:e1:5b:fa:2e:12:a3:76:d7:2d:77: a7:ea:1e:7b:b3:78:e8:8d:ba:b5:62:77:3c:53:2d: 9b:63:cc:61:5d:c7:d6:7e:d0:a5:e3:65:db:93:0a: cf:2b:93:28:e1:ca:17:a1:f4:3f:14:fd:eb:bd:8e: 36:50:1d:02:77:5f:d0:6d:c4:cd:44:5f:99:cc:bf: 64:2c:f9:86:aa:dd:d0:ad:0d:7f:93:d8:2b:6f:fe: 50:2c:9f:a2:ee:55:62:f3:c3:64:12:36:55:9e:5e: 08:b5:ea:aa:27:77:22:8b:64:34:4b:44:50:c4:9c: df:97:c4:46:07:37:fb:a8:49:78:b1:b8:13:fe:e6: ec:86:ff:b3:4a:de:4c:f3:c4:e4:33:0e:73:1a:c9: 5b:54:42:0f:05:8b:d6:47:ab:2f:dd:64:bf:34:a1: ba:fa:f7:89:d7:a6:7d:ff:e9:e5:cc:de:f6:39:c3: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:14:1A:61:27:9A:CC:E2:4F:12:27:79:91:D8:41:6D:2B:05:0E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv6: 2600:a400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4b:e3:c4:09:fe:2d:8a:7d:31:a2:95:68:8b:37:db:11:a7: 7d:77:b9:6d:83:46:5a:1e:ea:6e:bf:47:23:ea:60:a8:0a:27: 5e:93:64:53:61:01:f1:62:3b:ee:4d:00:dc:f1:2d:90:3b:ea: 50:67:7d:56:2a:24:23:4e:0e:1f:61:95:cf:66:78:bf:a1:34: 07:a8:b8:27:71:1c:77:10:8a:22:93:22:05:c0:95:4a:c6:82: 22:50:4e:27:33:90:d1:21:87:7e:39:0b:51:e9:00:a0:08:ea: 72:2a:f3:dd:a1:38:60:71:98:6d:1a:99:78:f2:66:76:9e:4f: fa:e0:b4:a8:1b:52:b1:07:26:9c:1b:39:85:1c:56:98:5a:49: 06:74:be:e0:36:9f:fe:ae:12:1f:d3:93:94:8f:78:20:c8:e4: 6b:56:2e:73:7d:31:03:13:2b:0e:19:2f:d9:15:d0:72:3a:4a: 76:c1:0c:53:d2:6d:46:7f:c7:f1:25:e3:e5:32:28:84:7e:e4: e8:ab:27:92:3b:b9:9b:4b:15:0f:ce:72:28:7c:59:df:26:f6: da:15:7d:75:3c:b0:b9:c8:d8:3a:d9:f1:97:f9:42:e9:2e:2e: 3f:93:67:41:40:d4:90:63:f1:07:e3:5f:2a:7b:0a:94:34:2a: 35:d4:94:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1CL4WMcQIMSMn2owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZTZmYzhhZjQtNDM4Yi00MDc1LWEwMTYtZDQ0YTIwYWZiZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmld05DQflzf3ovhHmRPM0TzwFbRvRC2Zspso D2N22pPHkjXaYmEk+Nnp342ogTILClzGmEB8dE9JMsGXM8LTW1W3Bacy07N6kh3A bx8LkeFb+i4So3bXLXen6h57s3jojbq1Ync8Uy2bY8xhXcfWftCl42XbkwrPK5Mo 4coXofQ/FP3rvY42UB0Cd1/QbcTNRF+ZzL9kLPmGqt3QrQ1/k9grb/5QLJ+i7lVi 88NkEjZVnl4IteqqJ3cii2Q0S0RQxJzfl8RGBzf7qEl4sbgT/ubshv+zSt5M88Tk Mw5zGslbVEIPBYvWR6sv3WS/NKG6+veJ16Z9/+nlzN72OcPu0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOYUGmEnmsziTxIneZHYQW0rBQ7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvYTJkNWRiMGItMjAwZC0z NjRkLWE0MTItYzUwZDc2YmZmYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgCkADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZS+PECf4tin0xopVoizfbEad9d7ltg0ZaHupuv0cj6mCoCidek2RT YQHxYjvuTQDc8S2QO+pQZ31WKiQjTg4fYZXPZni/oTQHqLgncRx3EIoikyIFwJVK xoIiUE4nM5DRIYd+OQtR6QCgCOpyKvPdoThgcZhtGpl48mZ2nk/64LSoG1KxByac GzmFHFaYWkkGdL7gNp/+rhIf05OUj3ggyORrVi5zfTEDEysOGS/ZFdByOkp2wQxT 0m1Gf8fxJePlMiiEfuToqyeSO7mbSxUPznIofFnfJvbaFX11PLC5yNg62fGX+ULp Li4/k2dBQNSQY/EH418qewqUNCo11JQM -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:45 2026 by rpki-client